last executing test programs: 14m56.952911375s ago: executing program 32 (id=86): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 14m38.972671818s ago: executing program 33 (id=164): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m23.614602555s ago: executing program 34 (id=1049): timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x7, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 10m51.052649804s ago: executing program 35 (id=1323): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4, 0x0, 0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0xa, 0x1004, @mcast2}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001080)="671723d7c6012c", 0x7}, {&(0x7f0000000200)="9efe80000000000000dfe52c1f51218206f5abfd2a00"/32, 0x20}], 0x2}, 0x0) 8m7.99431147s ago: executing program 9 (id=2177): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000340)={0x0, 0x2, r4, 0x400, 0x80000}) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f0000000040)={'raw\x00', 0x0, [0x9, 0x7, 0x6dcf, 0x8, 0x800]}, &(0x7f00000000c0)=0x54) 8m4.710179118s ago: executing program 9 (id=2188): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x65, 0x24, 0x1, 0x70bd2c, 0x25cfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfffb}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m3.628724452s ago: executing program 9 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='2', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x400, 0x6, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x46}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x90}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x60040c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m0.302958775s ago: executing program 9 (id=2201): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(0xffffffffffffffff, 0x0, 0x16) faccessat(0xffffffffffffffff, 0x0, 0x81) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@struct={0x3, 0x1, 0x0, 0x4, 0x0, 0x3ff, [{0x3, 0x3, 0x1500}]}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000040)=""/150, 0x36, 0x96, 0x1}, 0x28) 7m53.051679257s ago: executing program 9 (id=2227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m52.170706123s ago: executing program 36 (id=2227): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m3.753015888s ago: executing program 7 (id=2736): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x840, &(0x7f0000000380)={[{@lazytime}, {@uqnoenforce}, {@nolargeio}, {@prjquota}, {@nogrpid}, {@allocsize={'allocsize', 0x3d, [0x30, 0x33, 0x6d]}}, {@largeio}, {@pqnoenforce}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp") fstat(r0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1, 0x0, 0x800000401, 0x4, 0xf, 0xaa1}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x2, 0x3d67}) fcntl$lock(r4, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x9}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20044841}, 0x0) 4m57.851598076s ago: executing program 7 (id=2748): ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@multiplanar_overlay={0x3, 0x3, 0x4, 0x2, 0x2, {}, {0x5, 0x2, 0x5, 0x4, 0x3e, 0x4, "35f46ecb"}, 0x9ab, 0x3, {0x0}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r4, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r4, 0x0, 0x40000004, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m56.798353528s ago: executing program 7 (id=2752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a051200000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a31000000000800054000"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 4m56.356726353s ago: executing program 7 (id=2760): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='2', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, 0x0, 0x400, 0x6, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x46}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x90}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x1c}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x24}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x60040c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f00000003c0)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m52.877597655s ago: executing program 7 (id=2765): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x8000, 0x5], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x20, 0x10012, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xc6b6f10a77087ab1, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 4m49.739746188s ago: executing program 7 (id=2780): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e000100"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000ac0)="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", 0x41d, 0xfffffffffffffffd) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x20}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x600}}}}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m49.046743964s ago: executing program 37 (id=2780): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e000100"], 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) recvmmsg(r3, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000ac0)="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", 0x41d, 0xfffffffffffffffd) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x20}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x600}}}}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m28.693668485s ago: executing program 8 (id=2856): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 4m27.540235774s ago: executing program 8 (id=2860): sched_setscheduler(0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendto(r1, &(0x7f0000000100)="0700bad5da0f7abb94ae529561beed4fbbaba97564c5f39e644541bd3a45cb9835bb2bff7fb568c90f15682d1efb94ac44443ff43aeecb3f5641f57198628519f8fb26ff23ad9413c2fef9d765ff2079940ce299bfb474772f2e6e153a474d5a6391b0", 0xfffffffffffffe68, 0x404c8d5, 0x0, 0xfffffeeb) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000800)='&', 0x1}], 0x1}}], 0x1, 0x4000000) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) ftruncate(0xffffffffffffffff, 0x7000000) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x10, 0x803, 0x0) 4m25.416202203s ago: executing program 8 (id=2867): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffdff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0xc, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x52, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x4, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x7fff, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0xfffffffd, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x1, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x7, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 4m24.629715886s ago: executing program 8 (id=2871): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/234, 0xea) 4m22.84219577s ago: executing program 8 (id=2875): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_emit_ethernet(0x66, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m21.737871748s ago: executing program 8 (id=2877): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) setns(0xc9, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x800, 0x149) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000039}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 4m21.130156922s ago: executing program 38 (id=2877): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x15f) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) setns(0xc9, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000180)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x800, 0x149) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x40000039}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") 1m19.94815411s ago: executing program 4 (id=3292): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x4000)=nil) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x1c0002, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r2, &(0x7f00000000c0)=@other={'unlock', ' ', 'io+mem'}, 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3ff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) timer_create(0x0, 0x0, &(0x7f0000000300)) r3 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000680)='\xec\xd2=(L\x9f\x1c&\xb7\x98\f\x87\xcf\xdb\xb4\xdc.\xc1\xec\xa3\x04\xa2\xb8H\xdc#\x06\npr:\x95\xb9\xbf7\xe6Z\x8aX\xbc\x1d\xd5\x15\x93\xd1\xadC\x18V\xbaO~\xfc\xaf\xce\x88+t\xb0\xf1\x8d;\xbd8(\xca\xc6%\xfcB\xea\x04<\x10#,\x05\xd4\xc9;\x17.\xc3\x13*]\x1crij', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003200)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r1, &(0x7f0000000040)=0x47a, 0xa) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000240)={{r1, &(0x7f0000000100)='(+(:),\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x401, 0x1f16bb4a]}, {0x4, 0x80, 0x7, 0x800}}, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x1}, {[0x5, 0xf59, 0x6, 0x6]}, 0xfffffffc, 0x30, &(0x7f0000000200)=""/48}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000003740)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, &(0x7f0000001100)=[{&(0x7f0000000200)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000003200)=[{&(0x7f00000000c0)="83527807", 0x4}], 0x1}}], 0x2, 0x4000000) r4 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r4, 0x0, 0x0, 0x42, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r7, 0xfffffffe, 0x20}, 0xc) keyctl$describe(0x6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)={r7, 0xff00, 0x8, [0x3, 0x8, 0x1, 0x5, 0x2, 0x0, 0x2, 0xf]}, 0x18) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x1}, 0x1) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc634121516b9975d}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x74, r9, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_FAMILY={0x5, 0xd, 0x2}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_FLOW={0x6, 0x6, 0x5}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}]}, 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) getsockopt$bt_BT_VOICE(r8, 0x112, 0xb, 0x0, &(0x7f0000000080)) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000540)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000040)={0x0, 0x21, &(0x7f00000002c0)={&(0x7f0000000180)={0x38, r12, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x7a, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 1m12.729305244s ago: executing program 4 (id=3303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m12.590505728s ago: executing program 4 (id=3306): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000)={[{@discard}, {@barrier}]}, 0x3, 0x481, &(0x7f00000004c0)="$eJzs3M1vG0UbAPBnN3Hy5m0hoZSvlo9AQVQIkqYt0AMHQCBxKAIJDnC0klCVpgU1QaJVJFIO5YQQEnfEkX+BE1wQ4oTEFe6oUoVyacvJaL27ie04bt3acYt/P8n1zH5k5vHu2M/u2A1gaE1n/yQRuyPij4iYzKvNG0znT1fXV+evra/OJ1GrvfN3Ut/uyvrqfLlpud+uxkoksb9Nu8vnzp+qLi0tni3qsyunP55dPnf+uZOnqycWTyyeOXzs2NEjcy++cPj5W4xwz1v5c1rU33j/6zePf9kUf0scPTLdaeVTtVqPmxusuxrKowPsB90ZKY5XpT7+J2Ok4ehNxuufb1Q+G1AHgb6p1Wq1XduvXqsB/2FJNNcNeRgW5Qd9ef1bPI83JgEv9zUDGazLr+QXQFncV4tHvmZ0445BpeX6tpemI+K9tX++zR7R8T5E0qceAADD5scs/3k2y3ZW57PcYzP/SOP+hu3uLuaGpiLinojYExH3xpnYGxH3RdS3fSAiHuyy/YZJknqaeWV9rCX/SS/ddHA3IMv/XirmtprzvzL7i6mReu1cXolK8sHJpcVDxWtyMCrjWX2uQxs/vfb7V9uta8z/skfWfpkLFv24NDrevM9CdaV68xE3u3whYt9ou/iTjZmALPN8KCL2tfsD6fXbOPnM9w9vt+768XfQg4mm2ncRT+fHfy1a4i8lnecnZ/8XS4uHZsuzYqtff7v49nbt31L8PZAd//+3Pf834p9KGudrl7tv4+KfX2w7tzpdKQpdnP9r1ZXqWPJuvTxWLPu0urJydi5iLDmed7px+eHNfct6uX0W/8ED7cf/nth8JfZHRHYSPxIRj0bEY8WxezwinoiIAx3i/+XVJz9sXTZRxn8bHP+Fro7/ZmEsmpekbbbJCiOnfv6hqdGpzWIR/7XO739H66WDxZIbef/b2ov2hVt9/QAAAOBOkEbE7kjSmY1yms7M5N/h35tPfWc+ObOQ/0ZgKippeadrsuF+6FxxWZ/XL0RE/tWCcv2RSOv3jb8ZmajXZ+Y/WloYaOTArm3Gf+avkUH3Dug7P9iC4WX8w/DqOP4rO9cPYOdtGf8dx/x4X/sC7Kw2n/8Tg+gHsPPa5f/+vx8YDi3j37QfDBH3/2F4Gf8wvIx/GErLE3H9H8lvFCoR0bqq/Es3sPvNFCYjuunh7VOIym3Rjb4VIu17E2P9PbX6VkjuwD5vKQzuPQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCX/g0AAP//uvzMag==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setreuid(0x0, 0xee00) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x400cc4, &(0x7f0000000340), 0x5, 0x7a7, &(0x7f0000001180)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000500)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000f40)=ANY=[], 0x0) (async) syz_emit_ethernet(0xfe4f, &(0x7f0000000f40)=ANY=[], 0x0) 1m10.011299183s ago: executing program 4 (id=3310): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r2 = epoll_create1(0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00') getdents(r3, 0xffffffffffffffff, 0x7a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f042, 0x7}) 1m8.467373142s ago: executing program 4 (id=3319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x3, 0x6, 0x18, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x34, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @mss={0x2, 0x8}, @window={0x3, 0x401, 0x8002}, @sack_perm, @timestamp, @timestamp], 0x6) 1m7.78322314s ago: executing program 39 (id=3319): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x2, 0x3, 0x3, 0x3, 0x6, 0x18, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x34, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfdfffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x2}, @mss={0x2, 0x8}, @window={0x3, 0x401, 0x8002}, @sack_perm, @timestamp, @timestamp], 0x6) 43.644308169s ago: executing program 3 (id=3409): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x5, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x7c}}, 0x44050) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x1ac95770, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x176}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 43.182483095s ago: executing program 3 (id=3414): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) 26.607480683s ago: executing program 0 (id=3459): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a42, 0x42) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x1c1) pwritev2(r5, &(0x7f0000000540)=[{&(0x7f0000000080)="ff", 0x1}, {&(0x7f00000005c0)="f449761dd216ca99daff9c196d86891a72afec22e0527a894fe0cf5c8af8e1117e9afea1b4781c5d499affe935a0df2526502662fca583ffd15a6c6c880af28d2e36c53e6f0dcbd35e87fbcc21d58740e571e94ebc8ca2073d28547cf34ebb5f236ed62b27f1e0e276e27c4a4106606b31a612accd7a047bc2497e837ae3fbff3d5dbbfae69d4d5e5d36bfa4c4be440ba278a9a6a9b4d9504de7e145dff73a5040996afc6097017d75d2fc0984ec198f44299f58e81b9b257b5867c6295c21d308aaf3c6df4c137547b25ed2c75feca08edd3ecf650305fe6d3798cde066c5d7e334", 0xe2}, {&(0x7f0000000280)="e719ea6410746718ded48d6d7c2ccb965d74595932a39c8eca5617a332ff689b4c82ca92c8c3ec2939d51a9a721970d6608a0acc2058c8e867f8ffe073ab951f26ab0b080d1efab5ec324ea886a5115bc0b073", 0x53}, {&(0x7f0000000300)="ecc4b3f7f7fcc76ad5e06eabd734bf6ce69c1e97f255f207c6442863186043d3a5708bceffed589af649fdbd593b88c79f304e4327401a9a65b6061f2759d623bc8842ae707486fda06f68daf5f85580a5dd64ce83de1527e5aff1a7cf4bbe3552d164224f7b011f00d35fb03ec76ac57994e8ea9c76ce606817bd", 0x7b}, {&(0x7f0000000380)="d97b64a0cec7394c98328fb770cc2b959a6df50634dc32e60ef86c7e7273d42c5e1252f71531fdff82918d1464a8409ef085b0daec7b922d2bfad1e91e3b34e250282173b834db895e9d8d32d5b9898d5f0040f6598667c7a46ff9ebefa2f2ac3689f0d2272b0537d293b6de80f64f063c0d005fa6a09600070f9af6001d2dc55106d324569c36616b445365549db89864cd1278dfabb39b239d8126a9a7302d340ec0b8c0008b3ccb0fd9dc0ec13d18fd5d412cf9a641aed97a7b48c4870d390be452981260c2c13ebc4fddd36468c159bf585c6867d5c19ae9fa45f268ab5065c108b0d0f2fcba", 0xe8}, {&(0x7f0000000480)="f37bc40656478b562858a508c16550db8d7567ee661ce7b8c84f470d0a4cfa875af89f816d6524bc6b003af9df5e45000abbeb8e74131de7d802341990a108de09cbd0d00aeb02d6103b21d376a8283a41eeb5f628803665a8153dbc2b97275b68eb9cb107df5aac0e8c47790529b786a8cdfa35e2f526299c172c8e12bb6b4e45ff64eaa40a09504fbfc7b9e276a2f8bae47f63869e", 0x96}], 0x6, 0x3fffc, 0xfffff804, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x2000) (async) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f00000001c0)) 26.026245548s ago: executing program 0 (id=3462): gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) read(r0, &(0x7f0000002780)=""/4067, 0xfe3) 23.594279039s ago: executing program 0 (id=3468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='2', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x0, 0x400, 0x6, 0x25dfdbfd, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x46}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x90}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x24}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x60040c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x60000526) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f00000003c0)='dummy_udc.0', 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.81730446s ago: executing program 0 (id=3477): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@noinit_itable}, {@errors_remount}, {@oldalloc}, {@jqfmt_vfsold}]}, 0x1, 0x4d4, &(0x7f0000000880)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fdatasync(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x2, 0x444b, &(0x7f0000004480)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r3, 0x104, 0x1) getdents64(r3, 0x0, 0x4f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x1, 0x1, 0xbe}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1, 0x8, 0x13, r5, 0x20000000) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r10, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r10, &(0x7f0000000400)={0x50, 0x0, r11, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x2, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x10000, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0x101, r12, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x2, {0x7, 0x0, 0xd04, 0xfffffffffffffffc, 0x1, 0x100000, {0x0, 0xa, 0xfffffffffffffffd, 0x3, 0x4, 0x6, 0x4, 0x4, 0x4, 0x2000, 0x101, r12, r13, 0xf0ee, 0x9c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x16a) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7bd4531b, 0xfffffff8, 0x7ec}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040084) 17.997571949s ago: executing program 1 (id=3480): syz_open_dev$video(&(0x7f0000000000), 0x80000000, 0x402) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) close_range(r2, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x64) pidfd_send_signal(r3, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r3, 0x0, 0x40000004, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.437253069s ago: executing program 6 (id=3488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88010}, 0x20000000) r1 = epoll_create1(0x80000) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f0000000900)={0x6, 0x30, [0x2, 0x0, 0x657, 0x9], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1236, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0xf9, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x8001, 0x0, 0x1, {0x22, 0x2ff}}, {{{0x9, 0x5, 0x81, 0x3, 0x48, 0x2, 0x0, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x6, 0x9, 0xe}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x40, 0x7c, 0x3c, 0x40, 0x79}, 0xae, &(0x7f0000000180)={0x5, 0xf, 0xae, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "63d14c987e8343ba00f038e021a1587a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x5, 0xe, 0xfff, 0xc8}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "323a6c8c9d221951c60f6b181bc0ff6b"}, @generic={0x73, 0x10, 0x4, "9bbcb66a00654bd0375ba4543f819884e2b9dcabce0685404b59a20a95a78fbebd004cdc9ab214638e472eaed30313c3bbbd9217faec1b7d42cbf641c63f8621c211b1a606f6c7059db89ef20d13ee5fa8c1f900d806cc7b4973833edc7a9eaf71c5fd052e224f0ec05a779d1b1cb250"}]}, 0x5, [{0x83, &(0x7f0000000240)=@string={0x83, 0x3, "7835f8848fd73244f19a48397f5929eb22ed531f8ab791aa9e93ed342a92da7981a16c4762b63b2ee4c1a30095e4bb4bf36932eb2516eb2a55521bd5a60698202ca2b4f5646d95b11af6d0d5755b44f7d1216ae1bd9eff7ab84a48e6b50096ffa31611c560c82b3ee78e8862d0ba92f5e56ce952d103a960662245327dfaad4e13"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40d}}, {0xb1, &(0x7f0000000400)=@string={0xb1, 0x3, "498e5bbccba4e84f4dfa99110ffffd621befb0cb3191b971118bf7890de9677e9ee90ba01bad1d4f6a0c5e9a443f92f20123e11a219a9fda41e2b9a837f12f37bcaccfc74bfac8617b6b57285d151af08b46784f2373a6e3c6d158e22529703ce75404dd5065ea127775b71e8a618ec7c5ad54979af70b9c066fc0c4c6d0c4c0e18e2488e8ced8a04fc64e02cf923dffaff691008e62abfa7fe44e7e1abb70c182bf25854f5750dad6d7367a08ad81"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x813}}]}) syz_usb_control_io$hid(r4, &(0x7f00000006c0)={0x24, &(0x7f0000000580)={0x40, 0x9, 0x18, {0x18, 0x2, "2791aea531487b596f4dbc0c3f688c68454429b82cb1"}}, &(0x7f00000005c0)={0x0, 0x3, 0x62, @string={0x62, 0x3, "ba38fffdbcd8c3c38190269e4ed95bb4b1d2a20a9c090922e057f80f471c6ef037464f2cb72ad10bce068e67b89a1b69ccd116bcbcdcc871ef5213b4fcaed4a571b954b986c8e06ad862dc9e8a69a3b270e0586b664250766dfabb8e8abef82b"}}, &(0x7f0000000640)={0x0, 0x22, 0x1c, {[@main=@item_4={0x3, 0x0, 0xb, "97a7c6d3"}, @main=@item_012={0x2, 0x0, 0xb, "16af"}, @local=@item_4={0x3, 0x2, 0x9, "436c944f"}, @main=@item_4={0x3, 0x0, 0xc, "d73d2979"}, @global=@item_4={0x3, 0x1, 0x5, "337c8259"}, @global=@item_4={0x3, 0x1, 0x2, "9fe0d5e8"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x148}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x0, 0x15, 0x2c, "a84006b3af45dcad2ebc609ebd192ac5a7c73a0b411118cbb14810606b8248ee6ac7d5835b70aa605ff243fa"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x74}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x50}, &(0x7f00000007c0)={0x20, 0x1, 0x9f, "820a244e1de3bec72187345f75fb2c9f15e03c9a93eb3cb4994ddbeb029edc03c2fd91ec8b37b3d35abb5780bb3739c9b493ad78bb827eb582b107c7f961c5ad581c5f891f5a332a6f10a3b698b32d3988380d0caa4c28ea1932fcb1fd5f1bcc3b8e53d95378e384d8e6f5c16c4a15f2e2769c0a06a348406439d9715ce96424027f74284f0db0fc5542d98c18a178b4b1c93e4d5af4327e7da3e7c158c36a"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0xa}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYBLOB="2b03000000000000600012800b00010067656e657665000050000280050008000000000004"], 0x88}, 0x1, 0x0, 0x0, 0x41800}, 0x0) 12.121443614s ago: executing program 5 (id=3491): syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x40106153, &(0x7f0000000000)) 11.081203237s ago: executing program 1 (id=3493): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) openat(0xffffffffffffffff, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x1000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4) 9.874072084s ago: executing program 6 (id=3495): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x34) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x408c0c0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000040, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close(r7) 9.783684428s ago: executing program 5 (id=3496): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0xa102, 0x0) write$sysctl(r3, &(0x7f0000000240)='5\x00', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) bind$inet(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000905000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r6 = io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x55be, 0xa01, 0x1, 0x26f}) io_uring_setup(0x6059, &(0x7f0000000280)={0x0, 0x79f4, 0x80000, 0x1, 0x391, 0x0, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000003c0)={0x87, 0x4, 0x0, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2]}, 0x28) bind$bt_rfcomm(r8, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfe}, 0xa) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x880) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 9.65113562s ago: executing program 2 (id=3497): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0x2}, 0x38) set_mempolicy(0x3, &(0x7f0000000040)=0xc0000001, 0x3) r1 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$vim2m(0x0, 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0xc}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') fallocate(0xffffffffffffffff, 0x0, 0x2000006, 0xf50d) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x1000) 9.490100443s ago: executing program 3 (id=3418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x10, 0x2203) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x16c02, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setns(0xc9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000000c0)=0x4d12, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001ac0)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8002, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7ff, 0xe, 0xffffffffffffffff, 0xef, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 9.278940507s ago: executing program 0 (id=3498): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000002000)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x10000, 0x0) syz_usb_connect(0x5, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) 8.454466325s ago: executing program 5 (id=3499): r0 = socket$kcm(0x29, 0x2, 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x2a, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r2, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000897000/0x1000)=nil, 0x1000, 0x8, 0x11010, r4, 0xfbce2000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4) 8.314351945s ago: executing program 6 (id=3500): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00f100", 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e23, 0x4e22, 0x2, 0x1, 0x0, 0x0, 0x5, 0x18, 0xf800}}}}}}}, 0x0) 8.313190022s ago: executing program 2 (id=3501): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0xffffffffffffff25, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket(0x10, 0x3, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000027c0), 0x4924924924924c6, 0x4) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/88, 0x58}], 0x1}, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)='4b8w', 0x4}, {&(0x7f00000000c0)="92ac37d251e089ef4752ee336a1adf2d4224e634bf11c56f5ec46c7b0e5ba22b977345ebcc5eb194239c55e40651cb9132c88775c4edb443cc3acae261110738", 0x40}, {&(0x7f0000000100)="df23a06596580b26902c8c896b68388c688844b7a80cfcba18b44f790c2f8d9e3bd0730d3d89c37b72b30299a170d8dad3fd3dab55ef338ea1188e138cbe47ca5f271fa6720f794a48c61b", 0x4b}, {&(0x7f0000000180)="04f66a5e41f8aedd6ee953d4bcc7e3cdcf7fc42a6330b972b7e1077422f887260e24b295ed532d860844d1e04b5d55e3724c0359f86ca6c77efc14f9e07b5e10076f9e7688ff0e7c8d4775816b3c1ecd4f086f7068c2c22dc3d480374fc691ff1a7f874934d49687d7c00c81ece7a8fedeab404dc7b7014f0fb48e07703b8fd0d4d3b60879f71e66d29b24611c360406a1ff7bf16b48972adc63bc2c697cf8f0dae59554a8dbfccfb1a9ed1dff3275fabbcd4f2ccb779d1dcdf03740893670322f5d4aebed60773aaa74517d103b66270400dac7145218d10c97732e2807c9ec2a666e43", 0xe4}], 0x4) 8.098650249s ago: executing program 0 (id=3502): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)="b461802305624431ed3373010000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 8.046393927s ago: executing program 6 (id=3503): r0 = io_uring_setup(0x4b3c, &(0x7f00000002c0)={0x0, 0x48c9, 0x40, 0x0, 0xd1}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r2}) sysfs$2(0x2, 0x3ff, &(0x7f0000000340)=""/211) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80900, 0x0) io_setup(0x25b, &(0x7f00000001c0)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) timer_gettime(r5, &(0x7f0000000140)) socket$tipc(0x1e, 0x5, 0x0) move_pages(r2, 0x4, &(0x7f0000000080)=[&(0x7f00004a6000/0x4000)=nil, &(0x7f0000423000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f00000a7000/0x4000)=nil], &(0x7f00000000c0)=[0x3, 0x6, 0x6, 0xdfbd, 0x10, 0x8, 0xf7c, 0x9], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) io_submit(r4, 0x1, &(0x7f0000001040)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000540)='v', 0x1, 0x1}]) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 6.47410317s ago: executing program 40 (id=3502): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x20002}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000001c0)="b461802305624431ed3373010000", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 6.45979445s ago: executing program 2 (id=3505): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 6.457911203s ago: executing program 1 (id=3506): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x101382) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) r1 = syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f00000001c0)={0x5, 0x2, 0x6, 0x80, 0x8001, 0x1, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3ff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setrlimit(0xf, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000280)={0x0, 0x1, @start={0x9}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r2, 0xc008644e, &(0x7f00000000c0)={0x9}) 6.45707239s ago: executing program 3 (id=3507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bond_slave_0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce24, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x4a, 0x200, 0x4, 0xed5, 0x9, 0x7, 0x2}, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r3, &(0x7f0000001dc0)='-', 0x1) splice(r2, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x401) 5.566548231s ago: executing program 3 (id=3508): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 5.243049557s ago: executing program 2 (id=3509): r0 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r0, &(0x7f0000000700)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0xc351, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000d00)='hello', 0xfdef}], 0x1, &(0x7f0000000e00)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'dt2815\x00', [0x2, 0x400, 0x9, 0x9, 0x2, 0x43, 0xffffffff, 0x8, 0x1, 0x81, 0x80000001, 0x8, 0x7fff, 0x8, 0x80, 0x400, 0x1, 0x6797, 0x7, 0x4, 0x7, 0xa5, 0x2, 0x5, 0x8, 0x10000, 0x800, 0x1, 0xf, 0x6, 0x7, 0x401]}) 4.910572797s ago: executing program 5 (id=3510): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffff) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e000100"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2) recvmmsg(r2, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x400100a0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000ac0)="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", 0x41d, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x20}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x600}}}}}}}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.86637186s ago: executing program 6 (id=3511): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x180880c, &(0x7f0000000140)=ANY=[@ANYBLOB="75740300000000000000000000ff", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000016,errors=remount-ro,fmask=00000000000000000000100,iocharset=ascii,namecase=1,namecase=1,\x00'], 0x1, 0x152f, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/buffer_subbuf_size_kb\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="720ac4ff000000007110ad000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) write(r0, &(0x7f0000000100)='8\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x85}, 0x9c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) unlinkat(r0, &(0x7f00000001c0)='./tracing\x00', 0x200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) unshare(0x2a020600) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r4, &(0x7f0000000000)=0x800, r5, 0x0, 0x2, 0x6) r6 = accept$inet(r2, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0xfffffcde) sendto$inet(r6, &(0x7f0000000100)="10f6fdf09f9784384fc500e855f315a63e32fd290f43a51f884545ff7a12a94bcd9a16a29215eb4c910705e55166fc5cb51e2595e1c068ce81", 0x39, 0x4, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r7 = socket(0x1, 0x803, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 4.721089467s ago: executing program 2 (id=3512): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20008084) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020800) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0xfffffffd, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cfeffff4900010025bd7000fcdbdf250a001000", @ANYRES32=0x0, @ANYBLOB="020019a688f3ce93e17a05030000"], 0x38}, 0x1, 0x0, 0x0, 0x4000054}, 0x84) statx(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', 0x6000, 0x8, &(0x7f00000020c0)) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r11, 0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r12, &(0x7f0000000480)={0x2020}, 0x2020) 4.198319236s ago: executing program 1 (id=3513): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x4000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x7, 0x3, 0xd, 0x3, 0x2, r2}) r4 = syz_clone(0x10080800, &(0x7f0000000300), 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = syz_open_procfs(r3, &(0x7f0000000380)='net/connector\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800c30, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000000)='./file0\x00', 0x40) 3.783952809s ago: executing program 5 (id=3514): socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="12", 0x1}], 0x1}, 0x1) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711025000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 2.348216017s ago: executing program 6 (id=3515): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x58a, &(0x7f0000000740)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004}, 0x4000000) write$binfmt_script(r1, &(0x7f00000008c0), 0xfecc) r5 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) open(&(0x7f00000003c0)='./file3\x00', 0x14507e, 0x148) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) bind$x25(r5, &(0x7f0000000440), 0x12) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) pselect6(0x40, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xffffffffffffe198, 0x7, 0xfffffff9, 0x1}, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 1.782847993s ago: executing program 1 (id=3516): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20008084) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4020800) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0xfffffffd, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x1d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) read$FUSE(r1, &(0x7f00000027c0)={0x2020}, 0x2020) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cfeffff4900010025bd7000fcdbdf250a001000", @ANYRES32=0x0, @ANYBLOB="020019a688f3ce93e17a05030000"], 0x38}, 0x1, 0x0, 0x0, 0x4000054}, 0x84) statx(0xffffffffffffff9c, &(0x7f0000002080)='./file0\x00', 0x6000, 0x8, &(0x7f00000020c0)) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r11, 0x80000000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r12, r13, r14) 1.694550284s ago: executing program 3 (id=3517): syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000c80)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x74}}}}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$NILFS_IOCTL_CHANGE_CPMODE(0xffffffffffffffff, 0x40106e80, &(0x7f00000013c0)={0x5}) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 1.691569701s ago: executing program 2 (id=3518): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="bbdf26bd39d44d414889a5591a58853c6677cde7057000fedbdf251f00000052faad35fc53821b3320e2dd9db4cb1cd127d4966a79a7f7948c5d64540600910a73c7d3a503a2017c690d07255c16ec0a751fd64511b2c7a11908b4485bd19df48d70cdfa45ff551a97b15e59fd3190308b"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_read_part_table(0x5e8, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) socket$inet6(0xa, 0x80000, 0x5) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r5, &(0x7f00000000c0)=""/3, 0x3, 0x317, 0x0, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x7b15d4bd, 0x1, 0x4, 0x8, 0x1b, "fc6e9d130baf86b13ca84f516b31f17dba228b"}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) setns(0xc9, 0x0) r6 = socket(0x1f, 0x5, 0x8) bind(r6, &(0x7f0000000800)=@generic={0x1f, "0000000000000100"}, 0xa) setsockopt(r6, 0x112, 0x7, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000000)=0x9, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000180)="3300000008000102030405060101", 0xe) 675.775854ms ago: executing program 5 (id=3519): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 0s ago: executing program 1 (id=3520): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x396) r2 = fanotify_init(0xf00, 0x40000) r3 = fanotify_init(0x20, 0x1) fanotify_mark(r3, 0x541, 0x1001, r1, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill1/soft\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='1\n', 0x2) kernel console output (not intermixed with test programs): h3 [ 736.342397][T15423] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 736.344898][ T5747] cxacru_cm: 16 callbacks suppressed [ 736.344922][ T5747] cxacru 7-1:1.0: send of cm 0x91 failed (-71) [ 736.344946][ T5747] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 736.344962][ T5747] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 736.357705][T15152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 736.365932][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 736.390475][T15423] md: array md0 already initialised! [ 736.460019][T15432] netlink: 'syz.2.2850': attribute type 1 has an invalid length. [ 736.471649][T15420] netlink: 'syz.1.2848': attribute type 39 has an invalid length. [ 736.473300][ T5747] cxacru 7-1:1.0: probe with driver cxacru failed with error -71 [ 736.502748][ T5747] usb 7-1: USB disconnect, device number 6 [ 736.590558][T15432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.663583][T15435] bond1: (slave geneve2): making interface the new active one [ 736.678333][T15435] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 736.746382][T15152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.777938][T15152] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.838607][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.838812][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.374557][ T9908] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.374692][ T9908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.387730][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 740.541781][T15500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 740.610736][T15500] netlink: 'syz.1.2865': attribute type 39 has an invalid length. [ 741.105003][T15489] loop6: detected capacity change from 0 to 32768 [ 741.118213][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2866'. [ 741.120392][T15489] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 741.123092][T15489] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2862 (15489) [ 741.185651][T15489] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 741.185690][T15489] BTRFS info (device loop6): using crc32c checksum algorithm [ 741.210305][T15511] netlink: 'syz.1.2866': attribute type 39 has an invalid length. [ 741.369050][T15489] BTRFS info (device loop6): rebuilding free space tree [ 741.472346][T15152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.587260][T15489] BTRFS info (device loop6): disabling free space tree [ 741.587337][T15489] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 741.587365][T15489] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 741.643228][T15489] BTRFS info (device loop6): enabling ssd optimizations [ 741.643260][T15489] BTRFS info (device loop6): turning on async discard [ 741.643289][T15489] BTRFS info (device loop6): force clearing of disk cache [ 741.643311][T15489] BTRFS info (device loop6): use zstd compression, level 3 [ 742.154516][T15554] loop8: detected capacity change from 0 to 512 [ 742.270943][T15554] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -13 [ 742.270996][T15554] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.2871: inode #15: comm syz.8.2871: iget: illegal inode # [ 742.271032][T15554] loop8: lost filesystem error report for type 5 error -117 [ 742.272949][T15554] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2871: couldn't read orphan inode 15 (err -117) [ 742.272987][T15554] loop8: lost filesystem error report for type 5 error -117 [ 742.278125][T15554] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.576155][T15554] overlayfs: upper fs needs to support d_type. [ 742.991948][ T30] audit: type=1326 audit(1790868104.480:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.992313][ T30] audit: type=1326 audit(1790868104.480:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.992576][ T30] audit: type=1326 audit(1790868104.490:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.992856][ T30] audit: type=1326 audit(1790868104.490:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.993217][ T30] audit: type=1326 audit(1790868104.490:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.993482][ T30] audit: type=1326 audit(1790868104.500:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.993741][ T30] audit: type=1326 audit(1790868104.500:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.994205][ T30] audit: type=1326 audit(1790868104.500:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.994443][ T30] audit: type=1326 audit(1790868104.500:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 742.994737][ T30] audit: type=1326 audit(1790868104.500:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15561 comm="syz.1.2872" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70aef9e159 code=0x7ffc0000 [ 743.862522][ T9190] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 743.866193][ T9190] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 743.914002][T15152] veth0_vlan: entered promiscuous mode [ 743.941323][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 743.980928][T15152] veth1_vlan: entered promiscuous mode [ 744.042910][ T6134] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 744.129280][T11059] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.150107][T15152] veth0_macvtap: entered promiscuous mode [ 744.250769][T15152] veth1_macvtap: entered promiscuous mode [ 744.371820][T15152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.406744][T15152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.479491][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.482340][ T252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.482391][ T252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.482437][ T252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.074518][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.074545][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.280352][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.280378][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.906274][T15601] 9p: Bad value for 'wfdno' [ 746.048954][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.049019][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.049611][ T1304] aoe: packet could not be sent on vrf0. consider increasing tx_queue_len [ 746.738963][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 746.745759][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 746.755410][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 746.771739][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 746.772429][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 747.154602][T15610] loop6: detected capacity change from 0 to 32768 [ 747.155676][T15610] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 747.164184][T15610] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2882 (15610) [ 747.191614][T15610] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 747.191649][T15610] BTRFS info (device loop6): using crc32c checksum algorithm [ 747.234734][T15614] loop5: detected capacity change from 0 to 2048 [ 747.327015][T15610] BTRFS info (device loop6): rebuilding free space tree [ 747.347045][T15610] BTRFS info (device loop6): disabling free space tree [ 747.347115][T15610] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 747.347142][T15610] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 747.352199][T15610] BTRFS info (device loop6): enabling ssd optimizations [ 747.352264][T15610] BTRFS info (device loop6): turning on async discard [ 747.352284][T15610] BTRFS info (device loop6): force clearing of disk cache [ 747.352313][T15610] BTRFS info (device loop6): use zstd compression, level 3 [ 747.443064][T15614] loop5: p1 p2 p3 p4 [ 747.443064][T15614] p1: [ 747.443290][T15614] loop5: p1 size 67110656 extends beyond EOD, truncated [ 747.472302][T15614] loop5: p3 size 134217728 extends beyond EOD, truncated [ 747.484779][T15614] loop5: p4 size 4278190080 extends beyond EOD, truncated [ 747.494717][T15614] loop5: p5 size 67110656 extends beyond EOD, truncated [ 747.514812][T15614] loop5: p6 size 134217728 extends beyond EOD, truncated [ 748.876755][T13501] Bluetooth: hci2: command tx timeout [ 749.223709][ T6134] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 750.916734][T13501] Bluetooth: hci2: command tx timeout [ 751.056862][ T5617] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 751.896846][ T5617] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 751.901009][ T5617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.901039][ T5617] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 751.901083][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.159489][T15686] 9p: Bad value for 'wfdno' [ 753.002381][T13501] Bluetooth: hci2: command tx timeout [ 753.402705][ T5747] usb 3-1: USB disconnect, device number 5 [ 753.916299][T15704] loop5: detected capacity change from 0 to 32768 [ 753.917432][T15704] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 754.001339][T15704] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2900 (15704) [ 754.050858][T15704] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 754.050895][T15704] BTRFS info (device loop5): using crc32c checksum algorithm [ 754.424439][T15709] netlink: 'syz.6.2899': attribute type 39 has an invalid length. [ 754.517889][T15704] BTRFS info (device loop5): rebuilding free space tree [ 754.566258][T15704] BTRFS info (device loop5): disabling free space tree [ 754.566933][T15704] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 754.566961][T15704] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 754.571662][T15704] BTRFS info (device loop5): enabling ssd optimizations [ 754.571686][T15704] BTRFS info (device loop5): turning on async discard [ 754.571706][T15704] BTRFS info (device loop5): force clearing of disk cache [ 754.571728][T15704] BTRFS info (device loop5): use zstd compression, level 3 [ 755.078317][T13501] Bluetooth: hci2: command tx timeout [ 755.325649][T15743] random: crng reseeded on system resumption [ 757.175494][T15152] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 758.475556][T15773] 9p: Bad value for 'wfdno' [ 758.529541][T15606] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.529656][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.529818][T15606] bridge_slave_0: entered allmulticast mode [ 758.550636][T15606] bridge_slave_0: entered promiscuous mode [ 758.565398][T15606] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.565510][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.576507][T15606] bridge_slave_1: entered allmulticast mode [ 758.603614][T15606] bridge_slave_1: entered promiscuous mode [ 758.898867][T15606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.915567][T15606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.713418][T15783] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2912'. [ 759.942388][T15606] team0: Port device team_slave_0 added [ 759.952299][T15783] netlink: 'syz.6.2912': attribute type 39 has an invalid length. [ 759.952706][T15606] team0: Port device team_slave_1 added [ 760.312163][T15606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.312185][T15606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.312218][T15606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.314220][T15606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.314237][T15606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.314269][T15606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.357937][T15791] netlink: 'syz.1.2914': attribute type 39 has an invalid length. [ 760.373027][T15606] hsr_slave_0: entered promiscuous mode [ 760.374290][T15606] hsr_slave_1: entered promiscuous mode [ 760.375132][T15606] debugfs: 'hsr0' already exists in 'hsr' [ 760.375155][T15606] Cannot create hsr debugfs directory [ 760.545332][T15806] random: crng reseeded on system resumption [ 760.663648][T15806] Restarting kernel threads ... [ 760.664221][T15806] Done restarting kernel threads. [ 763.604723][T15833] 9p: Bad value for 'wfdno' [ 763.843444][T15830] loop3: detected capacity change from 0 to 32768 [ 763.844541][T15830] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 763.845267][T15830] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2921 (15830) [ 763.903478][T15830] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 763.903519][T15830] BTRFS info (device loop3): using crc32c checksum algorithm [ 764.086571][T15830] BTRFS info (device loop3): rebuilding free space tree [ 764.148018][T15830] BTRFS info (device loop3): disabling free space tree [ 764.148086][T15830] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 764.148114][T15830] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 764.152548][T15830] BTRFS info (device loop3): enabling ssd optimizations [ 764.152575][T15830] BTRFS info (device loop3): turning on async discard [ 764.152596][T15830] BTRFS info (device loop3): force clearing of disk cache [ 764.152619][T15830] BTRFS info (device loop3): use zstd compression, level 3 [ 764.369355][T15809] loop6: detected capacity change from 0 to 32768 [ 764.548701][T15809] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 764.706952][T15809] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop6": -EINTR [ 764.817388][T15809] XFS (loop6): log mount failed [ 765.479205][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 768.930584][T15912] md: array md0 already initialised! [ 771.461280][T15606] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.479031][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.481197][T15606] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.519272][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.524601][T15606] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.564942][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.565866][T15606] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.629265][T15606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.429895][T15928] netlink: 'syz.3.2942': attribute type 39 has an invalid length. [ 772.922612][T15606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 774.206682][T15606] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.204798][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.204910][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.235614][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.235722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.287137][T15989] loop5: detected capacity change from 0 to 32768 [ 776.288264][T15989] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 776.489826][T15989] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2956 (15989) [ 776.497863][T15989] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 776.497899][T15989] BTRFS info (device loop5): using crc32c checksum algorithm [ 777.634235][T15989] BTRFS info (device loop5): rebuilding free space tree [ 777.699451][T15989] BTRFS info (device loop5): disabling free space tree [ 777.699523][T15989] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 777.699552][T15989] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 777.704551][T15989] BTRFS info (device loop5): enabling ssd optimizations [ 777.704579][T15989] BTRFS info (device loop5): turning on async discard [ 777.704599][T15989] BTRFS info (device loop5): force clearing of disk cache [ 777.704622][T15989] BTRFS info (device loop5): use zstd compression, level 3 [ 779.699552][T16026] tc_dump_action: action bad kind [ 779.975702][T15152] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 780.174532][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 780.259592][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 780.262261][T16042] syzkaller0: entered promiscuous mode [ 780.262292][T16042] syzkaller0: entered allmulticast mode [ 780.300075][ T5961] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.310017][ T1395] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.310066][ T1395] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.310109][ T1395] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 782.614901][T16088] tc_dump_action: action bad kind [ 783.693451][T15606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.966671][T16116] loop3: detected capacity change from 0 to 32768 [ 783.967788][T16116] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 783.993100][T16116] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2980 (16116) [ 784.018825][T16116] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 784.018859][T16116] BTRFS info (device loop3): using crc32c checksum algorithm [ 784.167759][T16116] BTRFS info (device loop3): rebuilding free space tree [ 784.190135][T16116] BTRFS info (device loop3): disabling free space tree [ 784.190203][T16116] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 784.190230][T16116] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 784.220917][T16116] BTRFS info (device loop3): enabling ssd optimizations [ 784.220949][T16116] BTRFS info (device loop3): turning on async discard [ 784.220969][T16116] BTRFS info (device loop3): force clearing of disk cache [ 784.220991][T16116] BTRFS info (device loop3): use zstd compression, level 3 [ 785.337734][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 787.200806][T15232] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 787.375212][T15606] veth0_vlan: entered promiscuous mode [ 787.494002][T15606] veth1_vlan: entered promiscuous mode [ 788.702562][T15606] veth0_macvtap: entered promiscuous mode [ 788.752679][T15606] veth1_macvtap: entered promiscuous mode [ 788.896907][T15606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.961875][T15606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.151577][T11203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.168506][ T5961] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.169757][ T252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.218007][T11203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.299061][ T7289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.299083][ T7289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.604492][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.604519][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.908250][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2999'. [ 791.024352][ T9908] Bluetooth: hci6: Frame reassembly failed (-84) [ 791.156191][T16219] netlink: 'syz.6.2999': attribute type 39 has an invalid length. [ 791.242449][T16228] tc_dump_action: action bad kind [ 791.360257][T16223] loop3: detected capacity change from 0 to 2048 [ 791.630028][T16223] loop3: p1 p2 p3 p4 [ 791.630028][T16223] p1: [ 791.630250][T16223] loop3: p1 size 67110656 extends beyond EOD, truncated [ 791.777061][T16223] loop3: p3 size 134217728 extends beyond EOD, truncated [ 791.780588][T16223] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 791.782319][T16223] loop3: p5 size 67110656 extends beyond EOD, truncated [ 791.785664][T16223] loop3: p6 size 134217728 extends beyond EOD, truncated [ 793.077683][ T5616] Bluetooth: hci6: command 0x1003 tx timeout [ 793.082675][T16241] loop6: detected capacity change from 0 to 2048 [ 793.106885][T13501] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 793.238048][T16241] loop6: p1 p2 p3 p4 [ 793.238048][T16241] p1: [ 793.241048][T16241] loop6: p1 size 67110656 extends beyond EOD, truncated [ 793.903166][T16241] loop6: p3 size 134217728 extends beyond EOD, truncated [ 793.914801][T16241] loop6: p4 size 4278190080 extends beyond EOD, truncated [ 794.041386][T16241] loop6: p5 size 67110656 extends beyond EOD, truncated [ 794.081902][T16241] loop6: p6 size 134217728 extends beyond EOD, truncated [ 798.436166][T16300] loop3: detected capacity change from 0 to 32768 [ 798.437373][T16300] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 798.483115][T16300] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3017 (16300) [ 798.510858][T16300] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 798.510896][T16300] BTRFS info (device loop3): using crc32c checksum algorithm [ 798.663522][T16300] BTRFS info (device loop3): rebuilding free space tree [ 798.685388][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3018'. [ 798.733480][T16300] BTRFS info (device loop3): disabling free space tree [ 798.733552][T16300] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 798.733580][T16300] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 798.769468][T16300] BTRFS info (device loop3): enabling ssd optimizations [ 798.769501][T16300] BTRFS info (device loop3): turning on async discard [ 798.769523][T16300] BTRFS info (device loop3): force clearing of disk cache [ 798.769547][T16300] BTRFS info (device loop3): use zstd compression, level 3 [ 798.771624][T16309] netlink: 'syz.6.3018': attribute type 39 has an invalid length. [ 800.524148][T16336] tc_dump_action: action bad kind [ 800.537035][T16337] random: crng reseeded on system resumption [ 800.546011][T16337] Restarting kernel threads ... [ 800.546513][T16337] Done restarting kernel threads. [ 801.167040][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 801.703209][T16354] random: crng reseeded on system resumption [ 801.715431][T16354] Restarting kernel threads ... [ 801.715926][T16354] Done restarting kernel threads. [ 802.888219][T16378] loop3: detected capacity change from 0 to 32768 [ 802.889320][T16378] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 802.912740][T16378] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3031 (16378) [ 802.932097][T16378] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 802.932132][T16378] BTRFS info (device loop3): using crc32c checksum algorithm [ 803.363733][T16378] BTRFS info (device loop3): rebuilding free space tree [ 803.975993][T16378] BTRFS info (device loop3): disabling free space tree [ 803.976061][T16378] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 803.976087][T16378] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 803.980526][T16378] BTRFS info (device loop3): enabling ssd optimizations [ 803.980554][T16378] BTRFS info (device loop3): turning on async discard [ 803.980574][T16378] BTRFS info (device loop3): force clearing of disk cache [ 803.980597][T16378] BTRFS info (device loop3): use zstd compression, level 3 [ 804.489102][ T5747] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 804.738917][ T5747] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 804.744106][ T5747] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 804.744136][ T5747] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 804.744180][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.206212][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 805.206237][ T30] audit: type=1804 audit(1790868166.840:206): pid=16429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3042" name="/newroot/4/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3053 res=1 errno=0 [ 805.302483][ T1091] Bluetooth: hci7: Frame reassembly failed (-84) [ 805.329366][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 806.089725][ T5747] usb 6-1: USB disconnect, device number 4 [ 807.269881][T13501] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 807.322760][ T52] Bluetooth: hci7: command 0x1003 tx timeout [ 807.326091][ T5616] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 807.479395][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.479461][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 807.480013][ T1304] aoe: packet could not be sent on vrf0. consider increasing tx_queue_len [ 808.802398][T16466] loop3: detected capacity change from 0 to 2048 [ 809.129804][T16466] loop3: p1 p2 p3 p4 [ 809.129804][T16466] p1: [ 809.131036][T16466] loop3: p1 size 67110656 extends beyond EOD, truncated [ 810.109955][T16466] loop3: p3 size 134217728 extends beyond EOD, truncated [ 810.111667][T16466] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 810.114947][T16466] loop3: p5 size 67110656 extends beyond EOD, truncated [ 810.139898][T16466] loop3: p6 size 134217728 extends beyond EOD, truncated [ 813.304976][T16516] loop6: detected capacity change from 0 to 2048 [ 813.476949][ T3212] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 813.571327][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 813.607438][ T3212] usb 6-1: device descriptor read/64, error -71 [ 813.611907][T16526] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 814.606696][ T9] usb 4-1: device descriptor read/64, error -71 [ 814.999903][ T3212] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 815.079972][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 815.126687][ T3212] usb 6-1: device descriptor read/64, error -71 [ 815.216733][ T9] usb 4-1: device descriptor read/64, error -71 [ 815.280638][ T3212] usb usb6-port1: attempt power cycle [ 815.410345][ T9] usb usb4-port1: attempt power cycle [ 816.037596][ T3212] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 816.067180][ T3212] usb 6-1: device descriptor read/8, error -71 [ 816.690471][T16560] tc_dump_action: action bad kind [ 816.815940][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 817.292641][ T3212] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 817.510069][ T3212] usb 6-1: device not accepting address 8, error -71 [ 817.510393][ T3212] usb usb6-port1: unable to enumerate USB device [ 817.511035][ T9] usb 4-1: device descriptor read/8, error -71 [ 817.851386][T16575] tc_dump_action: action bad kind [ 818.749273][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 818.770233][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 818.771649][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 818.771739][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 818.771786][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.916716][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 818.916854][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 819.691018][T16600] loop5: detected capacity change from 0 to 32768 [ 819.692134][T16600] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 819.842972][T16600] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3084 (16600) [ 819.861265][T16600] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 819.861298][T16600] BTRFS info (device loop5): using crc32c checksum algorithm [ 819.875265][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3078'. [ 819.880102][ T25] usb 4-1: USB disconnect, device number 8 [ 820.010403][T16600] BTRFS info (device loop5): rebuilding free space tree [ 820.031882][T16600] BTRFS info (device loop5): disabling free space tree [ 820.031947][T16600] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 820.031973][T16600] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 820.057708][T16600] BTRFS info (device loop5): enabling ssd optimizations [ 820.057736][T16600] BTRFS info (device loop5): turning on async discard [ 820.057758][T16600] BTRFS info (device loop5): force clearing of disk cache [ 820.057780][T16600] BTRFS info (device loop5): use zstd compression, level 3 [ 820.700149][T16625] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 820.701489][T16625] udc dummy_udc.0: failed to start g1: -19 [ 820.707111][T16625] UDC core: g1: couldn't find an available UDC or it's busy [ 823.363552][T15152] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 823.796930][T15449] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 823.937327][T15449] usb 2-1: device descriptor read/64, error -71 [ 824.198959][T15449] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 824.326960][T15449] usb 2-1: device descriptor read/64, error -71 [ 824.437248][T15449] usb usb2-port1: attempt power cycle [ 824.791918][T15449] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 824.810838][T15449] usb 2-1: device descriptor read/8, error -71 [ 825.077415][T15449] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 825.103152][T15449] usb 2-1: device descriptor read/8, error -71 [ 825.212130][T15449] usb usb2-port1: unable to enumerate USB device [ 825.242971][T16644] loop3: detected capacity change from 0 to 32768 [ 825.255025][T16644] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 825.266478][T16644] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3092 (16644) [ 825.316106][T16644] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 825.316145][T16644] BTRFS info (device loop3): using crc32c checksum algorithm [ 825.354504][T16648] loop5: detected capacity change from 0 to 32768 [ 825.484032][T16648] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 825.536520][T16644] BTRFS info (device loop3): rebuilding free space tree [ 825.704003][T16644] BTRFS info (device loop3): disabling free space tree [ 825.704074][T16644] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 825.704099][T16644] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 825.768859][T16644] BTRFS info (device loop3): enabling ssd optimizations [ 825.768893][T16644] BTRFS info (device loop3): turning on async discard [ 825.768915][T16644] BTRFS info (device loop3): force clearing of disk cache [ 825.768937][T16644] BTRFS info (device loop3): use zstd compression, level 3 [ 825.798558][T16648] XFS (loop5): Ending clean mount [ 825.873153][T16648] XFS (loop5): Quotacheck needed: Please wait. [ 825.901092][T15449] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 826.038474][T15449] usb 3-1: device descriptor read/64, error -71 [ 826.147285][T16648] XFS (loop5): Quotacheck: Done. [ 826.280687][T15449] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 826.331076][T15152] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 826.447978][T15449] usb 3-1: device descriptor read/64, error -71 [ 826.562209][T15449] usb usb3-port1: attempt power cycle [ 827.086367][T15449] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 827.107551][T15449] usb 3-1: device descriptor read/8, error -71 [ 827.395394][T16709] netlink: 'syz.1.3097': attribute type 39 has an invalid length. [ 827.856698][T15449] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 827.878213][T15449] usb 3-1: device descriptor read/8, error -71 [ 827.987051][T15449] usb usb3-port1: unable to enumerate USB device [ 829.118451][T16733] loop6: detected capacity change from 0 to 64 [ 829.228933][T16733] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3102'. [ 831.019233][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 831.042248][ T5755] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 831.192249][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 831.202245][ T25] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 831.253151][ T5755] usb 5-1: Using ep0 maxpacket: 16 [ 831.256311][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 831.256414][ T25] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 831.353142][ T5755] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 831.430510][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.430561][ T25] usb 6-1: Product: syz [ 831.430670][ T25] usb 6-1: Manufacturer: syz [ 831.430800][ T25] usb 6-1: SerialNumber: syz [ 831.481831][ T5755] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 831.481877][ T5755] usb 5-1: config 0 has no interface number 0 [ 831.581434][ T5755] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 831.663645][ T5755] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 831.663697][ T5755] usb 5-1: config 0 interface 41 has no altsetting 0 [ 831.864748][ T5755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.864794][ T5755] usb 5-1: Product: syz [ 831.864836][ T5755] usb 5-1: Manufacturer: syz [ 831.864897][ T5755] usb 5-1: SerialNumber: syz [ 832.190632][ T25] usb 6-1: config 0 descriptor?? [ 832.244675][ T5755] usb 5-1: config 0 descriptor?? [ 832.256006][T16761] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 832.256118][T16761] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 832.459869][ T25] usb 6-1: USB disconnect, device number 9 [ 832.506071][ T5755] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 832.561229][ T5755] usb 5-1: USB disconnect, device number 5 [ 834.075123][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 834.423096][T16785] syzkaller0: entered promiscuous mode [ 834.423126][T16785] syzkaller0: entered allmulticast mode [ 836.063360][T16804] 9p: Bad value for 'wfdno' [ 837.498608][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 837.587413][ T5747] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 837.634257][ T25] usb 4-1: device descriptor read/64, error -71 [ 837.738855][ T5747] usb 5-1: Using ep0 maxpacket: 16 [ 837.739581][ T5747] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 837.741602][ T5747] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 837.741629][ T5747] usb 5-1: config 0 has no interface number 0 [ 837.741673][ T5747] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 837.741700][ T5747] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 837.741728][ T5747] usb 5-1: config 0 interface 41 has no altsetting 0 [ 837.743754][ T5747] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.743782][ T5747] usb 5-1: Product: syz [ 837.743800][ T5747] usb 5-1: Manufacturer: syz [ 837.743817][ T5747] usb 5-1: SerialNumber: syz [ 837.837145][ T5747] usb 5-1: config 0 descriptor?? [ 837.838049][T16818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 837.838213][T16818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 837.886878][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 838.154142][ T25] usb 4-1: device descriptor read/64, error -71 [ 838.180451][ T5747] sr9700 5-1:0.41: probe with driver sr9700 failed with error -71 [ 838.317978][ T25] usb usb4-port1: attempt power cycle [ 838.853357][ T5747] usb 5-1: USB disconnect, device number 6 [ 838.902840][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 838.919064][ T25] usb 4-1: device descriptor read/8, error -71 [ 839.157938][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 839.186926][ T25] usb 4-1: device descriptor read/8, error -71 [ 839.297532][ T25] usb usb4-port1: unable to enumerate USB device [ 839.616718][ T5747] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 839.776689][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 839.778547][ T5747] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 839.778593][ T5747] usb 2-1: no configurations [ 839.778608][ T5747] usb 2-1: can't read configurations, error -22 [ 839.926694][ T5747] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 840.076782][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 840.077874][ T5747] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 840.078009][ T5747] usb 2-1: no configurations [ 840.078025][ T5747] usb 2-1: can't read configurations, error -22 [ 840.078917][ T5747] usb usb2-port1: attempt power cycle [ 840.596691][ T5747] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 840.617320][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 840.617882][ T5747] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 840.617925][ T5747] usb 2-1: no configurations [ 840.617940][ T5747] usb 2-1: can't read configurations, error -22 [ 841.226668][ T5747] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 841.248965][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 841.249652][ T5747] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 841.249694][ T5747] usb 2-1: no configurations [ 841.249710][ T5747] usb 2-1: can't read configurations, error -22 [ 841.249952][ T5747] usb usb2-port1: unable to enumerate USB device [ 842.315517][T16808] tc_dump_action: action bad kind [ 842.315589][T16823] tc_dump_action: action bad kind [ 842.446032][T16833] tc_dump_action: action bad kind [ 843.187774][T16855] tc_dump_action: action bad kind [ 846.036839][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 846.517374][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 846.646742][ T10] usb 5-1: device descriptor read/64, error -71 [ 846.886743][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 847.124302][ T30] audit: type=1804 audit(1790868208.760:207): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.3142" name="ima_policy_written" res=0 errno=-17 [ 847.124492][ T30] audit: type=1807 audit(1790868208.770:208): UNKNOWN=? res=0 [ 847.124622][ T30] audit: type=1802 audit(1790868208.770:209): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3142" res=0 errno=0 [ 847.126759][ T10] usb 5-1: device descriptor read/64, error -71 [ 847.374201][T16893] random: crng reseeded on system resumption [ 847.467669][T16893] Restarting kernel threads ... [ 847.468234][T16893] Done restarting kernel threads. [ 848.317034][ T10] usb usb5-port1: attempt power cycle [ 848.949221][T16884] ima: policy update failed [ 848.957613][ T30] audit: type=1802 audit(1790868210.610:210): pid=16884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3142" res=0 errno=0 [ 850.046720][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 850.605287][ T10] usb 5-1: device descriptor read/8, error -71 [ 851.085373][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.085409][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.192507][ T5755] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 851.479280][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 851.514256][ T5755] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 851.514413][ T5755] usb 3-1: no configurations [ 851.514470][ T5755] usb 3-1: can't read configurations, error -22 [ 851.778760][ T5755] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 852.196842][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 852.209085][ T5755] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 852.209563][ T5755] usb 3-1: no configurations [ 852.209786][ T5755] usb 3-1: can't read configurations, error -22 [ 852.218462][ T5755] usb usb3-port1: attempt power cycle [ 852.577269][ T5755] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 852.833722][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 852.843799][ T5755] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 852.843948][ T5755] usb 3-1: no configurations [ 852.844006][ T5755] usb 3-1: can't read configurations, error -22 [ 853.047284][ T5755] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 853.074314][ T5755] usb 3-1: Using ep0 maxpacket: 16 [ 853.077150][ T5755] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 853.077255][ T5755] usb 3-1: no configurations [ 853.077309][ T5755] usb 3-1: can't read configurations, error -22 [ 853.078854][ T5755] usb usb3-port1: unable to enumerate USB device [ 856.132644][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.132689][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.302079][T16926] tc_dump_action: action bad kind [ 856.445753][T16935] md: array md0 already initialised! [ 856.646217][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 856.656917][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.699972][ T30] audit: type=1804 audit(1790868219.350:211): pid=16953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3159" name="/newroot/585/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3053 res=1 errno=0 [ 857.872970][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.876183][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.135235][ T5755] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 860.266765][ T5755] usb 3-1: device descriptor read/64, error -71 [ 860.421755][ T30] audit: type=1804 audit(1790868222.070:212): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.1.3164" name="ima_policy_written" res=0 errno=-17 [ 860.422349][ T30] audit: type=1807 audit(1790868222.070:213): UNKNOWN=? res=0 [ 860.425662][ T30] audit: type=1802 audit(1790868222.070:214): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.3164" res=0 errno=0 [ 860.668182][ T5755] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 860.957121][ T5755] usb 3-1: device descriptor read/64, error -71 [ 861.143205][ T5755] usb usb3-port1: attempt power cycle [ 861.233780][T16966] ima: policy update failed [ 861.236036][ T30] audit: type=1802 audit(1790868222.880:215): pid=16966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3164" res=0 errno=0 [ 861.568983][ T5768] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 861.585760][ T5755] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 861.718035][ T5768] usb 5-1: Using ep0 maxpacket: 16 [ 861.718911][ T5768] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 861.718955][ T5768] usb 5-1: no configurations [ 861.718971][ T5768] usb 5-1: can't read configurations, error -22 [ 861.796643][ T5755] usb 3-1: device not accepting address 16, error -71 [ 861.846657][ T5768] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 861.999533][ T5768] usb 5-1: Using ep0 maxpacket: 16 [ 862.006790][ T5768] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice= 0.9a [ 862.006835][ T5768] usb 5-1: no configurations [ 862.006851][ T5768] usb 5-1: can't read configurations, error -22 [ 862.007120][ T5768] usb usb5-port1: attempt power cycle [ 864.310327][ T5768] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 864.542900][ T5768] usb 5-1: device descriptor read/8, error -71 [ 865.540315][T17009] random: crng reseeded on system resumption [ 865.554756][T17009] Restarting kernel threads ... [ 865.555144][T17009] Done restarting kernel threads. [ 867.482420][ T13] bond0 (unregistering): Released all slaves [ 867.536083][ T13] bond1 (unregistering): Released all slaves [ 867.625730][ T13] bond2 (unregistering): Released all slaves [ 867.751546][T17020] tc_dump_action: action bad kind [ 867.755922][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3177'. [ 869.166789][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.166859][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.167422][ T1304] aoe: packet could not be sent on vrf0. consider increasing tx_queue_len [ 869.996779][ T5755] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 871.888307][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 871.910256][ T5755] usb 4-1: device descriptor read/64, error -71 [ 872.546711][ T5755] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 872.625037][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3184'. [ 874.231466][ T13] hsr_slave_0: left promiscuous mode [ 874.247002][ T13] hsr_slave_1: left promiscuous mode [ 874.274730][ T13] veth1_macvtap: left promiscuous mode [ 874.274774][ T13] veth0_macvtap: left promiscuous mode [ 874.294199][ T13] veth1_vlan: left promiscuous mode [ 874.294307][ T13] veth0_vlan: left promiscuous mode [ 875.014005][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 875.341944][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'. [ 875.413483][ T9] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 875.440239][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 875.440273][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 875.440317][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.491954][T17098] netlink: 'syz.3.3194': attribute type 39 has an invalid length. [ 877.867955][T17105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 878.035675][T17107] random: crng reseeded on system resumption [ 878.060790][T17107] Restarting kernel threads ... [ 878.061285][T17107] Done restarting kernel threads. [ 878.359849][ T1395] Bluetooth: hci6: Frame reassembly failed (-84) [ 878.864769][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3184'. [ 878.934279][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3191'. [ 879.072534][ T10] usb 7-1: USB disconnect, device number 7 [ 879.912855][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 880.234210][ T10] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 880.371233][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 880.455481][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 880.455530][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 880.455752][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.106639][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 882.360075][ T10] usb 7-1: USB disconnect, device number 8 [ 882.401275][ T25] usb 4-1: device descriptor read/64, error -71 [ 882.480489][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 882.588665][T17138] netlink: 'syz.4.3205': attribute type 39 has an invalid length. [ 882.656778][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 882.788029][ T25] usb 4-1: device descriptor read/64, error -71 [ 882.912300][ T25] usb usb4-port1: attempt power cycle [ 883.297361][ T25] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 883.404099][ T25] usb 4-1: device descriptor read/8, error -71 [ 883.830929][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 884.181666][ T25] usb 4-1: device descriptor read/8, error -71 [ 884.287109][ T25] usb usb4-port1: unable to enumerate USB device [ 885.625905][T17172] loop3: detected capacity change from 0 to 64 [ 885.757421][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 886.137324][ T9] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 886.139903][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.139944][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 886.139968][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 886.140002][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.386262][T17175] loop4: detected capacity change from 0 to 2048 [ 886.494547][T17175] loop4: p1 p2 p3 p4 [ 886.494547][T17175] p1: [ 886.494752][T17175] loop4: p1 size 67110656 extends beyond EOD, truncated [ 886.510127][T17175] loop4: p3 size 134217728 extends beyond EOD, truncated [ 886.515729][T17175] loop4: p4 size 4278190080 extends beyond EOD, truncated [ 886.541552][T17175] loop4: p5 size 67110656 extends beyond EOD, truncated [ 886.597847][T17175] loop4: p6 size 134217728 extends beyond EOD, truncated [ 886.927365][ T9] cxacru 7-1:1.0: send of cm 0x90 failed (-71) [ 886.934994][T17190] cxacru 7-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 886.935021][T17190] cxacru 7-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 887.064078][ T9] usb 7-1: USB disconnect, device number 9 [ 887.351909][ T30] audit: type=1804 audit(1790868249.000:216): pid=17200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.3217" name="ima_policy_written" res=0 errno=-17 [ 887.352573][ T30] audit: type=1807 audit(1790868249.000:217): UNKNOWN=? res=0 [ 887.377341][ T30] audit: type=1802 audit(1790868249.000:218): pid=17200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3217" res=0 errno=0 [ 888.207805][T17196] ima: policy update failed [ 888.208887][ T30] audit: type=1802 audit(1790868249.860:219): pid=17196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3217" res=0 errno=0 [ 889.967380][T17214] netlink: 'syz.6.3222': attribute type 39 has an invalid length. [ 890.035456][ T30] audit: type=1804 audit(1790868251.680:220): pid=17220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3225" name="/newroot/61/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3053 res=1 errno=0 [ 890.406724][ T3212] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 890.524423][ T30] audit: type=1804 audit(1790868252.170:221): pid=17232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.6.3226" name="ima_policy_written" res=0 errno=-17 [ 890.548724][ T30] audit: type=1807 audit(1790868252.170:222): UNKNOWN=? res=0 [ 890.549931][ T30] audit: type=1802 audit(1790868252.200:223): pid=17232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.3226" res=0 errno=0 [ 891.096810][ T3212] usb 4-1: device descriptor read/64, error -71 [ 891.859547][ T3212] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 893.494620][ T7848] Bluetooth: hci6: Frame reassembly failed (-84) [ 893.665226][T17232] ima: policy update failed [ 893.665389][ T30] audit: type=1802 audit(1790868255.310:224): pid=17232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3226" res=0 errno=0 [ 894.276717][T17241] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 894.278119][T17241] udc dummy_udc.0: failed to start g1: -19 [ 894.283842][T17241] UDC core: g1: couldn't find an available UDC or it's busy [ 895.576680][ T52] Bluetooth: hci6: command 0x1003 tx timeout [ 895.576790][ T5616] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 896.144296][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3231'. [ 896.208794][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3231'. [ 899.107548][T17279] md: array md0 already initialised! [ 902.615849][T17310] random: crng reseeded on system resumption [ 902.624199][T17310] Restarting kernel threads ... [ 902.624666][T17310] Done restarting kernel threads. [ 902.721664][ T30] audit: type=1804 audit(1790868264.370:225): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.3.3232" name="ima_policy_written" res=0 errno=-17 [ 902.722161][ T30] audit: type=1807 audit(1790868264.370:226): UNKNOWN=? res=0 [ 902.722988][ T30] audit: type=1802 audit(1790868264.370:227): pid=17314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.3232" res=0 errno=0 [ 903.628745][T17311] ima: policy update failed [ 903.629174][ T30] audit: type=1802 audit(1790868265.280:228): pid=17311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3232" res=0 errno=0 [ 904.997563][T17322] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 904.997704][T17322] udc dummy_udc.0: failed to start g1: -19 [ 904.998317][T17322] UDC core: g1: couldn't find an available UDC or it's busy [ 906.114462][T17329] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3248'. [ 908.902182][T17329] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3248'. [ 909.022018][T17338] loop6: detected capacity change from 0 to 32768 [ 909.023108][T17338] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 909.026627][T17338] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3256 (17338) [ 909.060178][T17338] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 909.060216][T17338] BTRFS info (device loop6): using crc32c checksum algorithm [ 909.215586][T17338] BTRFS info (device loop6): rebuilding free space tree [ 909.291314][T17338] BTRFS info (device loop6): disabling free space tree [ 909.291396][T17338] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 909.291424][T17338] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 909.329719][T17338] BTRFS info (device loop6): enabling ssd optimizations [ 909.329749][T17338] BTRFS info (device loop6): turning on async discard [ 909.329769][T17338] BTRFS info (device loop6): force clearing of disk cache [ 909.329792][T17338] BTRFS info (device loop6): use zstd compression, level 3 [ 910.604503][ T30] audit: type=1804 audit(1790868272.250:229): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=measuring_policy cause=store_entry comm="syz.2.3261" name="ima_policy_written" res=0 errno=-17 [ 910.604886][ T30] audit: type=1807 audit(1790868272.250:230): UNKNOWN=? res=0 [ 910.605677][ T30] audit: type=1802 audit(1790868272.250:231): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3261" res=0 errno=0 [ 911.141814][T17362] ima: policy update failed [ 911.143023][ T30] audit: type=1802 audit(1790868272.790:232): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3261" res=0 errno=0 [ 912.475138][ T6134] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 913.747239][T17391] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 913.747379][T17391] udc dummy_udc.0: failed to start g1: -19 [ 913.748016][T17391] UDC core: g1: couldn't find an available UDC or it's busy [ 914.403620][T17396] loop5: detected capacity change from 0 to 32768 [ 914.404737][T17396] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 914.761617][T17396] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3267 (17396) [ 915.047083][T17396] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 915.047124][T17396] BTRFS info (device loop5): using crc32c checksum algorithm [ 915.421373][T17396] BTRFS info (device loop5): rebuilding free space tree [ 915.466373][T17396] BTRFS info (device loop5): disabling free space tree [ 915.466443][T17396] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 915.466470][T17396] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 915.487675][T17412] loop4: detected capacity change from 0 to 32768 [ 915.488813][T17412] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 915.498606][T17412] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 369ad64c-6c1c-4d8b-a63b-e5cb6584aa03 [ 915.498666][T17412] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3268 (17412) [ 915.561056][T17412] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 915.561092][T17412] BTRFS info (device loop4): using crc32c checksum algorithm [ 915.664012][T17396] BTRFS info (device loop5): enabling ssd optimizations [ 915.664043][T17396] BTRFS info (device loop5): turning on async discard [ 915.664064][T17396] BTRFS info (device loop5): force clearing of disk cache [ 915.664086][T17396] BTRFS info (device loop5): use zstd compression, level 3 [ 915.762241][T17412] BTRFS info (device loop4): rebuilding free space tree [ 915.795318][T17412] BTRFS info (device loop4): disabling free space tree [ 915.795387][T17412] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 915.795413][T17412] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 915.799445][T17412] BTRFS info (device loop4): enabling ssd optimizations [ 915.799473][T17412] BTRFS info (device loop4): turning on async discard [ 915.799492][T17412] BTRFS info (device loop4): force clearing of disk cache [ 915.799515][T17412] BTRFS info (device loop4): use zstd compression, level 3 [ 917.250754][T15152] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 917.381402][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 917.385706][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 917.392353][T15606] BTRFS info (device loop4): last unmount of filesystem 369ad64c-6c1c-4d8b-a63b-e5cb6584aa03 [ 917.393661][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 917.422496][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 917.424252][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 917.696069][T17457] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3271'. [ 917.696316][T17457] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3271'. [ 918.178793][T17464] loop6: detected capacity change from 0 to 32768 [ 918.179874][T17464] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 918.183506][T17464] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3274 (17464) [ 918.249676][T17464] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 918.249715][T17464] BTRFS info (device loop6): using crc32c checksum algorithm [ 918.358513][T17468] loop4: detected capacity change from 0 to 64 [ 918.414974][T17464] BTRFS info (device loop6): rebuilding free space tree [ 918.426632][T13617] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 918.435528][T17464] BTRFS info (device loop6): disabling free space tree [ 918.436141][T17464] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 918.436171][T17464] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 918.477552][T17466] netlink: 'syz.2.3273': attribute type 39 has an invalid length. [ 918.477782][T17464] BTRFS info (device loop6): enabling ssd optimizations [ 918.477806][T17464] BTRFS info (device loop6): turning on async discard [ 918.477849][T17464] BTRFS info (device loop6): force clearing of disk cache [ 918.477872][T17464] BTRFS info (device loop6): use zstd compression, level 3 [ 918.596766][T13617] usb 6-1: Using ep0 maxpacket: 16 [ 918.600579][T13617] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 918.611498][T13617] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 918.611527][T13617] usb 6-1: config 0 has no interface number 0 [ 918.611572][T13617] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 918.611603][T13617] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 918.611633][T13617] usb 6-1: config 0 interface 41 has no altsetting 0 [ 918.621281][T13617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.621310][T13617] usb 6-1: Product: syz [ 918.621329][T13617] usb 6-1: Manufacturer: syz [ 918.621355][T13617] usb 6-1: SerialNumber: syz [ 918.671991][T13617] usb 6-1: config 0 descriptor?? [ 918.674136][T17463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 918.674291][T17463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 919.454239][T13617] sr9700 6-1:0.41: probe with driver sr9700 failed with error -71 [ 919.476691][ T5616] Bluetooth: hci6: command tx timeout [ 919.526851][T13617] usb 6-1: USB disconnect, device number 10 [ 919.703140][ T6134] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 920.171169][ T152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.171214][ T152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.388322][T17501] loop4: detected capacity change from 0 to 32768 [ 920.389479][T17501] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 920.390358][T17501] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3278 (17501) [ 920.394160][T17501] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 920.394200][T17501] BTRFS info (device loop4): using crc32c checksum algorithm [ 920.563464][T17501] BTRFS info (device loop4): rebuilding free space tree [ 920.610914][T17501] BTRFS info (device loop4): disabling free space tree [ 920.610985][T17501] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 920.611012][T17501] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 920.616315][T17501] BTRFS info (device loop4): enabling ssd optimizations [ 920.616340][T17501] BTRFS info (device loop4): turning on async discard [ 920.616368][T17501] BTRFS info (device loop4): force clearing of disk cache [ 920.616391][T17501] BTRFS info (device loop4): use zstd compression, level 3 [ 921.563610][ T5616] Bluetooth: hci6: command tx timeout [ 922.566949][T13617] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 922.639727][T15606] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 922.851344][ T152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.851449][ T152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.855449][T13617] usb 6-1: device descriptor read/64, error -71 [ 923.086665][T13617] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 923.324795][T13617] usb 6-1: device descriptor read/64, error -71 [ 923.427554][T13617] usb usb6-port1: attempt power cycle [ 923.662210][ T5616] Bluetooth: hci6: command tx timeout [ 924.363324][ T152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.363358][ T152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.502239][T17556] ip_tables: iptables: counters copy to user failed while replacing table [ 924.664443][T17561] loop3: detected capacity change from 0 to 2048 [ 924.684980][T17556] xt_CT: No such helper "syz1" [ 924.750812][T17561] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 924.750845][T17561] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 924.750867][T17561] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 924.750889][T17561] EXT4-fs (loop3): group descriptors corrupted! [ 924.849442][ T152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 924.849489][ T152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.962319][T17557] loop5: detected capacity change from 0 to 256 [ 925.453774][T17566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3286'. [ 925.729289][ T5616] Bluetooth: hci6: command tx timeout [ 926.405923][T17566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3286'. [ 926.670673][T17575] netlink: 'syz.5.3289': attribute type 4 has an invalid length. [ 926.670702][T17575] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3289'. [ 927.153988][T17575] .`: renamed from bond0 (while UP) [ 927.242609][T17579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.359664][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.359731][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.360294][ T1304] aoe: packet could not be sent on vrf0. consider increasing tx_queue_len [ 931.258558][T17623] loop6: detected capacity change from 0 to 512 [ 931.316733][T17623] FAT-fs (loop6): bogus sectors per cluster 0 [ 931.316760][T17623] FAT-fs (loop6): Can't find a valid FAT filesystem [ 932.339220][T17627] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3302'. [ 932.339264][T17627] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3302'. [ 932.495647][ T152] bridge_slave_1: left allmulticast mode [ 932.495671][ T152] bridge_slave_1: left promiscuous mode [ 932.495832][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.505001][ T152] bridge_slave_0: left allmulticast mode [ 932.505025][ T152] bridge_slave_0: left promiscuous mode [ 932.505231][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.602403][ T152] bond1 (unregistering): (slave geneve2): Releasing active interface [ 933.747780][ T152] bond1 (unregistering): Released all slaves [ 933.762032][ T152] bond2 (unregistering): Released all slaves [ 933.775375][ T152] bond3 (unregistering): Released all slaves [ 933.792771][ T152] bond4 (unregistering): Released all slaves [ 933.813483][ T152] bond0 (unregistering): Released all slaves [ 933.880992][T17627] IPv6: sit1: Disabled Multicast RS [ 934.002184][T17632] loop4: detected capacity change from 0 to 512 [ 934.015622][T17632] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 934.027809][ T152] tipc: Left network mode [ 934.073161][T17632] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.3306: bad orphan inode 131072 [ 934.073195][T17632] loop4: lost filesystem error report for type 5 error -117 [ 934.076562][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 934.076586][ C0] EXT4-fs (loop4): initial error at time 1790868295: ext4_orphan_get:1429 [ 934.076613][ C0] EXT4-fs (loop4): last error at time 1790868295: ext4_orphan_get:1429 [ 934.144762][T17632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 934.182862][T17632] overlayfs: upper fs needs to support d_type. [ 936.622210][ T5768] kernel write not supported for file /comedi4 (pid: 5768 comm: kworker/1:8) [ 937.976999][ T152] hsr_slave_0: left promiscuous mode [ 938.001031][ T152] hsr_slave_1: left promiscuous mode [ 938.002067][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 938.002090][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.048512][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 938.048536][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.069774][T15606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.136264][ T152] veth1_macvtap: left promiscuous mode [ 938.136307][ T152] veth0_macvtap: left promiscuous mode [ 938.136566][ T152] veth1_vlan: left promiscuous mode [ 938.136697][ T152] veth0_vlan: left promiscuous mode [ 938.422324][ T30] audit: type=1326 audit(1790868300.070:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17682 comm="syz.3.3320" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f843a59e159 code=0x0 [ 938.953352][T17696] comedi comedi0: probed id does not match board id (0xf != 0x7) [ 939.053188][ T152] team0 (unregistering): Port device team_slave_1 removed [ 939.088779][ T152] team0 (unregistering): Port device team_slave_0 removed [ 939.170659][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 939.177329][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 939.192130][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 939.200246][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 939.203283][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 939.487456][T17708] loop3: detected capacity change from 0 to 512 [ 939.604486][T17708] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 939.604516][T17708] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 939.774682][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 939.792298][T17708] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 939.792436][T17708] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 939.792486][T17708] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.3325: Failed to acquire dquot type 1 [ 939.792514][T17708] loop3: lost filesystem error report for type 5 error -5 [ 939.794652][T17708] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 939.796936][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 939.796957][ C1] EXT4-fs (loop3): initial error at time 1790868301: ext4_acquire_dquot:7069 [ 939.796984][ C1] EXT4-fs (loop3): last error at time 1790868301: ext4_acquire_dquot:7069 [ 940.409749][T17708] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.3325: corrupted inode contents [ 940.409789][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.555287][T17708] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #12: comm syz.3.3325: mark_inode_dirty error [ 940.555330][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.615713][T17708] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.3325: corrupted inode contents [ 940.615753][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.715633][T17708] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.3325: mark_inode_dirty error [ 940.715674][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.716222][T17708] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.3325: corrupted inode contents [ 940.716254][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.730846][T17708] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 940.730873][T17708] loop3: lost filesystem error report for type 5 error -117 [ 940.749863][T17708] EXT4-fs error (device loop3): ext4_do_update_inode:5801: inode #12: comm syz.3.3325: corrupted inode contents [ 940.749992][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.755919][T17708] EXT4-fs error (device loop3): ext4_truncate:4721: inode #12: comm syz.3.3325: mark_inode_dirty error [ 940.755953][T17708] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 940.761530][T17708] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 940.761557][T17708] loop3: lost filesystem error report for type 5 error -117 [ 940.768668][T17708] EXT4-fs (loop3): 1 truncate cleaned up [ 940.790088][T17708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.833561][T17450] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.837152][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.837297][T17450] bridge_slave_0: entered allmulticast mode [ 940.857124][T17450] bridge_slave_0: entered promiscuous mode [ 940.882567][T17450] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.884515][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.884676][T17450] bridge_slave_1: entered allmulticast mode [ 940.894969][T17450] bridge_slave_1: entered promiscuous mode [ 941.025840][ T5617] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 941.200168][ T5617] usb 6-1: Using ep0 maxpacket: 16 [ 941.243211][ T52] Bluetooth: hci0: command tx timeout [ 941.293734][ T5617] usb 6-1: unable to get BOS descriptor or descriptor too short [ 941.293962][ T5617] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 941.352814][ T5617] usb 6-1: config 4 has an invalid interface number: 127 but max is 0 [ 941.352869][ T5617] usb 6-1: config 4 has no interface number 0 [ 941.352982][ T5617] usb 6-1: config 4 interface 127 has no altsetting 0 [ 941.398683][ T5617] usb 6-1: language id specifier not provided by device, defaulting to English [ 941.598558][T17450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.653195][ T5617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.653310][ T5617] usb 6-1: Product: syz [ 941.653475][ T5617] usb 6-1: SerialNumber: syz [ 942.045013][T17450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 942.524361][T17450] team0: Port device team_slave_0 added [ 942.540598][T17450] team0: Port device team_slave_1 added [ 942.584467][ T5617] usb 6-1: USB disconnect, device number 14 [ 942.671767][T17755] Bluetooth: MGMT ver 1.23 [ 942.726274][ T152] IPVS: stop unused estimator thread 0... [ 942.783223][T17760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3331'. [ 942.796331][T17760] bond0: option lp_interval: invalid value (0) [ 942.796357][T17760] bond0: option lp_interval: allowed values 1 - 2147483647 [ 942.811615][T17450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.811633][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.811665][T17450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.819182][T17450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.819198][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.819231][T17450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 942.942901][T17450] hsr_slave_0: entered promiscuous mode [ 942.943964][T17450] hsr_slave_1: entered promiscuous mode [ 943.352072][ T52] Bluetooth: hci0: command tx timeout [ 943.383781][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.455482][T17788] xt_IDLETIMER: label is empty or not nul-terminated [ 944.525712][ T152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.756987][ T5616] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 944.837109][T17800] loop3: detected capacity change from 0 to 256 [ 944.838272][T17800] vfat: Unknown parameter 'uni_xlat./file0' [ 944.894425][T17802] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3339'. [ 945.043905][ T152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.116992][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 945.278071][ T152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.397026][ T5616] Bluetooth: hci0: command 0x040f tx timeout [ 945.774686][ T152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.870354][T17832] openvswitch: netlink: IPv4 tun info is not correct [ 947.009465][T17832] loop3: detected capacity change from 0 to 4096 [ 947.086129][T17832] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 947.120111][T17832] ntfs3(loop3): Failed to load root (-22). [ 947.477987][ T5616] Bluetooth: hci0: command 0x040f tx timeout [ 947.678685][T17817] loop5: detected capacity change from 0 to 32768 [ 947.731179][T17817] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 947.900291][T17817] XFS (loop5): Ending clean mount [ 947.915167][ T152] bridge_slave_1: left allmulticast mode [ 947.915196][ T152] bridge_slave_1: left promiscuous mode [ 947.915517][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.943784][ T152] bridge_slave_0: left allmulticast mode [ 947.943812][ T152] bridge_slave_0: left promiscuous mode [ 947.944054][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.956647][T17817] XFS (loop5): Quotacheck needed: Please wait. [ 948.237879][T17817] XFS (loop5): Quotacheck: Done. [ 948.541456][T15152] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 949.480609][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.483612][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.485660][ T152] bond0 (unregistering): Released all slaves [ 949.549778][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 949.560092][ T5616] Bluetooth: hci0: command 0x040f tx timeout [ 949.597643][T17450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 949.633015][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.712157][T17450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 949.722183][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.723105][T17450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 949.765927][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 949.783991][T17885] program syz.3.3354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 949.906289][T17450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 949.934041][T17450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 949.977730][T17887] loop3: detected capacity change from 0 to 1764 [ 949.996387][T17887] iso9660: Unknown parameter 'iochaset' [ 950.091771][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.091893][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.093623][T17700] bridge_slave_0: entered allmulticast mode [ 950.105759][T17700] bridge_slave_0: entered promiscuous mode [ 950.244632][T17900] loop3: detected capacity change from 0 to 2048 [ 950.272445][T17900] loop3: p1 p2 p3 p4 [ 950.272445][T17900] p1: [ 950.272688][T17900] loop3: p1 size 67110656 extends beyond EOD, truncated [ 950.294117][T17900] loop3: p3 size 134217728 extends beyond EOD, truncated [ 950.308062][T17900] loop3: p4 size 4278190080 extends beyond EOD, truncated [ 950.311940][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.312052][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.312220][T17700] bridge_slave_1: entered allmulticast mode [ 950.312542][T17900] loop3: p5 size 67110656 extends beyond EOD, truncated [ 950.318463][T17700] bridge_slave_1: entered promiscuous mode [ 950.399013][T17900] loop3: p6 size 134217728 extends beyond EOD, truncated [ 950.487586][T15449] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 950.559894][T17700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.627095][T17700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.673440][T15449] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 950.687717][T15449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.687748][T15449] usb 6-1: Product: syz [ 950.687766][T15449] usb 6-1: Manufacturer: syz [ 950.687784][T15449] usb 6-1: SerialNumber: syz [ 950.855944][T17190] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 951.173189][T17933] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3363'. [ 951.191747][ T152] hsr_slave_0: left promiscuous mode [ 951.192492][ T152] hsr_slave_1: left promiscuous mode [ 951.193558][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 951.193581][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 951.195755][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 951.195775][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.214054][ T3212] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 951.577002][T17933] loop3: detected capacity change from 0 to 1024 [ 951.581188][T17933] EXT4-fs: Ignoring removed orlov option [ 951.640264][ T152] veth1_macvtap: left promiscuous mode [ 951.640360][ T152] veth0_macvtap: left promiscuous mode [ 951.641031][ T152] veth1_vlan: left promiscuous mode [ 951.641113][ T152] veth0_vlan: left promiscuous mode [ 952.265215][T17933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.321279][ T9] usb 6-1: USB disconnect, device number 15 [ 952.338121][ T3212] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 952.338362][ T3212] ath9k_htc: Failed to initialize the device [ 952.472579][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 952.645435][ T5622] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.090435][T17965] loop3: detected capacity change from 0 to 4096 [ 953.093937][T17965] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 953.149556][ T152] team0 (unregistering): Port device team_slave_1 removed [ 953.176494][ T152] team0 (unregistering): Port device team_slave_0 removed [ 953.296605][ T5617] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 953.390544][T17700] team0: Port device team_slave_0 added [ 953.393517][T17700] team0: Port device team_slave_1 added [ 953.395235][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8 [ 953.496575][ T5617] usb 6-1: Using ep0 maxpacket: 32 [ 953.524201][ T5617] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 953.537060][ T5617] usb 6-1: config 0 has an invalid interface number: 28 but max is 0 [ 953.537089][ T5617] usb 6-1: config 0 has no interface number 0 [ 953.537137][ T5617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.566482][T17700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.566505][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.572580][T17700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.579405][T17700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.579423][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.579455][T17700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.667450][ T5617] usb 6-1: config 0 descriptor?? [ 953.723490][T17971] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 953.811019][T17700] hsr_slave_0: entered promiscuous mode [ 953.812096][T17700] hsr_slave_1: entered promiscuous mode [ 953.813883][T17700] debugfs: 'hsr0' already exists in 'hsr' [ 953.813906][T17700] Cannot create hsr debugfs directory [ 953.915800][T17976] loop3: detected capacity change from 0 to 512 [ 953.996446][T17976] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 953.996476][T17976] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 954.021790][ T9] usb 6-1: USB disconnect, device number 16 [ 954.135817][T17981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3371'. [ 954.406225][T17976] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 954.478161][T17976] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 954.649752][T17976] System zones: 0-2, 18-18, 34-35 [ 954.652101][T17976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.702771][T17976] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.968184][T17983] md: array md0 already initialised! [ 955.134921][T17450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.184625][T17450] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.204606][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.204691][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.291049][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.291167][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.928072][T17959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 956.721506][T17700] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 957.150400][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 957.151388][T17700] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 957.195782][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 957.197305][T17700] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 957.323157][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 957.324266][T17700] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.354073][T17700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.427381][T18017] loop6: detected capacity change from 0 to 64 [ 957.705202][T17700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.800809][T17700] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.823414][T18026] loop3: detected capacity change from 0 to 32768 [ 957.824498][T18026] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 957.836900][T18026] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3383 (18026) [ 957.863001][T18026] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 957.863034][T18026] BTRFS info (device loop3): using crc32c checksum algorithm [ 957.945989][T18029] md: array md0 already initialised! [ 957.955054][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.955164][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 958.012397][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.012502][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.060117][T18026] BTRFS info (device loop3): rebuilding free space tree [ 958.082799][T18026] BTRFS info (device loop3): disabling free space tree [ 958.082872][T18026] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 958.082900][T18026] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 958.088251][T18026] BTRFS info (device loop3): enabling ssd optimizations [ 958.088276][T18026] BTRFS info (device loop3): turning on async discard [ 958.088296][T18026] BTRFS info (device loop3): force clearing of disk cache [ 958.088318][T18026] BTRFS info (device loop3): use zstd compression, level 3 [ 959.312740][T17450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.528055][ T5622] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 959.574127][T18062] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3389'. [ 959.574168][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3389'. [ 959.710254][T17450] veth0_vlan: entered promiscuous mode [ 959.788180][T17450] veth1_vlan: entered promiscuous mode [ 959.964430][T18084] loop3: detected capacity change from 0 to 64 [ 959.998266][T18078] can0: slcan on ptm0. [ 960.263101][ T5276] 8021q: adding VLAN 0 to HW filter on device eth9 [ 960.271897][T17450] veth0_macvtap: entered promiscuous mode [ 960.312987][T18077] can0 (unregistered): slcan off ptm0. [ 960.330969][T17450] veth1_macvtap: entered promiscuous mode [ 960.479513][T17450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.537108][T17450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.668998][ T6024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.671105][ T699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.671452][ T699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.671496][ T699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.676186][T18098] program syz.6.3395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 961.012049][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.012075][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.141344][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.141372][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.200519][T18105] loop6: detected capacity change from 0 to 128 [ 961.271974][T18105] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 961.299579][T18105] ext4 filesystem being mounted at /550/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 961.452643][T18105] overlayfs: upper fs needs to support d_type. [ 961.717533][T18105] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 961.747016][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 961.880219][T17700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.898726][ T25] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 961.910925][ T25] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 961.910956][ T25] usb 6-1: config 1 has no interface number 0 [ 961.914158][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.914186][ T25] usb 6-1: Product: syz [ 961.914203][ T25] usb 6-1: Manufacturer: syz [ 961.914221][ T25] usb 6-1: SerialNumber: syz [ 961.991398][ T25] usb 6-1: 3:0 : does not exist [ 961.991457][ T25] usb 6-1: 3:0 : does not exist [ 962.144198][T17700] veth0_vlan: entered promiscuous mode [ 962.185367][T18115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 962.213213][T18115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.215834][T17700] veth1_vlan: entered promiscuous mode [ 962.231805][ T5276] 8021q: adding VLAN 0 to HW filter on device eth10 [ 962.342266][T18115] ucma_write: process 299 (syz.5.3397) changed security contexts after opening file descriptor, this is not allowed. [ 962.363265][ T52] Bluetooth: hci5: connection err: -111 [ 962.459399][T17700] veth0_macvtap: entered promiscuous mode [ 962.496240][T17700] veth1_macvtap: entered promiscuous mode [ 962.522669][T18141] netlink: 774 bytes leftover after parsing attributes in process `syz.2.3404'. [ 962.637079][ T25] usb 6-1: USB disconnect, device number 17 [ 962.652447][T17700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.674722][T17700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.756029][T18153] program syz.6.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 962.803609][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.806327][ T1091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.806376][ T1091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.831309][ T6024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.002003][ T6024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.002028][ T6024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.113558][T17916] udevd[17916]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 963.318854][ T6024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.318886][ T6024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.385740][T18171] syzkaller0: entered promiscuous mode [ 963.385768][T18171] syzkaller0: entered allmulticast mode [ 964.930567][ T30] audit: type=1326 audit(1790868326.580:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18184 comm="syz.1.3416" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fe5d9e159 code=0x0 [ 964.985624][T18188] loop1: detected capacity change from 0 to 512 [ 965.005900][T18188] loop1: detected capacity change from 0 to 2048 [ 965.091643][T18188] loop1: p3 < > p4 < > [ 965.091667][T18188] loop1: partition table partially beyond EOD, truncated [ 965.091840][T18188] loop1: p3 start 4284289 is beyond EOD, truncated [ 965.153603][ T4981] loop1: p3 < > p4 < > [ 965.153625][ T4981] loop1: partition table partially beyond EOD, truncated [ 965.153778][ T4981] loop1: p3 start 4284289 is beyond EOD, truncated [ 965.789158][T18199] loop5: detected capacity change from 0 to 4096 [ 965.811369][T18199] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 965.811393][T18199] EXT4-fs (loop5): Test dummy encryption mode enabled [ 965.834783][T18199] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 965.834915][T18199] System zones: 0-5 [ 965.838556][T18199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 965.875745][T18197] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 965.879493][T18197] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.3419: bg 0: block 401: padding at end of block bitmap is not set [ 965.906438][T18197] EXT4-fs (loop5): Remounting filesystem read-only [ 966.471238][T15152] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.485983][ T36] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 966.486024][ T36] Quota error (device loop5): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 966.521238][ T5276] 8021q: adding VLAN 0 to HW filter on device eth11 [ 966.693562][ T5616] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 966.705437][ T5616] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 966.718895][ T5616] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 966.722170][ T5616] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 966.745286][ T5616] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 967.327342][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 968.022263][ T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 968.220710][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.220742][ T10] usb 6-1: Product: syz [ 968.220757][ T10] usb 6-1: Manufacturer: syz [ 968.220772][ T10] usb 6-1: SerialNumber: syz [ 968.698746][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 968.887872][ T5616] Bluetooth: hci2: command tx timeout [ 969.207597][ T5747] usb 6-1: USB disconnect, device number 18 [ 970.235037][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 970.242506][ T9] ath9k_htc: Failed to initialize the device [ 970.257087][ T5747] usb 6-1: ath9k_htc: USB layer deinitialized [ 970.426345][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3429'. [ 970.426388][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3429'. [ 970.445021][T18252] IPv6: sit1: Disabled Multicast RS [ 970.917161][ T5616] Bluetooth: hci2: command tx timeout [ 971.102106][ T5276] 8021q: adding VLAN 0 to HW filter on device eth12 [ 973.029665][ T5616] Bluetooth: hci2: command tx timeout [ 973.258910][T18255] loop1: detected capacity change from 0 to 32768 [ 973.303049][T18255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3420 (18255) [ 973.386285][T18255] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 973.386326][T18255] BTRFS info (device loop1): using sha256 checksum algorithm [ 973.423888][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 973.455433][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 973.456932][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 973.530672][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 973.531061][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 973.628338][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 973.628705][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 973.629023][T18255] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 973.748655][T18255] BTRFS error (device loop1): open_ctree failed: -ENOMEM [ 975.076698][ T5616] Bluetooth: hci2: command tx timeout [ 975.190396][T18314] netlink: 'syz.0.3439': attribute type 4 has an invalid length. [ 976.014360][T18339] loop6: detected capacity change from 0 to 164 [ 976.059421][T18333] Unsupported NM flag settings (8) [ 976.152064][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.152252][T18208] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.152402][T18208] bridge_slave_0: entered allmulticast mode [ 976.154580][T18208] bridge_slave_0: entered promiscuous mode [ 976.188320][T18208] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.188514][T18208] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.188681][T18208] bridge_slave_1: entered allmulticast mode [ 976.191523][T18208] bridge_slave_1: entered promiscuous mode [ 976.438442][T18346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3448'. [ 976.459794][T18346] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.460875][T18346] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.476903][ T5747] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 976.579152][T18208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.597517][T18208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.637543][ T5747] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 976.638737][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.638792][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.722789][ T5747] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 976.751771][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 81 [ 976.751854][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 1 [ 976.772410][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 976.772505][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 976.828223][T18208] team0: Port device team_slave_0 added [ 976.829520][ T5747] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 976.856462][T18208] team0: Port device team_slave_1 added [ 976.866941][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 976.867033][ T5747] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 976.900570][ T5747] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 977.665548][ T9] usb 2-1: USB disconnect, device number 20 [ 978.034313][T18363] tipc: Can't bind to reserved service type 2 [ 978.498572][T18365] loop0: detected capacity change from 0 to 512 [ 978.560371][T18208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.560392][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.560426][T18208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.603097][T18365] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 978.652534][T18368] loop6: detected capacity change from 0 to 32768 [ 978.652733][T18208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.652748][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.652780][T18208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.653589][T18368] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 978.654823][T18368] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3454 (18368) [ 978.747482][T18371] netlink: 'syz.5.3455': attribute type 1 has an invalid length. [ 978.747509][T18371] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3455'. [ 978.747527][T18371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3455'. [ 978.751150][T18365] EXT4-fs (loop0): 1 truncate cleaned up [ 978.792523][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 978.813301][T18368] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 978.813338][T18368] BTRFS info (device loop6): using crc32c checksum algorithm [ 978.815443][T18365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.870275][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 978.871058][ T9] keyspan 2-1:1.0: device disconnected [ 978.955123][T18368] BTRFS info (device loop6): rebuilding free space tree [ 978.982752][T18368] BTRFS info (device loop6): disabling free space tree [ 978.982820][T18368] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 978.982848][T18368] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 978.997927][T18368] BTRFS info (device loop6): enabling ssd optimizations [ 978.997953][T18368] BTRFS info (device loop6): turning on async discard [ 978.997974][T18368] BTRFS info (device loop6): force clearing of disk cache [ 978.997996][T18368] BTRFS info (device loop6): use zstd compression, level 3 [ 979.243910][T18208] hsr_slave_0: entered promiscuous mode [ 979.258505][T18208] hsr_slave_1: entered promiscuous mode [ 979.259398][T18208] debugfs: 'hsr0' already exists in 'hsr' [ 979.259437][T18208] Cannot create hsr debugfs directory [ 980.202835][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 980.204383][T18401] netlink: 'syz.5.3457': attribute type 39 has an invalid length. [ 980.242700][ T6134] BTRFS info (device loop6): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 980.434757][T18410] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 980.995015][T18423] program syz.2.3463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 984.397753][T15449] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 984.548541][T15449] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 984.550205][T15449] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.550272][T15449] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 984.550312][T15449] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 984.550365][T15449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.638936][T18208] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.638980][T18208] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.984930][T18208] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 984.984974][T18208] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.184293][T18208] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.184366][T18208] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.222610][T15449] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 985.240614][T18478] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 985.240643][T18478] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 985.368195][T15449] usb 3-1: USB disconnect, device number 18 [ 985.976203][T18448] configfs-gadget.g1 gadget.0: afunc_bind:1270 Error! [ 985.976685][T18448] udc dummy_udc.0: failed to start g1: -19 [ 985.980514][T18448] UDC core: g1: couldn't find an available UDC or it's busy [ 987.086335][T18208] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.086377][T18208] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.567963][T18489] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3475'. [ 987.918798][T18495] program syz.6.3472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.124083][T18208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 988.142484][T18208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.145239][T18208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 988.178230][T18208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.190756][T18208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 988.224148][T18208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.234487][T18208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 988.262060][T18208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.445794][T18208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.314503][T18208] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.341011][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.341110][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.379037][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.379149][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 989.512710][T18208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 989.512741][T18208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 991.801761][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 991.801875][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 991.803346][ T1304] aoe: packet could not be sent on vrf0. consider increasing tx_queue_len [ 992.006891][T18542] FAULT_INJECTION: forcing a failure. [ 992.006891][T18542] name failslab, interval 1, probability 0, space 0, times 0 [ 992.006936][T18542] CPU: 1 UID: 0 PID: 18542 Comm: syz.2.3484 Tainted: G L syzkaller #0 PREEMPT(full) [ 992.006973][T18542] Tainted: [L]=SOFTLOCKUP [ 992.006984][T18542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 992.007005][T18542] Call Trace: [ 992.007015][T18542] [ 992.007026][T18542] dump_stack_lvl+0xe8/0x150 [ 992.007073][T18542] should_fail_ex+0x410/0x560 [ 992.007114][T18542] should_failslab+0xa8/0x100 [ 992.007153][T18542] ? alloc_empty_file+0x5b/0x1d0 [ 992.007191][T18542] kmem_cache_alloc_noprof+0xa1/0x600 [ 992.007223][T18542] ? alloc_empty_file+0x5b/0x1d0 [ 992.007260][T18542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.007301][T18542] alloc_empty_file+0x5b/0x1d0 [ 992.007339][T18542] alloc_file_pseudo+0x115/0x1e0 [ 992.007376][T18542] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.007412][T18542] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 992.007453][T18542] ? pidfs_register_pid_gfp+0x7e/0x1c0 [ 992.007500][T18542] sock_alloc_file+0xb8/0x2e0 [ 992.007529][T18542] ? __sys_socketpair+0x2c5/0x560 [ 992.007567][T18542] __sys_socketpair+0x2da/0x560 [ 992.007611][T18542] __x64_sys_socketpair+0x9b/0xb0 [ 992.007648][T18542] do_syscall_64+0x166/0x520 [ 992.007689][T18542] ? trace_irq_disable+0x3b/0x140 [ 992.007720][T18542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.007755][T18542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.007783][T18542] RIP: 0033:0x7ffaaef9e159 [ 992.007806][T18542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.007830][T18542] RSP: 002b:00007ffaafe33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 992.007858][T18542] RAX: ffffffffffffffda RBX: 00007ffaaf225fa0 RCX: 00007ffaaef9e159 [ 992.007884][T18542] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 992.007900][T18542] RBP: 00007ffaaf03506b R08: 0000000000000000 R09: 0000000000000000 [ 992.007918][T18542] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 992.007936][T18542] R13: 00007ffaaf226038 R14: 00007ffaaf225fa0 R15: 00007ffcf7e074a8 [ 992.007977][T18542] [ 993.305832][T18558] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3487'. [ 994.381748][T18572] program syz.5.3489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.410247][T18208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.441988][T18574] loop0: detected capacity change from 0 to 512 [ 994.453158][T18574] EXT4-fs: Ignoring removed oldalloc option [ 994.505509][T18574] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.3477: bg 0: block 7: invalid block bitmap [ 994.505548][T18574] loop0: lost filesystem error report for type 5 error -117 [ 994.506554][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 994.506578][ C0] EXT4-fs (loop0): initial error at time 1790868356: ext4_validate_block_bitmap:436 [ 994.506605][ C0] EXT4-fs (loop0): last error at time 1790868356: ext4_validate_block_bitmap:436 [ 994.535833][T18574] EXT4-fs (loop0): Remounting filesystem read-only [ 994.535958][T18574] EXT4-fs (loop0): 1 orphan inode deleted [ 994.547918][T18574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 994.630871][T18208] veth0_vlan: entered promiscuous mode [ 994.657004][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 994.678351][T18208] veth1_vlan: entered promiscuous mode [ 994.809718][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 994.824747][ T25] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 994.835789][ T25] usb 7-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 994.835826][ T25] usb 7-1: config 1 interface 0 has no altsetting 0 [ 994.860355][ T5747] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 994.861655][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.861686][ T25] usb 7-1: Product: Ѝ [ 994.861704][ T25] usb 7-1: Manufacturer: ч [ 994.861722][ T25] usb 7-1: SerialNumber: 蹉뱛꓋俨祉ᆙ／拽쮰鄱熹謑觷繧ꀋ괛伝౪驞㽄⌁᫡騡ꢹ㜯겼쟏碑懈死⡗ᕝ䚋佸猣퇆⤥㱰哧敐ዪ畷ặ憊잎귅靔鰋漆쓀탆샄軡蠤컨ꃘ왏Ɏ鋏］‘抎磌繎묚셰뾂蔥坏ퟖ稶괈 [ 994.873179][T18208] veth0_macvtap: entered promiscuous mode [ 994.904167][T18208] veth1_macvtap: entered promiscuous mode [ 994.986763][T18208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.018146][ T5747] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 995.019515][ T5747] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.019568][ T5747] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 995.019626][ T5747] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 995.019674][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.035126][T18208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.108199][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.109524][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.109610][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.109657][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.317462][ T5747] cxacru 6-1:1.0: send of cm 0x90 failed (-71) [ 995.326567][ T25] usbhid 7-1:1.0: can't add hid device: -71 [ 995.326673][ T25] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 995.372973][ T25] usb 7-1: USB disconnect, device number 10 [ 995.404789][ T5747] usb 6-1: USB disconnect, device number 19 [ 995.543771][T10989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.543792][T10989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.629336][ T6024] Bluetooth: hci4: Frame reassembly failed (-84) [ 996.843508][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.843535][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.109581][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3496'. [ 997.357981][T18614] netlink: 'syz.5.3496': attribute type 39 has an invalid length. [ 997.407340][T18621] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 997.407340][T18621] program syz.6.3495 not setting count and/or reply_len properly [ 998.389258][T17700] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.660357][T18641] trusted_key: syz.2.3501 sent an empty control message without MSG_MORE. [ 998.765332][ T5616] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 998.774304][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 999.613178][ T3365] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.955157][ T3365] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.212476][ T3365] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.557417][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1001.562146][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1001.583892][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1001.598102][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1001.598998][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1001.662064][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1001.701166][ T3365] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.790468][ T10] usb 4-1: device descriptor read/64, error -71 [ 1002.226749][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1002.282327][T18691] loop6: detected capacity change from 0 to 256 [ 1002.297360][T18691] exfat: Unknown parameter 'ut' [ 1002.357049][ T10] usb 4-1: device descriptor read/64, error -71 [ 1002.492502][ T10] usb usb4-port1: attempt power cycle [ 1002.900087][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1002.930275][ T10] usb 4-1: device descriptor read/8, error -71 [ 1003.177373][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1003.198622][ T10] usb 4-1: device descriptor read/8, error -71 [ 1003.306873][ T10] usb usb4-port1: unable to enumerate USB device [ 1003.688185][T18714] FAULT_INJECTION: forcing a failure. [ 1003.688185][T18714] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.688299][T18714] CPU: 1 UID: 0 PID: 18714 Comm: syz.5.3514 Tainted: G L syzkaller #0 PREEMPT(full) [ 1003.688338][T18714] Tainted: [L]=SOFTLOCKUP [ 1003.688349][T18714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1003.688366][T18714] Call Trace: [ 1003.688382][T18714] [ 1003.688394][T18714] dump_stack_lvl+0xe8/0x150 [ 1003.688442][T18714] should_fail_ex+0x410/0x560 [ 1003.688484][T18714] should_failslab+0xa8/0x100 [ 1003.688523][T18714] ? security_file_alloc+0x34/0x310 [ 1003.688556][T18714] kmem_cache_alloc_noprof+0xa1/0x600 [ 1003.688588][T18714] ? security_file_alloc+0x34/0x310 [ 1003.688628][T18714] security_file_alloc+0x34/0x310 [ 1003.688662][T18714] init_file+0x90/0x2b0 [ 1003.688703][T18714] alloc_empty_file+0x74/0x1d0 [ 1003.688747][T18714] alloc_file_pseudo+0x115/0x1e0 [ 1003.688785][T18714] ? preempt_schedule_thunk+0x16/0x40 [ 1003.688821][T18714] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1003.688861][T18714] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1003.688897][T18714] ? _raw_spin_unlock+0x41/0x50 [ 1003.688932][T18714] ? alloc_fd+0x651/0x6c0 [ 1003.688979][T18714] sock_alloc_file+0xb8/0x2e0 [ 1003.689008][T18714] ? __sys_socket+0x12b/0x1b0 [ 1003.689046][T18714] __sys_socket+0x13f/0x1b0 [ 1003.689086][T18714] __x64_sys_socket+0x7a/0x90 [ 1003.689124][T18714] do_syscall_64+0x166/0x520 [ 1003.689164][T18714] ? trace_irq_disable+0x3b/0x140 [ 1003.689196][T18714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.689233][T18714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.689262][T18714] RIP: 0033:0x7fcf1b39e159 [ 1003.689288][T18714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1003.689312][T18714] RSP: 002b:00007fcf1c279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1003.689342][T18714] RAX: ffffffffffffffda RBX: 00007fcf1b626090 RCX: 00007fcf1b39e159 [ 1003.689363][T18714] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1003.689386][T18714] RBP: 00007fcf1b43506b R08: 0000000000000000 R09: 0000000000000000 [ 1003.689404][T18714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.689422][T18714] R13: 00007fcf1b626128 R14: 00007fcf1b626090 R15: 00007fff9688abb8 [ 1003.689465][T18714] [ 1003.730388][ T5616] Bluetooth: hci0: command tx timeout [ 1004.919026][ T3365] bridge_slave_1: left allmulticast mode [ 1004.919057][ T3365] bridge_slave_1: left promiscuous mode [ 1004.919286][ T3365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.954466][T18720] loop6: detected capacity change from 0 to 64 [ 1004.985646][ T3365] bridge_slave_0: left allmulticast mode [ 1004.985677][ T3365] bridge_slave_0: left promiscuous mode [ 1004.985940][ T3365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.509929][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1005.796689][ T5616] Bluetooth: hci0: command tx timeout [ 1006.037302][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1006.053861][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1006.053937][ T10] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 1006.075720][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.075753][ T10] usb 4-1: Product: syz [ 1006.075772][ T10] usb 4-1: Manufacturer: syz [ 1006.075790][ T10] usb 4-1: SerialNumber: syz [ 1006.436747][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1006.443607][ T10] usb 4-1: USB disconnect, device number 25 [ 1006.614576][T18720] ------------[ cut here ]------------ [ 1006.614595][T18720] !buffer_uptodate(bh) [ 1006.614605][T18720] WARNING: fs/buffer.c:991 at mark_buffer_dirty+0x299/0x410, CPU#0: syz.6.3515/18720 [ 1006.634805][T18720] Modules linked in: [ 1006.639267][T18720] CPU: 0 UID: 0 PID: 18720 Comm: syz.6.3515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.650734][T18720] Tainted: [L]=SOFTLOCKUP [ 1006.655069][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1006.667670][T18720] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1006.673428][T18720] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 0f f7 67 ff eb 8c e8 08 f7 67 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 fa f6 67 ff 90 0f 0b 90 e9 cf fd ff ff [ 1006.696170][T18720] RSP: 0018:ffffc9000207f828 EFLAGS: 00010283 [ 1006.702714][T18720] RAX: ffffffff825ff428 RBX: ffff888077b45000 RCX: 0000000000080000 [ 1006.711172][T18720] RDX: ffffc900039b9000 RSI: 0000000000002106 RDI: 0000000000002107 [ 1006.719583][T18720] RBP: 0000000000000201 R08: ffff888077b45007 R09: 1ffff1100ef68a00 [ 1006.727893][T18720] R10: dffffc0000000000 R11: ffffed100ef68a01 R12: 000000000000000f [ 1006.735900][T18720] R13: ffff888077b45000 R14: ffff8880355be0e0 R15: dffffc0000000000 [ 1006.744564][T18720] FS: 00007fd81a6a16c0(0000) GS:ffff888124cc8000(0000) knlGS:0000000000000000 [ 1006.755454][T18720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1006.763191][T18720] CR2: 00007f44023f2e9c CR3: 000000005c0d8000 CR4: 0000000000350ef0 [ 1006.773305][T18720] Call Trace: [ 1006.776658][T18720] [ 1006.779597][T18720] bfs_get_block+0x5c6/0xb50 [ 1006.784240][T18720] __block_write_begin_int+0x6c2/0x1900 [ 1006.789904][T18720] ? filemap_add_folio+0x336/0x4e0 [ 1006.795033][T18720] ? __pfx_bfs_get_block+0x10/0x10 [ 1006.800281][T18720] ? __pfx___block_write_begin_int+0x10/0x10 [ 1006.806302][T18720] ? __pfx_bfs_get_block+0x10/0x10 [ 1006.811652][T18720] block_write_begin+0x8d/0x120 [ 1006.816589][T18720] ? bfs_write_begin+0x1e/0xd0 [ 1006.821382][T18720] bfs_write_begin+0x35/0xd0 [ 1006.826000][T18720] generic_perform_write+0x2d5/0x8f0 [ 1006.831421][T18720] ? __pfx_generic_perform_write+0x10/0x10 [ 1006.837322][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.842972][T18720] ? file_update_time_flags+0x1e0/0x440 [ 1006.848606][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.854270][T18720] ? __generic_file_write_iter+0xf9/0x230 [ 1006.861730][T18720] ? generic_file_write_iter+0x9a/0x330 [ 1006.868506][T18720] generic_file_write_iter+0xae/0x330 [ 1006.873953][T18720] vfs_write+0x612/0xba0 [ 1006.878291][T18720] ? __pfx_vfs_write+0x10/0x10 [ 1006.883081][T18720] ? __fget_files+0x2a/0x420 [ 1006.887772][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1006.893430][T18720] ksys_write+0x150/0x270 [ 1006.898280][T18720] ? __pfx_ksys_write+0x10/0x10 [ 1006.903157][T18720] do_syscall_64+0x166/0x520 [ 1006.907857][T18720] ? trace_irq_disable+0x3b/0x140 [ 1006.912899][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.919193][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.925103][T18720] RIP: 0033:0x7fd81979e159 [ 1006.929590][T18720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.949305][T18720] RSP: 002b:00007fd81a6a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1006.959293][T18720] RAX: ffffffffffffffda RBX: 00007fd819a25fa0 RCX: 00007fd81979e159 [ 1006.968367][T18720] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 1006.976357][T18720] RBP: 00007fd81983506b R08: 0000000000000000 R09: 0000000000000000 [ 1006.984424][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.992475][T18720] R13: 00007fd819a26038 R14: 00007fd819a25fa0 R15: 00007fffdd6db298 [ 1007.000930][T18720] [ 1007.003959][T18720] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1007.011246][T18720] CPU: 0 UID: 0 PID: 18720 Comm: syz.6.3515 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.022205][T18720] Tainted: [L]=SOFTLOCKUP [ 1007.026530][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1007.036587][T18720] Call Trace: [ 1007.039873][T18720] [ 1007.042808][T18720] vpanic+0x56d/0xa60 [ 1007.046821][T18720] ? __pfx__printk+0x10/0x10 [ 1007.051427][T18720] ? __pfx_vpanic+0x10/0x10 [ 1007.055950][T18720] ? is_bpf_text_address+0x292/0x2b0 [ 1007.061258][T18720] ? is_bpf_text_address+0x26/0x2b0 [ 1007.066530][T18720] panic+0xc5/0xd0 [ 1007.070278][T18720] ? __pfx_panic+0x10/0x10 [ 1007.074743][T18720] __warn+0x315/0x4c0 [ 1007.078757][T18720] ? mark_buffer_dirty+0x299/0x410 [ 1007.083890][T18720] ? mark_buffer_dirty+0x299/0x410 [ 1007.089028][T18720] __report_bug+0x276/0x570 [ 1007.093561][T18720] ? filemap_get_entry+0xcd/0x3f0 [ 1007.098605][T18720] ? filemap_get_entry+0xcd/0x3f0 [ 1007.103655][T18720] ? mark_buffer_dirty+0x299/0x410 [ 1007.108784][T18720] ? __pfx___report_bug+0x10/0x10 [ 1007.113825][T18720] ? __pfx_folio_mark_accessed+0x10/0x10 [ 1007.119501][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.125137][T18720] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1007.130525][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.136212][T18720] ? mark_buffer_dirty+0x299/0x410 [ 1007.141346][T18720] report_bug+0x16b/0x220 [ 1007.145708][T18720] ? mark_buffer_dirty+0x299/0x410 [ 1007.150826][T18720] ? mark_buffer_dirty+0x29b/0x410 [ 1007.155946][T18720] handle_bug+0x9c/0x200 [ 1007.160210][T18720] exc_invalid_op+0x1a/0x50 [ 1007.164738][T18720] asm_exc_invalid_op+0x1a/0x20 [ 1007.169597][T18720] RIP: 0010:mark_buffer_dirty+0x299/0x410 [ 1007.175322][T18720] Code: 4c 89 f7 e8 69 fa d7 ff 49 8b 3e be 40 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 74 52 fb ff e8 0f f7 67 ff eb 8c e8 08 f7 67 ff 90 <0f> 0b 90 e9 a5 fd ff ff e8 fa f6 67 ff 90 0f 0b 90 e9 cf fd ff ff [ 1007.194938][T18720] RSP: 0018:ffffc9000207f828 EFLAGS: 00010283 [ 1007.201012][T18720] RAX: ffffffff825ff428 RBX: ffff888077b45000 RCX: 0000000000080000 [ 1007.208985][T18720] RDX: ffffc900039b9000 RSI: 0000000000002106 RDI: 0000000000002107 [ 1007.216962][T18720] RBP: 0000000000000201 R08: ffff888077b45007 R09: 1ffff1100ef68a00 [ 1007.224931][T18720] R10: dffffc0000000000 R11: ffffed100ef68a01 R12: 000000000000000f [ 1007.232900][T18720] R13: ffff888077b45000 R14: ffff8880355be0e0 R15: dffffc0000000000 [ 1007.240889][T18720] ? mark_buffer_dirty+0x298/0x410 [ 1007.246017][T18720] ? mark_buffer_dirty+0x298/0x410 [ 1007.251132][T18720] bfs_get_block+0x5c6/0xb50 [ 1007.255752][T18720] __block_write_begin_int+0x6c2/0x1900 [ 1007.261319][T18720] ? filemap_add_folio+0x336/0x4e0 [ 1007.266462][T18720] ? __pfx_bfs_get_block+0x10/0x10 [ 1007.271598][T18720] ? __pfx___block_write_begin_int+0x10/0x10 [ 1007.277596][T18720] ? __pfx_bfs_get_block+0x10/0x10 [ 1007.282801][T18720] block_write_begin+0x8d/0x120 [ 1007.287668][T18720] ? bfs_write_begin+0x1e/0xd0 [ 1007.292443][T18720] bfs_write_begin+0x35/0xd0 [ 1007.297044][T18720] generic_perform_write+0x2d5/0x8f0 [ 1007.302354][T18720] ? __pfx_generic_perform_write+0x10/0x10 [ 1007.308172][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.313807][T18720] ? file_update_time_flags+0x1e0/0x440 [ 1007.319361][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.324999][T18720] ? __generic_file_write_iter+0xf9/0x230 [ 1007.330726][T18720] ? generic_file_write_iter+0x9a/0x330 [ 1007.336283][T18720] generic_file_write_iter+0xae/0x330 [ 1007.341670][T18720] vfs_write+0x612/0xba0 [ 1007.345915][T18720] ? __pfx_vfs_write+0x10/0x10 [ 1007.350681][T18720] ? __fget_files+0x2a/0x420 [ 1007.355280][T18720] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1007.360915][T18720] ksys_write+0x150/0x270 [ 1007.365243][T18720] ? __pfx_ksys_write+0x10/0x10 [ 1007.370137][T18720] do_syscall_64+0x166/0x520 [ 1007.374733][T18720] ? trace_irq_disable+0x3b/0x140 [ 1007.379777][T18720] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.385852][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.391740][T18720] RIP: 0033:0x7fd81979e159 [ 1007.396148][T18720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.415745][T18720] RSP: 002b:00007fd81a6a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1007.424164][T18720] RAX: ffffffffffffffda RBX: 00007fd819a25fa0 RCX: 00007fd81979e159 [ 1007.432130][T18720] RDX: 000000000000fecc RSI: 00002000000008c0 RDI: 0000000000000007 [ 1007.440117][T18720] RBP: 00007fd81983506b R08: 0000000000000000 R09: 0000000000000000 [ 1007.448165][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.456130][T18720] R13: 00007fd819a26038 R14: 00007fd819a25fa0 R15: 00007fffdd6db298 [ 1007.464113][T18720] [ 1007.467332][T18720] Kernel Offset: disabled [ 1007.471642][T18720] Rebooting in 86400 seconds..