last executing test programs: 26m41.712739844s ago: executing program 32 (id=91): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000300)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRES8=0x0], 0x2, 0x6eb, &(0x7f0000000dc0)="$eJzs3UtoHPcdB/DvrFYvFxw58SMtgYgY0lJTW7JwWvdSt5TiQyghPfQsHDkWXttBUopsSqP0ce8hh9JTetAt9FDSu6E9N6SUXHUMFHLJyTeVnZ1d7UqrXcmSJTX5fMTs/Gf+z/nNzszuDmICfG3dvJT64xS5een11ebyxvpcY2R9brzKbiQZS1JL6s1ZM30/Ze6Naso3kxRV+aLT8L97+/lg8fqbn3258XlrqV5NZfmip95wYztXrVVTppOMVPOdRndp8ePt3fe0d2vX9vZqawubAbvYDlz+fKBW4cA2d1jr5H30n/J1UPX9HLfACVW0rps7TCWnkkwkrat+dXaoHe3oDt/acQ8AAAAA9mty/1Wee5InWc3pZzEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Kqqnv9fVFOtnZ5O0X7+/1i1LlX6BBr+IMRPx1vzx89+MAAAAAAAAADwzL38JE+ymtPt5c2ivOf/Stc9/m/k3SxnIUu5nNXMZyUrWcpskqmuhsZW51dWlmbLmsnZATWv5pM+Na/uPsYbh7zNAAAAAAAAAHDCTQzJvztazv7U/X/7v83Nrfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEhTJSGtWTmfb6anU6kkm2uXWkk+SjB3vaPel6Lfy8dGPAwAAAA5konexmNhDnefey5Os5nR7ebMov/OfL78vT+Td3M9KFrOSRhbyVvUduvmtv7axPtfYWJ+715x2tvvjL/Y19LLFtH576N9zkrV6kttZLNdczq0U2SzVqlZe3Fifa87v9R/X+80xFT+qDBjNSFe67PnCx2X6j72/ItT3tYlPqbZrzlSZO9qJyEw1tmaNM+0I9I9Ez97p9zapD+xpNrXOLz9nB/fUP+bvD97mU9tK9f3l5lhsj8TV1Dp76PzgSCTf/vtHv7zTuH/3zu3lSydnk/p6b2iJ7ZGY64rEha9QJIabKSNxrrN8Mz/LL3IpX4y/kaUs5leZz0oWptv589X7ufk6NThSn57qXnpj2Eiax+R05/zVb0zT6RlTpvPTMjWfV8p9ejqLKfIgyUJeK/+uZrZzNtjaw+f2cNTX9nCm7XLxO+WsE6ZM7l72r3tr8rA043qmK67d59ypMq97zVaUnu8bpfa1bu/Xoy71b1WJZgu/G3h9OGrbIzHbFYkXdnu/tEL6l/Jqsty4f3fpzvw7e+zv1WrePI7+cKKuEs2teT4T1cadKV+L8piaKfNe6Fxhe+M1Vt1xaantyDvXqdc6Un+eB3mr50j9fq7lWq6Xpc+XpUd3XLGaeRc6LfWew5t5LzbzOjd2uj9vPUij9XkIgJPt1HdPjU3+d/Jfkx9O/n7yzuTrEz8Z/8H4S2MZ/efoD+szI6/WXir+lg/zm63v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNbfvjo7nyjsbDUP1Hrn1UMrjXf2Gw/SGxAmZ5EUT0qZw+Fi+WHjzaHNjg4MV4N7ymrH2ai/Ri+4YWnB7ZTP9AwirXt+2ti+L5oP+VpD10UOwLerPzUoWv3vLVm9ATsyu2J6cNrsP2G7craz7t3tOeg78kaSdKv1pATx8jBzjvA8buycu+dK8sPH31v8d782wtvL9wfvXbt+sz1a6/NXbm92FiYab12VTiSh98CR6H740THWJKXh9cd8KBWAAAAAAAAAAAA4Bk6iv+FOO5tBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/3byU+uMUmZ25PNNc3lifazSndnqrZD1JLUnx66T4R3IjrSlTXc0Vu/XzweL1Nz/7cuPzrbbq7fK1ZG3XenuzVk2ZTjJSzQ+rvVvD2xvbSo73yS46kWkG7GI7cHDc/hcAAP//ZuzqYw==") 25m51.871191794s ago: executing program 33 (id=147): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000077b000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\x00') 24m13.975529486s ago: executing program 34 (id=233): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 21m40.818265473s ago: executing program 35 (id=373): socket$inet6(0xa, 0x3, 0xff) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x30000000, 0x405) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x8, @none, 0x9d}}}, 0xb) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x40c, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2a0, 0x2c0, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x468) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nolazytime}, {@resuid}, {@jqfmt_vfsv1}, {@errors_continue}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000ac0)="$eJzs20tvG0UcAPD/OnH6JqGURx9AoCAiHkmTFuiBCwikXpCQ4FCOIU2r0rRBTZBoVdGAUDmifgLgiMQn4AQXBJxAXEHigoSQKtQLhQNatPZu6ya28Stxi38/ye3M7mxm/rs79uyMHcDAGs/+SSK2R8RPIxGj1ezNBcar/127emHur6sX5pJI01f/SCrl/rx6Ya4oWhy3Lc9MlCJKHySxt069S+fOn5pdWJg/m+enlk+/NbV07vxTJ0/Pnpg/MX9m5vDhQwenn31m5umexLkja+uedxf37T7y+uWX545efuPbz7Pt2/P9tXFUjXVd53iM33wuazwa8Wuapl3XcavYUZNOhvvYENoyFBHZ5Spn/T9GYyhuXLzReOn9vjYOWFdpmqab1mwdKhIrKfA/lkS/WwD0R/FBnz3/Fq8NHH703ZXnqw9AWdzX8ld1z3CU8jLlVc+3vTQeEUdX/v44e0XdeQgAgN76Mhv/PFlv/FeKe2rK3RHVtaGxiLgzInZGxF0RsSsi7o6olL03Iu5rs/7xVfm1458ftnQUWIuy8d9z+drWzeO/YvQXY0N5bkcl/nJy/OTC/IH8nExEeVOWn25Sx1cv/vhRo32147/sldVfjAXzdvw+vGqC7tjs8mw3Mde68l7EnuF68SfXVwKSiNgdEXs6+PvZOTv5+Gf7Gu3/7/ib6ME6U/ppxGPV678Sq+IvJM3XJ6c2x8L8ganirljru+8vvdKo/q7i74Hs+m+te/9fj38sqV2vXWq/jks/f9jwmabT+38kea2SHsm3vTO7vHx2OmIkWVm7febGsUW+KJ/FP7G/fv/fGfHPJ/lxeyMiu4nvj4gHIuLBvO0PRcTDEbG/SfzfvPDIm53Hv76y+I+1df3bTwyd+vqLRvW3dv0PVVIT+ZZW3v9abWA35w4AAABuF0nlO/BJaTKf49wepdLkZPU7/Ltia2lhcWn5ieOLb585Vv2u/FiUS8VM12jNfOh0Pjdc5GdW5Q9W5o3TNE23VPKTc4sL67WmDrRmW4P+n/ltqN+tA9ZdW+tojX7RBtyW/F4TBpf+D4Or1f5fXud2ABvP5z8Mrnr9/2LEtT40BdhgPv9hcOn/MLj0fxhc+j8MpG5+198ssfNIx4enXdW+OQ+sw8N/WZez0SwxtIF19TIRpbq7yhFxi7SwSaJ0azSjmtgUEa0Wvtjpjd12os9vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3ybwAAAP//pCzokA==") 21m39.034927744s ago: executing program 36 (id=375): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0xb, 0x300000a, 0x11, r0, 0x8000000) unshare(0x400) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0xda9dda365d5c9495) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$kcm(0x29, 0x5, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) 19m12.860550771s ago: executing program 37 (id=552): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r1 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x1) getdents64(r3, 0x0, 0x20) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009050f0500000000ff0905", @ANYBLOB="6af6"], 0x0) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32=r0, @ANYRES64=r0, @ANYRESHEX=r0], 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 00008'], 0x2a) close(r4) 18m35.921536938s ago: executing program 38 (id=586): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f646f74732c646d6173445d5434468def040000003030303030303030303030303030303030303030332c7573757368e03a956c3d00000025b572735e54c256e0ae95a0314cf3ed3d77ad408c34831b6f602852e7576512756626e013f02036d51e0c7800dd3ea7e5de40431823fcc0398c443ad5d35c38d70202c0fc53ce3270853627119e3aea520298ab9fc6ccec09d1636895e7afd4b3f0dab34ed0b2ee00da85b3c15206c146d3ea240835b59f9afdcd4c030a16050c9b0815522fbbbaa45983408cc08b8ad87f93ab702a6dd8dd0f16028058f30000000000000000", @ANYRESHEX=0x0, @ANYBLOB], 0x0, 0x214, &(0x7f0000000840)="$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") syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="7540c430e8d8cb55e0610f65aa69c7eb0e142a7517e581064ff06e9ce239e0442bbf8cf256a108d756ee68844798521e40cb7b7963cd4041f65dc013adbd4ccf55477d30e5c56ff7db509a5cef7b7db994b9626f3e1e66ff309fa925885a36b49f6a215f7990ea209bdf87f38e08ed924527c0e45f594c78d32118cd03202a8875"], 0x1, 0xda6, &(0x7f0000003c80)="$eJzs3ctvXFf9APBzx544r/7iNO4vJoTEJJSGR+wmtSg7XCksKqQKKX9BFdKS4pZHwqJVKiVZsCVS1T+AqmtY8MyiUtRVUDcg/oGqKzahqlQgQmqNbJ8zHn8zw51xbI/H8/lId87c+z33nnPmcefOfZ0EjKzGyuP8/HSV0tt33rrw4OT4v5ennGzlmFl5HM9jCymlZmu+lCbD8hYmVtPPPrl+qT39PKdVOp+qVLWmpxfut+Y9kFK6kWbS3TSZLn589PYrHzy/+N6Rm0cuvHnm3ta0HgAARsuD77370z8/9d3rh//zmxMLaaI1vWyfL+Txg3m7f6FaHc9J639A1ZZWbePFnpBvPA+NkG+sQ772cpoh33iX8veE5Ta75JuoKX+sbVqndsMwW/sfXzVm1403GrOzq//Jl304tqeafe3K4ktXB1RRYNN9ejLv4jMYDCM3LB0a9BoIYFU8bviQG3HPwqNpLW28t/LvP9foPD9sgu3+/Ct/uMp/96Y1Dptnt36aSrvK9+hgHo/HEcbDfP1+/8vy4vGIZo/17HYcYViOL3Sr59g212OjutU/fi52qy/ltLwOJ0K8/fsT39NheY+Bzh7Y/28wjOywNOgVELBjxfPmlrISj+f1xfhETXxvTXxfTXx/TfxATRxG2W+v/TLdrtb+58f/9P3uDyv72R7L6f/1WZ+4P7Lf8uN5v/161PLj+cSwo5351/FPf373L/H8/8/D+f+n82/pZF5BlP2Fcb9669z/cGFwo0u+x0N1HuuQf+X51Pp81dTaclLbeuahekyvn+9Qt3zH1+ebDPn2522RvaG+cftkf5ivbH+U9Wp5vcZDe5uhHXtCPco7czine0N7DndrV9iRvSfka+bhSGjXVGjXE2G+/w/tqqbXtyvuPy/1ORqmx+MkJV942x76XYrvRbwu41ROb+X0nZy+n9OPOpQ7isrnsdv5/+XzOZ2a1UtXFi8/ncfL5/TeWHNiefq5ba438Oh6vf5nOq2//udga3qz0b5eOLQ2vWpfL0yG6ee7TH8mj5ffsx+O7VuZPnvpx4s/2OzGw4i7+vobP3pxcfHyzzzxxBNPWk/+x0rj1zMXr23jOgrYGnPXXv3J3NXX3zh75dUXX7788uXXzj397W898+yz83MrW/Vz7dv2wO6y9qM/6JoAAAAAAAAAAAAAPav2dZ6c07r725brycv16fH6eIZDed/Kp6Hcx6Bc/9ntvi7l+s3D21BHNt92XE406DYCnf3D/X8NhpEdlpbcxR/YGQbd/1+572FJD5792+HloWS7/9z69WW8fyE8ip3e/5zyd1f/f63+r3pe/4UesyY3Vu7vHuz7a1ux6Viv5cf2l/vATvVX/u9z+aU1T6beyl/6VSg/3qi0R38I5e/vsfyH2n98Y+X/MZdfXrYzp3stf7XGVWN9PeJ+43IfwLjfuPhTaH+5t18/7T91a+Mdtd3J5cMoG5Z+Jvs1LP1/dlOWW9aDefXcOk5X7r8d+zvot/7lvt/ld+CJsPyq5vdN/5/Dra7/z/L5m9P/J+w6Hzr+ZzCM7LC0tDTQrk9Gtd+VnWLQr/+gtyEHXf6gX/86sf/P+H8p9v8Z47H/zxiP/X/GeOxfK8Zj/5/x9Yz9f8b40bDc2D/odE38CzXxYzXxL9bEj9fE4/+3GJ+piZ+oiZ+siT9eEz9VEz9dE/9KTfzJmvhTNfEzNfHd7ss5HdX2wyiL/Ub6/sPoKMd/un3/p2riwPCK/TrH7/dXa+LA8Crnefh+wwiqOt+xI+5vL/txb+X0nZy+n9OPtqyCbIev5fTrOf1GTr+Z07M5nc3pXE71DTncfvH3YyduV2vn+R0K8V7PJ43XA8T7xJzrsT7x+Fy/57Me7bGcrSp/g5eDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyNxsrj/Px0ldLbd9668M+p73x/ecrJVo6ZlcfxPLaQUmqmlKo8Ph6Wd2NiNf3sk+uXOqVVOr/yWMbTC/db8x5Ynj/NpLtpMl38+OjtVz54fvG9IzePXHjzzL2taT0AAACMhv8GAAD//5Cp5/o=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000040)=[0x2000], 0x1, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 16m28.862524346s ago: executing program 39 (id=1453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x4, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x400, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 16m27.054975004s ago: executing program 40 (id=1458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d1}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 16m24.592210159s ago: executing program 41 (id=1463): getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x2fb, 0x4) bind$can_j1939(r0, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x40000}, 0x4406f) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007a40)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r2, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 13m59.36972377s ago: executing program 42 (id=1768): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r1) write$char_usb(r2, &(0x7f00000007c0)='\v', 0x1) 12m41.776686589s ago: executing program 43 (id=1887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af83, &(0x7f00000008c0)=0x8000) syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12m27.872541807s ago: executing program 44 (id=1899): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0xb00}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 10m39.304092811s ago: executing program 45 (id=2011): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x75) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x4040080) 10m39.008082383s ago: executing program 46 (id=2014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 8m45.96662785s ago: executing program 47 (id=2155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX9S+H8stJPClbV54UhSOB0L+fnQLRxLCifimfb52ny6aeH7WMgvsJiPV1Cs6V4SkfS42q/HQuGGPc52Dw4AAHBPieE5z7Jjvc2QRtn52qAdVg/aYWTQDvVBO4wmO6Q79tseZnsLcXv7zMalPf//yHD5P74Vq7JFv+v/Q7z+P3+uYff6/9lYaCSF+VhopXcMaMVjZGH343iMRivvcWV9twAAAAB3tfi9QH2F5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+zda4xc1X0A8LPP8T68XkiqEBolm6TGcROv1zaQqKXKmlI1IqVZNxRURRQbe00WL9ixTYlRiIxNRCMEpQ1S8qEIoyiq+QC1AhFJAeEixREqj4iqKIBAoTVEQaSUJCJNkEI1e++ZvXPuzsOPNV76+0neOTP/87zz8Jx775wLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/w8GvXPO3zeKP/va8Z1+4ePyKPWsvfvW68059MoSJmcc7snBH/423j//87nPv2fPA6jvuO3z+R3vzcnk8DFT/dOZ3boi1Hl4cwv0dIXSngRWDWaAnvz8Y63vfYAinhNlArcRkf1YibTh8vy+EfWE2UKvqe30hDBYCFz71yMM3VxO39YWwNIRQSdt4vpK10ZcGzujNAv1pYGt3FvjVW5la4LudWQCOWXwz1F70BybqMwzPXa7B66/nuHXs7ZUOrysmhhvn+9naee5UQW/6wMQxPW2l6pgXpbfHQe+2BfBuK23nWz1txS9S+TeUt2ZDldC5aXLzhqund8ZHOsPoaFejmubpeX7m9S9tPJL0gnkdxg4MH5fX4S1PLL27a/kFj9+3YunL+z+295Vj7eaPCpu0mJ5vlZC/5hbM8xiN+zxZAG+/0rekEV+6QgibP/97n2kWL83/h5vP/+PLOd521uWOtb45lM3N4yODMfHaUDY3BwAAgAVjIew13Tr60Cea1Vea/4+0d/w/HvLPJ/PZaA+GMD6T2LskhNNmHs8Cd8XmLlsSwgdnUhP1gbVJ4GAI751JLK9VlZRYFEuMJIGfDOWB8SRwKAYmksC3YuDWJHBDDBxIAhtj4GASODcGwlT9OH5/KB9H24G+GFifbcQD8SyEXwzF1pJt9VytKgAAgOMknx321N8tnOtwrBni9PJAX6sM8QzshhkqSQ3pDLY2rWpYQ3erGjpb1VAb9+7mwy/V3NGq5tJpGB31GW7/5d98NjRRmv+PNZ//V+boSEfp+H8I62b+xtydeWS6Fl8/UZcBAAAAOAYD//viN5vFS/P/8fbO/4/7RLoKmcNjcTfEliUhjNUHsmr/sBzIjnoP5AEAAABYCGrH42vHwqfy2+wU7XQ+Xc4/cYT544H/8Tnz9x58cH2z/pbm/xPtnf/fX3+bdeJQ7MXXloSwqBD4QexlNTBjJAZ+/Mn6QD7+Q3ED3BSryk9MqFV1UyyxPgbGksC+RiV+WCtxWn0gf7Jqje+tjWMqL1EIAAAAwAkXdwfE4/Lx/P8P/Wb1Nc3Kleb/64/s/P+ZeXDp9P7pgRBWdofQlf4w4LH+bGHAGBjsyBMP9Wd1daVVXd8fwjnVgaVVvZiv/9+drjH4VF9WVQyc9qH9r59RTXyzL4SVxcDTn7vzrGpiZxKoNf6XfSF8oDratPHvLMoa70kb//qiEN5fCNSqumxRCNXGetOqHqnk1zFIq/rnSgjvKgRqVZ1dCWFXAGCBiv+Vbio+uGPXtVs2TE9Pbp/HRNyH3xc2T01Pjm7cOr2p0qBPm5I+1y1jdH15TO1e+ea5fImii+5dN9hOuvY7wbFiW/l+/NKJg/n9+F2oZ2acq3vq7q5Jh/yRD5ebCIVvUo2G3DnPQ+4vVjL7JJbqj/l7w0BYdPWOye2jX9ywc+f2VdnfdrOvzv7Gw0zZtlqVbqv+ufrWxsuj4WpZiaPdVsuKlazceeW2lTt2Xbti6soNl09ePnnVqrNXj505tmbs42eurI5qLPvbYqjL5qo6Gepbd7Y5ruM41NO7C5WciE8NCQmJhZbYOrCs6f/Jpfn/tubz//ipEz/58/UZGh3/H46H+bPHZw/zr4+Bfe0e/x9udDS/dmLASBLYHQO7HeYHAADgnSFO8uPezLhX+qfLv/Nys3Kl+f/u9n7/f5zW/68tXX9+o2X+l8cSY43W/0+X+a+t/7+70fr/6TL/tfX/970N6/9fXQskm+QX1v8HAADeCU7c+v8tl/dPLxBQytByef/0AgGlDC2X8W/3AgFHvP7/8//5V/8dmijN/29tb/5v4X4AAAA4eXz5z675nWbx0vx/X3vz/xO//l9odP7/SKPARKOFAa3/BwAAwALVaP2/4Rv7L21WrjT/P9De/D+edtFZlzvW+uZQtqZdSNe0e22o9pMBAAAAWBg6w+hoT5t561ZGXXv0bT6TLwXaLF304p8cPrLz/w+2N/+v+13GLU8svbtr+QWPv3nfiqUv7//Y3ldmj/8DAAAA86fd/RIAAAAAAAAAAAAAAMDb78X/2LOmWbz0+/+wbubxRr//j9f9i78veHdd7lhr6/X/8vsXfvqeXTNLFj42FMKHi4Ete7acEvJr8y8rBh6+ZPl7qok9aYkHXzj3pWri0jTwqRWnvlFNnJME1sdFEt+bBuJVFd9YnATi8or/ngbi9jiQBnrzwFcXZ+PoSLfVTwezbdWRbqtnB0NYUgjUttX9g1kbHekAb0sCtQF+IQ3EAf55HuhMe3XPQNarGBiMRe8YyHoFAMBJK34L7Ambp6Ynx+JX+Hh7enf9bVS3ZNn15Wo72mz+uXxpsovuXTfYTror/S46e63xnlCpDmFV6etqMUvHzCiPTy0tNt27Gwy51WpvnQ3KpY500/U2HlFfNqLRjVunN/W0HPia1llWd7fMsqo02Slm6ZzZpG3U0kZf2hhRm9umjS7H+51hdLQryfUHMTgc6rR6RbT7e/3iOn+NXgXFPFcd3vurZvWV5v/D7c3/K8VxvZFfDGB3vLLe3y2xzD8AAADMr6+u/fU34r/P3vjo083ylub/I+3N/+MerPxQcLa342C8/v/eJSHMXFp/OAvcFZu7bEkIH5xJTcQS2QX1z48lxrLAXXGHyfJYYv1EfVWLYuBAEvjJUB44mAQOxUC+l2J/yHfl/P1QCGfNpNbVl9gWSwwngc/EwEgSGI2BsSSwOAbGk8Cri/PARBL4txgIU/Xb6t7F+bYCAAA4Evk8q6f+bkjneQe6W2XoaJWhv1WGzlYZKq0yNBpFvP/tmKEnOXmlo5CpJ621L6mllCFeDP+I+1XKEH5YnzMtWGo6nn9QO9+goz7DA5/oroQmSvP/sfbm//31t1nrh+L8f/b6f1ngB7F7X4unjo/EwI8/WR/IdwwcipPdm2pVTeQl8kn7TbHEeAyMJIFtMTCeBNavywP73lMfyGfatcb31hqfyksUAgAAAHDCxR0EcTdNnP/fseMrA83Kleb/4+3N/2N7A8XGboi1Hl4cwv0ds72pBVYMZoG4H2Mw/jz+fYMhnFLYwVErMdmflehNGg7f78t+od6bVvW9vuzHB/H+hU898vDN1cRtfSEsLex9qbXxfCVroy8NnNGbBfrTwNbuLBD3/NQC3+3MAnDMansF4wsqP9WlZnjucg1ef++Ua4KmwyvtA50j31y/uZovpR2u+T7VmiN72pruv+W4Kb09Dnq3LcR327B3W/GLVP4N5a3ZUCV0bprcvOHq6Z3xkeIvWUvm6Xku/kq1nfRxeB3uPvretlZJOzCWfHyMzV1u7tdhR6zulieW3t21/ILH71ux9OX9H9v7StvdaCD+UPiR6/518EeFzTvfKiF/zS24z5MJnycL8b+BEU9bCGHdq1+/qVm8NP+faG/+353czvh13Jg7loTwkcLGfSxu/j9ekn0OFgLZp+S7yoHskPt/DTX85AQAAIDjrba7o7a/YCq/zU4IT+fJ5fwTR5g/7q8YnzN/u/3u/+tLljaLl+b/65vP/xcl3XT83/F/5onj/3M62XdFL0of2H1Mu6JL1TEvHP+f08n+bnP8f06O/zv+PxfH/1tw/H9OJ/vTVvqWtM2XrhDCy3/00LPN4qX5/7b25v/W/5t70b7a+n/rG63/t63R+n+7rf8HAADMqwYLzaXzvNLqfaUM6ep9pQwtFwhsucSg9f+OeP2/l05//jehidL8f3d78//4chgotr5Q1v8bWdegqltjYJuFAQEAADgZNdpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNvrgX/4n03N4o/+9rxnX7h4/Io9ay9+9brzTn0yhKmZxzuycEf/jbeP//zuc+/Z88DqO+47fP5HK3m5nvz2d+tyx1rfHAphX+GRwZh4bah6ZzZw4afv2dVdTTw2FMKHi4Ete7acUk18ayiEZcXAw5csf081sSct8eAL575UTVyaBj614tQ3qolz8kBH2t1/XJx1tyPt7s2LQ1hSCNS6e8Xi+qpqbfxpHuhM2/inwayNGBiMRb8xmLURA9OxxNSiEFZ2h9CVVvVoJauqK63qXypZVV1pVV+uhHBOCKE7reqF3qyq7nTkT/ZmVcXAaR/a//oZ1cS+3hBWFgNPf+7Os6qJLySBWuN/0RvCB6ovmbTxb/dkjfekjd/WE8L7Qwi9aYlfdmcletMSL3aH8K5CoNb457tD2BV4R4gfPnWfaDt2Xbtlw/T05PZ5TPTmbfWFzVPTk6Mbt05vqiR9aqSjkH7r+qMf+3Ovf2lj9faie9cNtpPuzsv1zHR5dU/d3TUne+9jv/qLlcw+H6X6Y/7eMBAWXb1jcvvoFzfs3Ll9Vfa33eyrs79deTTbVqsWyrZaVqxk5c4rt63csevaFVNXbrh88vLJq1advXrszLE1Yx8/c2V1VGPZ3+Mx1DtP/FBP7y5UciI+ACQkJBZaorPu023sZP8gL33Rn+1oT6jMfECXphXFLB0zozweg157lCM+mu8pLUe0qjRxKGVZ3TrLmtJkYjZLX5Zl5ntdaXJYrKlzZpPG+51hdLSr0XYYrr9b3Lw/O4bN+0y+6dpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgUAAD//wNUIwc=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000c00)={[{@grpid}, {@usrquota}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nojournal_checksum}, {@minixdf}, {@bh}]}, 0x7, 0xbaf, &(0x7f00000017c0)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x11, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x14c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x1, 0xff, 0x2, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xd, 0x1, 0xf5, 0x2}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}]}, 0x154}}, 0x240448c8) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) (async) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a8a439, &(0x7f000001dcc0)=ANY=[], 0xd, 0x0, &(0x7f0000000000)) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32], 0x15) 8m14.463061875s ago: executing program 48 (id=2214): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8m1.64011034s ago: executing program 49 (id=2235): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0xfff2, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m28.127088443s ago: executing program 50 (id=2353): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000009c0)=[{0x1, 0x0, [0x7, 0x6, 0x7, 0x79c9fcfa, 0xf, 0x9, 0x14e3, 0x2, 0x5, 0x4, 0x4, 0x9, 0xab7, 0x4, 0x1db, 0xb]}], r2, 0x1, 0x7ffffffe, 0x48}}, 0x20) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x8000000, 0x2, 0x0, 0x18, 0x4, 0x96}, 0x20) (fail_nth: 3) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000380)={0xc, &(0x7f0000000040)={0x0, 0x22, 0xf, {0xf, 0x22, "b5b89ff549cd27dcb1153adf7f"}}, &(0x7f00000002c0)={0x0, 0x3, 0x8e, @string={0x8e, 0x3, "a58c355aa45d00ddadf5ca7f3cc1e7b3d91a96d09b89d3fc7a12389cdda9709eb57b24c44473c9a58934f926a0cb81e71a48d98f1007f07b059c65173c20388dce03b6235aed931daa82947992f0314971868b2bda6b013638835f77baf5cf2992f886690c45561d3caf88b0f7e5d0963fafd22ade5714bbadaff681a5cc12e83f2df1af0f1bb1341df8963f"}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000003c0)={0x20, 0x7, 0xe2, "615579d3a1e490b7f5691b3ae270ad71a9998d2e21ec1c03447899518b4653137536484f62dd58b6a944635b7df10bf4058cf79794236354a5bcf09145ae2ac6c9a0cb70c78a00b076dd6b89b1328f02513acfdad2f5f6413ed0099dbe443b7c3e60d48ce7bb90fb8fe6e36a4290b9a5f44c4a66b5f4814b098b4ceea3e2dddc54b55c24faae86821aca61b41095d3746869a18034e6e355dbaa72d42f4a7b67f646b898f24e3fae8eb740c6e394fbbf3ee57b6527f64c112d6dc52f8d9e0a5cd91b2f6ec0e14e1ff7743760830ab150e4bcaeeb17a1265193b789ef5bc1497c79ac"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000540)={0x20, 0x0, 0xf8, {0xf6, "175f06fe498b3617f961e7154e38b7e9263611696657b78c77e27e52c9146ad7f1e644b5fd15af7b33f47680eadab01e16be465b7f0a11d07f8ca62fb1d99971d2419c81e6a0c7ed02a196ed022c34e81a8ec8287abf2b76ec88cea92cd2500ec54a469c163f60f80f427aaf7495e600af024353447360b4801342d906f93258252b34591bb94e5cd55407661ef898bb8d5b3557fb4718d9c0614d1dc1c00ba2f36862d2c172895dab2e2b2bd80e8db442b98b917495d2481de930a3e20e72b3aee5a2304eabee34f85bdf1d78f9cedb3f92a95af2f89bd9468812222f6a4bff275857f05574ba68b5c80fc0337f84c389819a575cb6"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x18, 0xc, 0x8000, 0x80000}, 0x50) r5 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x70, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {0xfff1, 0xffff}, {0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x7caf, 0x9, 0x8001}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}]}]}]}}]}, 0x70}}, 0x40804) ioctl$I2C_SMBUS(r5, 0x720, 0x0) 5m45.794707701s ago: executing program 8 (id=2402): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='10000', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5m44.053586518s ago: executing program 8 (id=2404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4e0800, 0x21) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r1, 0x0, 0x0) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(0xffffffffffffffff, 0x5) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) 5m42.206637413s ago: executing program 8 (id=2407): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0x7fffffff, 0x4, 0x0, 0x4, 0x4, 0x0, [{0x4, 0x4, 0xaf5, '\x00', 0x2480}, {0xc157, 0x8000, 0x0, '\x00', 0x100a}, {0x1, 0x6, 0x6, '\x00', 0x905}, {0x0, 0x8001, 0xfffffffffffffffd, '\x00', 0x2}]}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00002e7000/0x3000)=nil], &(0x7f00000000c0)=[0x5], 0x0, 0x2) 5m39.646287441s ago: executing program 51 (id=2407): r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a7) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r2 = io_uring_setup(0x895, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000380)={0x7fffffff, 0x4, 0x0, 0x4, 0x4, 0x0, [{0x4, 0x4, 0xaf5, '\x00', 0x2480}, {0xc157, 0x8000, 0x0, '\x00', 0x100a}, {0x1, 0x6, 0x6, '\x00', 0x905}, {0x0, 0x8001, 0xfffffffffffffffd, '\x00', 0x2}]}) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000180)=0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f00002e7000/0x3000)=nil], &(0x7f00000000c0)=[0x5], 0x0, 0x2) 5m3.250243896s ago: executing program 2 (id=2482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m2.467839742s ago: executing program 2 (id=2483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xd, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x1853, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc14", 0x7, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 5m1.827072918s ago: executing program 2 (id=2484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4e0800, 0x21) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r1, 0x0, 0x0) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(0xffffffffffffffff, 0x5) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) 4m59.800350765s ago: executing program 2 (id=2485): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='10000', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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") ftruncate(0xffffffffffffffff, 0x2007ffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4m52.117566704s ago: executing program 2 (id=2500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000400)={@empty, @broadcast, @void, {@mpls_mc}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r5, 0xaea2, 0xffffffffffffffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m49.769385847s ago: executing program 2 (id=2503): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000001004"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000200"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x100, 0x400000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22282, 0x0) ioctl$TCSETSW2(r4, 0x5408, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000140)="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", 0x107) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 4m46.902880683s ago: executing program 52 (id=2503): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d00000000000000000000001004"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000010000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000200"/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x100, 0x400000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22282, 0x0) ioctl$TCSETSW2(r4, 0x5408, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000140)="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", 0x107) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400223a6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) 3m52.04383175s ago: executing program 6 (id=2573): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0l/bUePFWKBS81pBMQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8Ab1JQ8C6I1ngQLyuz2aQ03U23TdIt6ecDk33fd348z5Md3t0JmQngpfV28SOJGIqIyxFRbo+nEXG41ToScXNju/UHN6aKJYlm88ofSbFbrDfLW8dK2q/Ho7VLvB4R90oRZz5+PG6tsTo/mefZcrs/Ul9YGqk1Vs/OLUzOZrPZ4tj4hdHz4+PnR8efWMNrPdZ68r0LR+/8+O7a2k/f1W+/NXA2iYlW3dGurcfDPJWN30kpJraNL+5HsD5K+p0AAAA9Kb7nH4qIgda31HIcarUAAACAg6Q52AQAAAAOvCQeG2r9YQAAAAA4KDb/D2Dz3t79ug+2m9/fiYjhTvEHWvcQRxyJUkQcW08euTMh2dgNduXmrYi4O7H9/PumOMNu7vLYo9v6j94jfXiXR2cv3C3mn4lO80+6Nf9Eh/lnYPPZCbvUff57GP9Ql/nvco8xvv/yjVLX+Lci3hzoFD/Zip90if9+j/Fvr31yp9u65tcRpzp9/iSPxtrh+RATM3P5jo8fuPfv6fs71X+s4+df0s6he/1LPdb/4fpf893mkiL+6RM7v/+d4hfnxKftPNKIuNN+Lfpr22KcWPj5h53qn45oPsv7/1WP9f/67eD1HjcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAljQihiJJK1vtNK1UIo5HxKtxLM2rtfqZmerK4nSxLmI4SunMXJ6NRkR5o58U/bFW+2H/3Lb+eES88svRjaBzeVaZqubT/S4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALccjYiiStBIRaUT8XU7TSiVioId9B59DfgAAAMAeGe53AgAAAMC+c/0PAAAAB9+zXv8ne5wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKBdvnSpWJrrD25MFf3pa42V+eq1s9NZbb6ysDJVmaouL1Vmq9XZPKtMVReedLy8Wl0auxAr10fqWa0+UmusXl2orizWr84tTM5mV7PSc6kKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApzXUWpK0EhFpq52mlUrE/yJiOErJzFyejUbE/yPifrk0WPTH+p00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe67WWJ2fzPNsWUOj343Nk/JFyWcfGx9FxAuQxg6N/s5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0R62xOj+Z59lyrd+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0F/pb0lEFMup8smh7WsPJ/+UW68R8cEXVz67PlmvL48V439ujdc/b4+f60f+AAAA8FK4+DQbb16nb17HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KrWWJ2fzPNseXeNi9FYbSadtxnqd40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCz+S8AAP//46S/VQ==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='10000', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m47.72854964s ago: executing program 6 (id=2577): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0xffffffa2}], 0x1, 0x12c, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r2, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r2, &(0x7f0000000080)="cd", 0x1) syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000f40)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x4}}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nostrict}, {@gid}, {@uid_forget}, {@partition}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc59, &(0x7f0000002940)="$eJzs3U9sHNd5APDvDXfFldxWTJwqThoHm7ZIZcVy9S+iYhXuqqbZFpBlIRR7C8CVSKkLUyRBUo1spC3TSw89BCiKHnIi0BoFEjQw2iLokWldILn4UOTUE9HCRlD0wBYBAhQIGMzsW3FFkbYikSIl/342+e3MvDfz3rzhjE3wmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvvHLhxMm0xYaBPWgMAPBIXBr78olTWz3/AYAn1pXt/v8fAAAAAAAAAAAAAADYL1IU8XSkmLu0liaq5a7GxU791u3xkdGtqx1MVc2Bqnz51Th56vSZL54dPteLFzszH1B/p306Xhu7cqH58uzNufmphYWpyeb4TOfa7OTUfe/hYetvdqw6Ac2br9+avH59oXnqhdN3bb499P7gU0eGzg8/d/zZXtnxkdHRsY0ijf7ytQduSNd2GR4HoojjkeL57/wotSOiiIc/F41HO/abHaw6cazqxPjIaNWR6U57ZrHceLl3IoqIZl+lVu8cbT0WUas/0j5srxWxVDa/bPCxsntjc+359tXpqebl9vxiZ7EzO3M5dVtb9qcZRZxLEcsRsTp47+7qUUQtUnzz8Fq6mt/6UZ2HL1SJwdu3o9jFPt6Hsp3NesRy8RiM2T42GEW8Gil+/M7RuJbvM9W95vMRr5bxuxFvlfGliFReGGci3tviOuLxVIsi/qIc//NrabK6H/TuKxf/oPn7M9dn+8r27is/5/PhnjvFHj0fDm6Kj8Y+vzc1ooh2dcdfSw/+HzsAAAAAAAAAAAAAAAAA7LSDUcSnIsUr//5HVV5xVHnph88P/+7QL/bnjD/zIfspy74QEUvF/eXkHsiJgZfT5ZT2OJf4o6wRRfxxzv/7+l43BgAAAAAAAAAAAAAAAAAA4COtiB9GihffPZqWo39O8c7MjeaV9tXp7qywvbl/e3Omr6+vrzdTFWMoL090l9eXclzOcf1Pu3E15fmFe/WLbmzlOJHjUo7LOa7kuJpjDOT6ObYGol5+mMjLSzku57iS42qOUcv1c2zlOJHjUo7LOa7kuJrjnU409mC4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUEUU8dNI8Y2vrqVIEdGKmIhuXBnc69YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXBVMQ/Rorm77XurKtFRKr+7TpafjsTrQNl/Hi0hsv4UrQu5NiuYq319T1oPw+nnor4QaQYbLx9Z8Dz+Ne7S3cug3jraxtLn65140Bv49D7g08dOXx+ePSzz2z3OW3VgGMXOzO3bjfHR0ZHx/pW1/LRP963bigft9iZrhMRC2+8+Xp7enpq/sE/lJfAA1bvjeRDHP1Rfki1HWzq4P7ve9T2RTP27kPU9kUz9qbvd6S7ngI8Scrn/3uR4jff/Y/eA7/7/G/EL3SX7jzh4yd/snEdvLh5R/f5/K9trpef/+WTYKvn/9N9617M12G9FtFYvDlXPxLRWHjjzeOdm+0bUzemZs6cOPGl4eEvnT5RPxDRuN6Znur7tCOnCwAAAAAAAAAAAAAAAODRSUX8dqRo/2AtNSPidpWvNXR++Lnjzw7EwL25f6+NXbnQfHn25tz81MLC1GRzfKZzbXZy6n4P16jSvcZHRnelMx/q4C63/2Dj5dm5N+Y7N/5wccvthxoXri4szrevbb05DkYR0epfc6xq8PjIaNXo6U57pqp6eYcSMuupiP+MFNfONNPn8rqc/785w/+u/P+lzTvawfz/zx7ayP/7WDcUvWOmVMRPIsVv/OUz8bmqnYfinnOWy/1tpDh27jO5XBwoy/Xa0H2vQDczsCz7v5HiH356d9lePuTTG2VP/twneJ8rx/9wpFe//effil/N6+5+/8PW439o84526f0Pn+hbd+iu9xU8dNfJ4388Urz09Nvxa9Wa///A93/03thwtFt44/0cuzT+v9y3bigf99d3qvMAAAAAAAAAAACPsXoq4u8ixfdGa+lsXnc/f/83uXlHu/T3X5/sWze5M/MVffi0NwAAAADwhKinIn4YKW4svn0nh/ru/O++/M/f2sj/HEmbtla/5/ul6r0BO/n7v35D+bgTD99tAAAAAAAAAAAAAAAAAAAA2FdSKuJsnk99osrnn9x2PvWVSPHKfz+fy6UjZbnePPBD1ffGpfWZ4xemp2cbsdi+Oj3VHJtrX5sq634iUqz9zWdy3aKaX70333x3jveNudjnI8Xot3tlu3Ox9+Ym784H3lhfjzhZlv1YpPivv7+7bJ6aOs8dXe33VFn2ryPFV/5567JHNsqeLst+K1J8/yvNXtlDZdmz+WWon9wo+8K12WJ3BgYAAAAAAAAAAAAAAAAAAICPlHoq4s8ixf/cXL6Ty5/n/6/3LVbe+lrffP+b3K7m+R+q5v/f7vODzP9fvVdgabujAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkylFEW9GirlLa2llsFzualzszNy6PT4yunW1g6mqOVCVL78aJ0+dPvPFs8PnevGD6++0T8VrY1cuNF+evTk3P7WwMDXZHJ/pXJudnLrvPTxs/c2OVSegefP1W5PXry80T71w+q7Nt4feH3zqyND54eeOP9srOz4yOjrWV6ZWf+Cj3yNts/5AFPFXkeL57/wofW8wooiHPxcfcu3stoNVJ45VnRgfGa06Mt1pzyyWGy/3TkQR0eyr1Oqdo0cwFg+lFbFUNr9s8LGye2Nz7fn21emp5uX2/GJnsTM7czl1W1v2pxlFnEsRyxGxOnjv7upRxOuR4puH19K/DEYM9M7DFy6NffnEqe3bUexiH+9D2c5mPWK5eAzGbB8bjCL+KVL8+J2j8a+DEbXofsXnI14t43cj3orueKfywjgT8d4W1xGPp1oU8X/l+J9fS+8MlveD8ueplrfOXJ/tK9u7rzz2z4dHaZ/fmxpRxPerO/5a+jc/1wAAAAAAAAAAAAAAAAD7SBG/EilefPdoqvKD7+QUd2ZuNK+0r0530/p6uX+9nOn19fX1ZurGVo4TOS7luJzjSo6rOUaR6+fYKmNjfX0iLy/luJzjSo6rOcZArp9jK8eJHJdyXM5xJcfVHKOW6+fYynEix6Ucl3NcyXE1x9gnuXsAAAAAAAAAAAAAAAAAAMCTpaj+SfGNr66l9cHu/NIT0Y0r5gN94v0sAAD//2VM6yY=") ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000440)=""/150) r3 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r4, r3, 0x0, 0x40001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3m43.016378937s ago: executing program 6 (id=2582): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m41.008455401s ago: executing program 6 (id=2586): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0l/bUePFWKBS81pBMQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8Ab1JQ8C6I1ngQLyuz2aQ03U23TdIt6ecDk33fd348z5Md3t0JmQngpfV28SOJGIqIyxFRbo+nEXG41ToScXNju/UHN6aKJYlm88ofSbFbrDfLW8dK2q/Ho7VLvB4R90oRZz5+PG6tsTo/mefZcrs/Ul9YGqk1Vs/OLUzOZrPZ4tj4hdHz4+PnR8efWMNrPdZ68r0LR+/8+O7a2k/f1W+/NXA2iYlW3dGurcfDPJWN30kpJraNL+5HsD5K+p0AAAA9Kb7nH4qIgda31HIcarUAAACAg6Q52AQAAAAOvCQeG2r9YQAAAAA4KDb/D2Dz3t79ug+2m9/fiYjhTvEHWvcQRxyJUkQcW08euTMh2dgNduXmrYi4O7H9/PumOMNu7vLYo9v6j94jfXiXR2cv3C3mn4lO80+6Nf9Eh/lnYPPZCbvUff57GP9Ql/nvco8xvv/yjVLX+Lci3hzoFD/Zip90if9+j/Fvr31yp9u65tcRpzp9/iSPxtrh+RATM3P5jo8fuPfv6fs71X+s4+df0s6he/1LPdb/4fpf893mkiL+6RM7v/+d4hfnxKftPNKIuNN+Lfpr22KcWPj5h53qn45oPsv7/1WP9f/67eD1HjcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAljQihiJJK1vtNK1UIo5HxKtxLM2rtfqZmerK4nSxLmI4SunMXJ6NRkR5o58U/bFW+2H/3Lb+eES88svRjaBzeVaZqubT/S4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALccjYiiStBIRaUT8XU7TSiVioId9B59DfgAAAMAeGe53AgAAAMC+c/0PAAAAB9+zXv8ne5wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKBdvnSpWJrrD25MFf3pa42V+eq1s9NZbb6ysDJVmaouL1Vmq9XZPKtMVReedLy8Wl0auxAr10fqWa0+UmusXl2orizWr84tTM5mV7PSc6kKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApzXUWpK0EhFpq52mlUrE/yJiOErJzFyejUbE/yPifrk0WPTH+p00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe67WWJ2fzPNsWUOj343Nk/JFyWcfGx9FxAuQxg6N/s5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0R62xOj+Z59lyrd+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0F/pb0lEFMup8smh7WsPJ/+UW68R8cEXVz67PlmvL48V439ujdc/b4+f60f+AAAA8FK4+DQbb16nb17HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KrWWJ2fzPNseXeNi9FYbSadtxnqd40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCz+S8AAP//46S/VQ==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='10000', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m35.816000104s ago: executing program 6 (id=2591): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x44000) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000780)=""/4096, 0xffffffa2}], 0x1, 0x12c, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r2, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r2, &(0x7f0000000080)="cd", 0x1) syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000f40)={[{@volume={'volume', 0x3d, 0xe}}, {@volume={'volume', 0x3d, 0x4}}, {@gid}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@nostrict}, {@gid}, {@uid_forget}, {@partition}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc59, &(0x7f0000002940)="$eJzs3U9sHNd5APDvDXfFldxWTJwqThoHm7ZIZcVy9S+iYhXuqqbZFpBlIRR7C8CVSKkLUyRBUo1spC3TSw89BCiKHnIi0BoFEjQw2iLokWldILn4UOTUE9HCRlD0wBYBAhQIGMzsW3FFkbYikSIl/342+e3MvDfz3rzhjE3wmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvvHLhxMm0xYaBPWgMAPBIXBr78olTWz3/AYAn1pXt/v8fAAAAAAAAAAAAAADYL1IU8XSkmLu0liaq5a7GxU791u3xkdGtqx1MVc2Bqnz51Th56vSZL54dPteLFzszH1B/p306Xhu7cqH58uzNufmphYWpyeb4TOfa7OTUfe/hYetvdqw6Ac2br9+avH59oXnqhdN3bb499P7gU0eGzg8/d/zZXtnxkdHRsY0ijf7ytQduSNd2GR4HoojjkeL57/wotSOiiIc/F41HO/abHaw6cazqxPjIaNWR6U57ZrHceLl3IoqIZl+lVu8cbT0WUas/0j5srxWxVDa/bPCxsntjc+359tXpqebl9vxiZ7EzO3M5dVtb9qcZRZxLEcsRsTp47+7qUUQtUnzz8Fq6mt/6UZ2HL1SJwdu3o9jFPt6Hsp3NesRy8RiM2T42GEW8Gil+/M7RuJbvM9W95vMRr5bxuxFvlfGliFReGGci3tviOuLxVIsi/qIc//NrabK6H/TuKxf/oPn7M9dn+8r27is/5/PhnjvFHj0fDm6Kj8Y+vzc1ooh2dcdfSw/+HzsAAAAAAAAAAAAAAAAA7LSDUcSnIsUr//5HVV5xVHnph88P/+7QL/bnjD/zIfspy74QEUvF/eXkHsiJgZfT5ZT2OJf4o6wRRfxxzv/7+l43BgAAAAAAAAAAAAAAAAAA4COtiB9GihffPZqWo39O8c7MjeaV9tXp7qywvbl/e3Omr6+vrzdTFWMoL090l9eXclzOcf1Pu3E15fmFe/WLbmzlOJHjUo7LOa7kuJpjDOT6ObYGol5+mMjLSzku57iS42qOUcv1c2zlOJHjUo7LOa7kuJrjnU409mC4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeUEUU8dNI8Y2vrqVIEdGKmIhuXBnc69YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXBVMQ/Rorm77XurKtFRKr+7TpafjsTrQNl/Hi0hsv4UrQu5NiuYq319T1oPw+nnor4QaQYbLx9Z8Dz+Ne7S3cug3jraxtLn65140Bv49D7g08dOXx+ePSzz2z3OW3VgGMXOzO3bjfHR0ZHx/pW1/LRP963bigft9iZrhMRC2+8+Xp7enpq/sE/lJfAA1bvjeRDHP1Rfki1HWzq4P7ve9T2RTP27kPU9kUz9qbvd6S7ngI8Scrn/3uR4jff/Y/eA7/7/G/EL3SX7jzh4yd/snEdvLh5R/f5/K9trpef/+WTYKvn/9N9617M12G9FtFYvDlXPxLRWHjjzeOdm+0bUzemZs6cOPGl4eEvnT5RPxDRuN6Znur7tCOnCwAAAAAAAAAAAAAAAODRSUX8dqRo/2AtNSPidpWvNXR++Lnjzw7EwL25f6+NXbnQfHn25tz81MLC1GRzfKZzbXZy6n4P16jSvcZHRnelMx/q4C63/2Dj5dm5N+Y7N/5wccvthxoXri4szrevbb05DkYR0epfc6xq8PjIaNXo6U57pqp6eYcSMuupiP+MFNfONNPn8rqc/785w/+u/P+lzTvawfz/zx7ayP/7WDcUvWOmVMRPIsVv/OUz8bmqnYfinnOWy/1tpDh27jO5XBwoy/Xa0H2vQDczsCz7v5HiH356d9lePuTTG2VP/twneJ8rx/9wpFe//effil/N6+5+/8PW439o84526f0Pn+hbd+iu9xU8dNfJ4388Urz09Nvxa9Wa///A93/03thwtFt44/0cuzT+v9y3bigf99d3qvMAAAAAAAAAAACPsXoq4u8ixfdGa+lsXnc/f/83uXlHu/T3X5/sWze5M/MVffi0NwAAAADwhKinIn4YKW4svn0nh/ru/O++/M/f2sj/HEmbtla/5/ul6r0BO/n7v35D+bgTD99tAAAAAAAAAAAAAAAAAAAA2FdSKuJsnk99osrnn9x2PvWVSPHKfz+fy6UjZbnePPBD1ffGpfWZ4xemp2cbsdi+Oj3VHJtrX5sq634iUqz9zWdy3aKaX70333x3jveNudjnI8Xot3tlu3Ox9+Ym784H3lhfjzhZlv1YpPivv7+7bJ6aOs8dXe33VFn2ryPFV/5567JHNsqeLst+K1J8/yvNXtlDZdmz+WWon9wo+8K12WJ3BgYAAAAAAAAAAAAAAAAAAICPlHoq4s8ixf/cXL6Ty5/n/6/3LVbe+lrffP+b3K7m+R+q5v/f7vODzP9fvVdgabujAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkylFEW9GirlLa2llsFzualzszNy6PT4yunW1g6mqOVCVL78aJ0+dPvPFs8PnevGD6++0T8VrY1cuNF+evTk3P7WwMDXZHJ/pXJudnLrvPTxs/c2OVSegefP1W5PXry80T71w+q7Nt4feH3zqyND54eeOP9srOz4yOjrWV6ZWf+Cj3yNts/5AFPFXkeL57/wofW8wooiHPxcfcu3stoNVJ45VnRgfGa06Mt1pzyyWGy/3TkQR0eyr1Oqdo0cwFg+lFbFUNr9s8LGye2Nz7fn21emp5uX2/GJnsTM7czl1W1v2pxlFnEsRyxGxOnjv7upRxOuR4puH19K/DEYM9M7DFy6NffnEqe3bUexiH+9D2c5mPWK5eAzGbB8bjCL+KVL8+J2j8a+DEbXofsXnI14t43cj3orueKfywjgT8d4W1xGPp1oU8X/l+J9fS+8MlveD8ueplrfOXJ/tK9u7rzz2z4dHaZ/fmxpRxPerO/5a+jc/1wAAAAAAAAAAAAAAAAD7SBG/EilefPdoqvKD7+QUd2ZuNK+0r0530/p6uX+9nOn19fX1ZurGVo4TOS7luJzjSo6rOUaR6+fYKmNjfX0iLy/luJzjSo6rOcZArp9jK8eJHJdyXM5xJcfVHKOW6+fYynEix6Ucl3NcyXE1x9gnuXsAAAAAAAAAAAAAAAAAAMCTpaj+SfGNr66l9cHu/NIT0Y0r5gN94v0sAAD//2VM6yY=") fchdir(0xffffffffffffffff) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000440)=""/150) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 3m32.438387275s ago: executing program 6 (id=2594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080088a200040600000e8100"], 0x4a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000040)={&(0x7f0000000480)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0xd, 0x1, 0x0, 0x0, "89cc4395d26133bcea6a60b66cfdc259c580f78906c6b9c734ab16014eb494e8aa181603e17cdeb115e0016488f2e1000000565095137ca58e840c434f4dd4e6"}, 0x48}, 0x2, 0x0, 0x0, 0x24004805}, 0x10044009) 3m29.056819189s ago: executing program 53 (id=2594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="080088a200040600000e8100"], 0x4a) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000040)={&(0x7f0000000480)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0xd, 0x1, 0x0, 0x0, "89cc4395d26133bcea6a60b66cfdc259c580f78906c6b9c734ab16014eb494e8aa181603e17cdeb115e0016488f2e1000000565095137ca58e840c434f4dd4e6"}, 0x48}, 0x2, 0x0, 0x0, 0x24004805}, 0x10044009) 1m50.104492185s ago: executing program 7 (id=2717): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m47.317018916s ago: executing program 7 (id=2720): r0 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d70617468") ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e20302031203120373a302031") ioctl(r1, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") 1m46.967064924s ago: executing program 7 (id=2722): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7ff, @private1, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xd8, "7059bb2c14a9bc185a6b914a8d2f19b8142e96e3831f4ff00bf32b762df0ca5076789fdec21b4d6f71329d3526ef2b40a879136657055d61107049779c89c0f40644e3bf975f73279cb0da2832aed5ec1ed9be0f676dbf0af0793751987cfab98d2e9130856cf5df72d90e554728920057c969fb65d6007bf3b64d5cb87e0df3377a6949d680f63b2155a6953be23638ef496d30de3de0212e9b6541e61e25b9988164d251e030cc0684546a0096bc8d18e55de5102f598978bcdd4e7cd82f704c2537746e5fb593c0230e253d796a918db81161b7c0440c"}, &(0x7f0000000380)=0xe0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={r4, 0x2, 0x3, 0x6, 0x6, 0x2e6, 0x80, 0x8, {r5, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x2, 0x1, 0x4, 0x0, 0x4c1d}}, &(0x7f0000000480)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x84fed0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x4000) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 1m43.158161505s ago: executing program 7 (id=2725): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) unshare(0x400) r3 = syz_io_uring_setup(0x6c8b, &(0x7f00000011c0)={0x0, 0xac0c, 0x10, 0x0, 0x3c1}, &(0x7f0000001340), &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r4, &(0x7f0000001480)=""/265, 0x109, 0x6) socket$inet(0xa, 0x801, 0x84) set_mempolicy(0x4005, 0x0, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) mmap(&(0x7f000015f000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket(0x2d, 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x11d, 0x1, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1m36.987310715s ago: executing program 0 (id=2733): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xf0, 0x40000}) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000200)=0xd0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="7ad13e50a28b", 0x6}, {&(0x7f0000000140)="d6041c1f1d8b8592fffd377cfad376abc5cfa5ef0367c0a792dd579114849d15d014b3aadc7a7c29630d2842f5d6596c760cdc76b6929ae75f1cd50cb1faf115dddaf5621a22895e2dee", 0x4a}, {&(0x7f00000001c0)="275280d9001f6855b6a2df5134792f8430a6ce5b70f497faef132ddf404890de6597be3e92c0442c098e574eae0a47f2decb70619f19a509b32a2bf1fc94797e1c4638c7abefc9b35ecc2176eb70e043bdcb6f846f74bc38601c83f5f025f52b47e2025b5b9b06029b3e539ffb2fb7ac293271bcb0e4dbd920ae046d0384dabec39c2c0b5a1c31b44c7a07f6849bec66e94ab6b174fdaba20369af58aec0f1fd88ab6c354ddf190e2c490f03755b0a566576b344fa4186a414c9ab", 0xbb}], 0x3) connect$netlink(r0, &(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000000}, 0xc) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000000c0)={0xe62}) name_to_handle_at(r0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000100)=@raw={0x10, 0x0, {"4eb8de6014f363a6ea50eef493"}}, 0x0, 0x600) 1m36.527023641s ago: executing program 0 (id=2734): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000080)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', &(0x7f0000000100), &(0x7f0000000180)=0x40, 0x8, 0x1) write(r0, &(0x7f0000000540)='0', 0x1) 1m35.847141841s ago: executing program 0 (id=2735): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232", 0x88, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0x44, 0x32, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2b91e13}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x18}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f00000026c0)=0x4006) ioctl$TCSETSW(r8, 0x5403, &(0x7f0000000100)={0xffbfffff, 0x2, 0x4000086, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) 1m34.140931236s ago: executing program 0 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000480)=0x4000000) 1m31.676634325s ago: executing program 0 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x15) ioctl(r4, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000241)=0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000fbffff1b00000020000180140002006e657464657673696d30000000000000080003"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000242)=0x3f) 1m29.385631189s ago: executing program 7 (id=2744): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7ff, @private1, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xd8, "7059bb2c14a9bc185a6b914a8d2f19b8142e96e3831f4ff00bf32b762df0ca5076789fdec21b4d6f71329d3526ef2b40a879136657055d61107049779c89c0f40644e3bf975f73279cb0da2832aed5ec1ed9be0f676dbf0af0793751987cfab98d2e9130856cf5df72d90e554728920057c969fb65d6007bf3b64d5cb87e0df3377a6949d680f63b2155a6953be23638ef496d30de3de0212e9b6541e61e25b9988164d251e030cc0684546a0096bc8d18e55de5102f598978bcdd4e7cd82f704c2537746e5fb593c0230e253d796a918db81161b7c0440c"}, &(0x7f0000000380)=0xe0) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000003c0)={r4, 0x2, 0x3, 0x6, 0x6, 0x2e6, 0x80, 0x8, {r5, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x2, 0x1, 0x4, 0x0, 0x4c1d}}, &(0x7f0000000480)=0xb0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r7, &(0x7f0000000000)='2', 0x1, 0x84fed0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x4000) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r7, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 1m28.936441341s ago: executing program 0 (id=2746): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m25.342434583s ago: executing program 7 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x1000) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000200000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 1m15.452876796s ago: executing program 9 (id=2757): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0xf) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x101, 0x7}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x9, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000040)=""/42) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04eb4e33f904bfbe3223bf654b009325bb32139fdc41b522d23ec44a9a8d0aac0b6bbd92d4205fae34ba1978bba7365eefedcd78dd398ba6120485b500410cba5e71daaf64c14eb1d3dda3bbf5343e30af283a0d865199dc6e27bed1a13df5f301af51d30bdfd864e0ff1627530609062bb54906b3309f98888293400d429169875f01db9f6e739acf17f40d1367d0fb9f986631f5af95274953fd8464c8bb60b32542cad693afdf240a"], 0x6) 1m12.769269628s ago: executing program 54 (id=2746): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m9.606527427s ago: executing program 55 (id=2750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x3) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f00000000c0)=0x1000) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000000240001800a000100717565756500000014000280080004400000001006000340000200000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) 1m8.844966448s ago: executing program 9 (id=2763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="39000000ed6656e931825baa046ed746be56b4bbccc1ec5de7b532810f9fce8a57c3623e3eb8432e31f46b9747aa265ef5450e18ebe4534e72ec", @ANYRES32=0x0, @ANYBLOB="01180200031100002800128008000100736974001c00028008000200ac1e000106000d000200000008000c0006000000"], 0x48}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r6, 0x100000000) 1m5.806289384s ago: executing program 9 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) 1m1.386385302s ago: executing program 9 (id=2770): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 53.359548652s ago: executing program 9 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1], 0x28}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = dup(r4) setsockopt$inet_int(r5, 0x0, 0xce, 0x0, 0x0) 52.530539583s ago: executing program 9 (id=2777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, r4, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xee00]) sendmsg$netlink(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)={0x2dc, 0x29, 0x300, 0x70bd2a, 0x25dfdbff, "", [@generic="699aaa351a960807ff2477d7569f4564fe2f149975bbe853ef902e4c57a576e0770e31f566105ca516cdf22c21830f593e16e93e2c8d19f80b7e93a51a1eeafa6ab679bf61e91cac86b8d1e7e836d7d2c22a1cc5206f769cc57add7837691d865b99d2cd4dd57a6deb106cad586ab5e3e91dfd825abe1edef1a170dc41d7ea4235fd0919847ac5b7ea809ba34377d062ade7e4b9ccd8e8cd6f880ae5d323cdbff8fc510cdf2596bb6d30f20d3b5264900f2e83792d5e51beebd95c06dbf5179ef0d1931e2949fb2fd1ac779757e8dbef87e7dab9ebb97145c66c509014cd2323b25d14625ac2fff35411695ee093c20668b300"/257, @nested={0xfa, 0x55, 0x0, 0x1, [@generic="cb8907b3b4df716e8fd840417beb517c397b70cd04e38a2948e28b48fe6b75842a8cb3a5b29a9526a7d48ab33ff0fe068ed369c78ba007bfbef7db5266fc81037056ad5000f4786fe65380c65dfae4f943dff67b7b048a28707d906cbbb50e71c2c34e150db430244cbad07d9104f58d69b5a69257d441dd1aff1e91535b2f2de6e1f42e9458e68fbd333901fdbb89d4538b5db0d9f79edafe5dca5351148447634101a320a950227b2509ce683a1f3816606ed3e686b67fa10bc05e1e7b45fc72edc0913397c99fde45508012ff6dfa3cffc18489c5c5a25242194e0abfb2ccba28ae5b13bdc2aa433b67c9199f", @typed={0x8, 0x94, 0x0, 0x0, @pid}]}, @typed={0xcc, 0x4b, 0x0, 0x0, @binary="62f4332f871020cd526dc57adf2f0421e635279681cb7d7770fcfee2641889fee59c68a215de1ee3591f6317515c30bf69fbf449771f357365e65157e4106601a0dc172870eb3c755a2e826e5febc34fd324e7098c40b6d402443122ca4eb03278c3226c62ae9a310296257092cc76e159051fe7ec6d41eafe29d0976e59e781c15e993f079e39bc35df11746da8fd9f16d68bdcd37a916911be2d4ba6c8bec657ea16d55a62db0e05371dde3b5ead7b379111afc2a3068e15867fc34a60fd821fbe85e6f58b040e"}]}, 0x320}], 0x1, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0x38, 0x24008084}, 0x4004000) 50.95569342s ago: executing program 56 (id=2777): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) listen(r0, 0x5) syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x42, 0xa}, {0x80, 0x200, 0x200, 0xa, [0x40]}}}}, 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = open(&(0x7f0000014000)='.\x00', 0x8000, 0x14b) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000080)=0xc) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000902, r4, 0x0) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xee00]) sendmsg$netlink(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)={0x2dc, 0x29, 0x300, 0x70bd2a, 0x25dfdbff, "", [@generic="699aaa351a960807ff2477d7569f4564fe2f149975bbe853ef902e4c57a576e0770e31f566105ca516cdf22c21830f593e16e93e2c8d19f80b7e93a51a1eeafa6ab679bf61e91cac86b8d1e7e836d7d2c22a1cc5206f769cc57add7837691d865b99d2cd4dd57a6deb106cad586ab5e3e91dfd825abe1edef1a170dc41d7ea4235fd0919847ac5b7ea809ba34377d062ade7e4b9ccd8e8cd6f880ae5d323cdbff8fc510cdf2596bb6d30f20d3b5264900f2e83792d5e51beebd95c06dbf5179ef0d1931e2949fb2fd1ac779757e8dbef87e7dab9ebb97145c66c509014cd2323b25d14625ac2fff35411695ee093c20668b300"/257, @nested={0xfa, 0x55, 0x0, 0x1, [@generic="cb8907b3b4df716e8fd840417beb517c397b70cd04e38a2948e28b48fe6b75842a8cb3a5b29a9526a7d48ab33ff0fe068ed369c78ba007bfbef7db5266fc81037056ad5000f4786fe65380c65dfae4f943dff67b7b048a28707d906cbbb50e71c2c34e150db430244cbad07d9104f58d69b5a69257d441dd1aff1e91535b2f2de6e1f42e9458e68fbd333901fdbb89d4538b5db0d9f79edafe5dca5351148447634101a320a950227b2509ce683a1f3816606ed3e686b67fa10bc05e1e7b45fc72edc0913397c99fde45508012ff6dfa3cffc18489c5c5a25242194e0abfb2ccba28ae5b13bdc2aa433b67c9199f", @typed={0x8, 0x94, 0x0, 0x0, @pid}]}, @typed={0xcc, 0x4b, 0x0, 0x0, @binary="62f4332f871020cd526dc57adf2f0421e635279681cb7d7770fcfee2641889fee59c68a215de1ee3591f6317515c30bf69fbf449771f357365e65157e4106601a0dc172870eb3c755a2e826e5febc34fd324e7098c40b6d402443122ca4eb03278c3226c62ae9a310296257092cc76e159051fe7ec6d41eafe29d0976e59e781c15e993f079e39bc35df11746da8fd9f16d68bdcd37a916911be2d4ba6c8bec657ea16d55a62db0e05371dde3b5ead7b379111afc2a3068e15867fc34a60fd821fbe85e6f58b040e"}]}, 0x320}], 0x1, &(0x7f0000000040)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0x38, 0x24008084}, 0x4004000) 21.991757723s ago: executing program 5 (id=2815): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7ff, @private1, 0x5}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xd8, "7059bb2c14a9bc185a6b914a8d2f19b8142e96e3831f4ff00bf32b762df0ca5076789fdec21b4d6f71329d3526ef2b40a879136657055d61107049779c89c0f40644e3bf975f73279cb0da2832aed5ec1ed9be0f676dbf0af0793751987cfab98d2e9130856cf5df72d90e554728920057c969fb65d6007bf3b64d5cb87e0df3377a6949d680f63b2155a6953be23638ef496d30de3de0212e9b6541e61e25b9988164d251e030cc0684546a0096bc8d18e55de5102f598978bcdd4e7cd82f704c2537746e5fb593c0230e253d796a918db81161b7c0440c"}, &(0x7f0000000380)=0xe0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0xa) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r5, &(0x7f0000000000)='2', 0x1, 0x84fed0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x4000) mmap(&(0x7f0000315000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r5, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 16.984386361s ago: executing program 4 (id=2818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4e0800, 0x21) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x47, &(0x7f0000000200)=0x7) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(0xffffffffffffffff, 0x5) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 14.580280341s ago: executing program 4 (id=2820): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x3}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x68}, {0x0}, {&(0x7f0000002740)=""/72, 0x48}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) 14.297409038s ago: executing program 4 (id=2821): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) (async) mount(0x0, 0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0xd1) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x19}, @val={0x8, 0x3, r3}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) (async, rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) socket(0x23, 0x800, 0x1) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x100) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) (async, rerun: 32) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (rerun: 32) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000001c0)="0fc7ffb80a0000000f23c80f21f8350000f0000f23f8f082721000b80e0000000f23d80f21f835400000c00f23f8f26d262e0fc71bb8736f00000f23d80f21f835000000f00f23f80fc7ae2b350000660f3838c20f01fc", 0x57}], 0xaaaaaaaaaaaabc2, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./proc/sys/kernel/sem\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="18ff3f00010029d27000fedbdf2502000000f4abc7ec0000000000"], 0x18}, 0x1, 0x0, 0x0, 0x2004c856}, 0x4008094) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x0, 0x0, 0x8001, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r0, r0, 0x27, 0x4, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) 14.127305248s ago: executing program 5 (id=2822): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 13.155741275s ago: executing program 4 (id=2823): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0l/bUePFWKBS81pBMQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8Ab1JQ8C6I1ngQLyuz2aQ03U23TdIt6ecDk33fd348z5Md3t0JmQngpfV28SOJGIqIyxFRbo+nEXG41ToScXNju/UHN6aKJYlm88ofSbFbrDfLW8dK2q/Ho7VLvB4R90oRZz5+PG6tsTo/mefZcrs/Ul9YGqk1Vs/OLUzOZrPZ4tj4hdHz4+PnR8efWMNrPdZ68r0LR+/8+O7a2k/f1W+/NXA2iYlW3dGurcfDPJWN30kpJraNL+5HsD5K+p0AAAA9Kb7nH4qIgda31HIcarUAAACAg6Q52AQAAAAOvCQeG2r9YQAAAAA4KDb/D2Dz3t79ug+2m9/fiYjhTvEHWvcQRxyJUkQcW08euTMh2dgNduXmrYi4O7H9/PumOMNu7vLYo9v6j94jfXiXR2cv3C3mn4lO80+6Nf9Eh/lnYPPZCbvUff57GP9Ql/nvco8xvv/yjVLX+Lci3hzoFD/Zip90if9+j/Fvr31yp9u65tcRpzp9/iSPxtrh+RATM3P5jo8fuPfv6fs71X+s4+df0s6he/1LPdb/4fpf893mkiL+6RM7v/+d4hfnxKftPNKIuNN+Lfpr22KcWPj5h53qn45oPsv7/1WP9f/67eD1HjcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAljQihiJJK1vtNK1UIo5HxKtxLM2rtfqZmerK4nSxLmI4SunMXJ6NRkR5o58U/bFW+2H/3Lb+eES88svRjaBzeVaZqubT/S4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALccjYiiStBIRaUT8XU7TSiVioId9B59DfgAAAMAeGe53AgAAAMC+c/0PAAAAB9+zXv8ne5wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKBdvnSpWJrrD25MFf3pa42V+eq1s9NZbb6ysDJVmaouL1Vmq9XZPKtMVReedLy8Wl0auxAr10fqWa0+UmusXl2orizWr84tTM5mV7PSc6kKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApzXUWpK0EhFpq52mlUrE/yJiOErJzFyejUbE/yPifrk0WPTH+p00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe67WWJ2fzPNsWUOj343Nk/JFyWcfGx9FxAuQxg6N/s5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0R62xOj+Z59lyrd+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0F/pb0lEFMup8smh7WsPJ/+UW68R8cEXVz67PlmvL48V439ujdc/b4+f60f+AAAA8FK4+DQbb16nb17HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KrWWJ2fzPNseXeNi9FYbSadtxnqd40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCz+S8AAP//46S/VQ==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='10000', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 13.150386671s ago: executing program 1 (id=2824): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80340) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/200) 12.876737697s ago: executing program 1 (id=2825): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x68200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x7f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES8, @ANYRES8=r0], 0xe8}, 0x1, 0x0, 0x0, 0x4004000}, 0x8050) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sigaltstack(0x0, &(0x7f0000000200)={&(0x7f0000000100)=""/212, 0x0, 0xd4}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x6f4e, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000480)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x317, 0x0, 0x0, 0x1000, 0x200, r3, 0x0, 0x1c}}}, &(0x7f00000000c0)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x87d3, 0x0, 0x2, 0x26f}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbb66, 0x10000, 0x1, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9947, 0x40, 0x20000000, 0x325, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4722, 0x2, 0x1, 0x353, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x3b3}}], 0x1, &(0x7f00000002c0)={0x2e, 0x44, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r9, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) write(r4, &(0x7f0000000000)='3', 0x4e) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x1018000, &(0x7f0000000780)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303030303030303030376c6e6f6465636f6d706f73652c6e6c733d6370313235312c6e6f626172726965722c00fb8ecb1abfdbf957917af00a02d9343fc5a1dba832e12e744f05b364bcda35e0a9091d898f0a7368dec296c904eea23ffa01fa90a42997b997a3a1da5e27b2c93dfa4bd319887e3057cc8cc0a1910652380f7745e8dc988e37f41b514dbbf7bac32ecca57e129cce72bbbfc19a3de521e2b2d159439d712d064917e89b0ba6a3aabef17d483d5b0b9bf3a7092c43e6df14f37a108c9d3f6a7f35924c2a45afcbf8"], 0x1, 0x5da, &(0x7f00000010c0)="$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") 11.88285136s ago: executing program 4 (id=2826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000000200)=0x7) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) 9.738512669s ago: executing program 1 (id=2829): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x11, 0x3, 0x7f) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0x58c13618}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRES8=r0], 0x1, 0x153e, &(0x7f00000034c0)="$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") syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x191d814, 0x0, 0x1, 0x0, &(0x7f0000000340)) mkdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x104) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f00000000c0)=0x1) 9.628539317s ago: executing program 5 (id=2830): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x3}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x68}, {0x0}, {&(0x7f0000002740)=""/72, 0x48}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) 9.401977809s ago: executing program 4 (id=2831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x258, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x228, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_BASIC_EMATCHES={0x21c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff, 0x3, 0x6}, {0x9, 0x8001, 0x3, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xd, 0x9, 0x8001}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x3, 0x38d6}, {0x7, 0x10000, 0x40, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc671}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x3}, {0x4, 0x2, 0xa64f5eaf4c269365}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6}, {{0x3, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x200, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x1}, {0x0, 0xf2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x37}, {0x2aac, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c09c0fb3", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4, 0x1}, {0x19, 0x3, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x401, 0x1, 0xf4}, {0xb, 0x4, 0x1, 0x6, 0x8, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x7a2}, {0x1f1, 0x7, 0x1, 0x80000000}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x7, 0x8, 0xefe, 0x991}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x56, 0x7, 0x3}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffb, 0x7, 0xffff}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xa705, 0x9, 0x3e0b}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x7f, 0x0, 0x0, {{0x5, 0x1, 0x5}, {0x7fffffff, 0x59, 0x1, 0x2, 0xd, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0x3, 0x6, 0x232, 0x7f}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x6}, {0x4, 0x3979, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x101}, {0x3, 0x400, 0x66, 0x1, 0x7, 0x2, 0xd8c6312f99b934d9}}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x1}, "087ce0a1fd52c1c1dcfec46fc65300a93f6feb51615e86834d19ee03bc9b6145f565b095f47d84"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x258}}, 0x0) write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="8a02b9", 0x3}, {&(0x7f0000000240)="5b356618c91b5729734e6047f1676c1ae36b6104345a5ccf0d156e6fa022858708ff39f5300f370d0bdec8eeb79c88244e1c2e9bfb2ccb3602c850f29ea4418065eb5075f5534e0e1e3cf69eb930b1726878f94bc688e561832f38c7adcd9c3d4c039a49d51470d57d4ef240ab311f06d862716a915a27edc5bfcffbf1c7150a0585ddbb82e24d6d8353902d4833759f33807de3c18c5e7d8f162d340d5cf37aa3a7ef1b181cf5a8b7041a2fcb9d842f4c6b24", 0xb3}, {&(0x7f0000000340)="49daca4a19803f34783a3b91d17c30af6a40a94f0a1d2da64e2b874ad35b3b90e3ed53e244451b8faf782ddeb676a8b8e649969de72f303d98a92ad5ab97ed1084ce41b970be48714904a512227303c73e93dd6ba3735a596cb5353bb166fc16b770cadc3a61b422182f4b80e561d499f20eefef47ba", 0x76}, {&(0x7f00000003c0)="6ec8d995efa12634ae13ee6cd17c5915c9795a7cd0a2bc6b262adf7a1a6274093ab959ba5be6cdaba2dc742d0d2b6068703cb40d61495cd0573824ba5444da40e5796e2a", 0x44}], 0x4}, 0x4008000) 8.444703141s ago: executing program 57 (id=2831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x258, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x228, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_BASIC_EMATCHES={0x21c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff, 0x3, 0x6}, {0x9, 0x8001, 0x3, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xd, 0x9, 0x8001}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x10, 0x3, 0x38d6}, {0x7, 0x10000, 0x40, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc671}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0x3}, {0x4, 0x2, 0xa64f5eaf4c269365}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x6}, {{0x3, 0x1}, {0x3, 0x0, 0x0, 0x1}}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x200, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb, 0x1}, {0x0, 0xf2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x37}, {0x2aac, 0x9, 0x1}}}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="c09c0fb3", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x4, 0x1}, {0x19, 0x3, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x401, 0x1, 0xf4}, {0xb, 0x4, 0x1, 0x6, 0x8, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x7a2}, {0x1f1, 0x7, 0x1, 0x80000000}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x7, 0x8, 0xefe, 0x991}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x56, 0x7, 0x3}, {{0x4, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xfffb, 0x7, 0xffff}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xb8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x18, 0x1, 0x0, 0x0, {{0xa705, 0x9, 0x3e0b}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CMP={0x18, 0x7f, 0x0, 0x0, {{0x5, 0x1, 0x5}, {0x7fffffff, 0x59, 0x1, 0x2, 0xd, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2}, {0x3, 0x6, 0x232, 0x7f}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x6}, {0x4, 0x3979, 0x3, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x101}, {0x3, 0x400, 0x66, 0x1, 0x7, 0x2, 0xd8c6312f99b934d9}}}, @TCF_EM_CONTAINER={0x34, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x1}, "087ce0a1fd52c1c1dcfec46fc65300a93f6feb51615e86834d19ee03bc9b6145f565b095f47d84"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x258}}, 0x0) write$tun(r0, &(0x7f0000001340)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x67, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000140)="8a02b9", 0x3}, {&(0x7f0000000240)="5b356618c91b5729734e6047f1676c1ae36b6104345a5ccf0d156e6fa022858708ff39f5300f370d0bdec8eeb79c88244e1c2e9bfb2ccb3602c850f29ea4418065eb5075f5534e0e1e3cf69eb930b1726878f94bc688e561832f38c7adcd9c3d4c039a49d51470d57d4ef240ab311f06d862716a915a27edc5bfcffbf1c7150a0585ddbb82e24d6d8353902d4833759f33807de3c18c5e7d8f162d340d5cf37aa3a7ef1b181cf5a8b7041a2fcb9d842f4c6b24", 0xb3}, {&(0x7f0000000340)="49daca4a19803f34783a3b91d17c30af6a40a94f0a1d2da64e2b874ad35b3b90e3ed53e244451b8faf782ddeb676a8b8e649969de72f303d98a92ad5ab97ed1084ce41b970be48714904a512227303c73e93dd6ba3735a596cb5353bb166fc16b770cadc3a61b422182f4b80e561d499f20eefef47ba", 0x76}, {&(0x7f00000003c0)="6ec8d995efa12634ae13ee6cd17c5915c9795a7cd0a2bc6b262adf7a1a6274093ab959ba5be6cdaba2dc742d0d2b6068703cb40d61495cd0573824ba5444da40e5796e2a", 0x44}], 0x4}, 0x4008000) 8.420158684s ago: executing program 5 (id=2833): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$eJxUk9Mf54W7BzfvZtt2TbZt27Y9ue/HRrZt1yLbtrHZbRvP63d5nj/guXjPzJi51t3wngHeO8D7Bnj/AB8Y4IMDHD7AEQMcOcBRA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXAxw9wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D3DMAP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQEOC3DiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkACXCpAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAA3w5ABPCfDUAE8L8PQAzwjwzADPCnAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/g2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAQ4PcESAIwMcFeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhng6AC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AMcE+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NcViIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhkiIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4VoiCeHeEqIp4Z4Woinh3hGiGeGeFaIgxCDEMMQoxDjEJMQ0xCHjIN5iEWIZYhViHWITYhtiF2IfYhnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+GODzEESGODHFUiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYijQ/wqxK9D/CbEb0P8LsTvQ/whxB9D/CnEn0P8JcRfQ/wtxN9DHBPiHyGODfHPEP8K8e8Q/wnx3xD/+x/TCMeJcNwIx4tw/AgniHDCCCeKcGiEwyKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KUIjPDnCUyI8NcLTIjw9wjMiPDPCsyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YITDIxwR4cgIR0X4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9GODrCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcIxEf4R4dgI/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYxDYxwW48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjES41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbj/+kCH/23fHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjj8BhHxDgyxlExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMY6O8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf49xTIx/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTg0ASHJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJUwwZMgQZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQRJcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQETfDkBE9J8NQET0vw9ATPSPDMBM9KcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJDk9wRIIjExyV4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meDoBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcExyT4R4JjE/wzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4kQpDk1xWIoTpzhJipOmOFmKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumSIpLpbh0isukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpWiKJ6d4SoqnpnhaiqeneEaKZ6Z4VoqDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTHF4iiNSHJniqBQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2ZTkuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9McXSKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4pjUvwjxbEp/pniXyn+neI/Kf6b4n8pDslwnAzHzXC8DMfPcIIMJ8xwogyHZjgsw4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyNMOTMzwlw1MzPC3D0zM8I8MzMzwrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9mODzDERmOzHBUhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYajM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98zHJPhHxmOzfDPDP/K8O8M/8nw3wz/y3BIjuPkOG6O4+U4fo4T5DhhjhPlODTHYTlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOS6ZIzkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rjV0yJD/bbFOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjuZ4co6n5HhqjqfleHqOZ+R4Zo5n5TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzv+h+v0WePvSfHe//n8pD/f8NzHJHjyBxH5fjQ/9wfMmTIIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+mePoHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fccx+T4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1wWIETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuOGMzdjlCly+wBUKXLHAlQpcucBVCvyfB6sVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEb/O9fgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYddhIcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgRZ4coGnFHhqgacVeHqBZxR4ZoFnFTgoMCgwLDAqMC4wKTAtMCswL7AosCywKrAusCmwLbArsC/w7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAocXOKLAkQWOKvChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyxwdIFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gWMK/KPAsQX+WeBfBf5d4D8F/lvgf/9rocRxShy3xPFKHL/ECUqcsMSJShxa4rASJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+EucvcYESFyxxoRIXLnGREhctcbESFy9xiRKXLJESlypx6RKXKXHZEpcrcfkSVyhxxRJXKnHlElcpcdUSVytx9RLXKHHNEtcqce0S1ylx3RLXK3H9EjcoccMSNypx4xI3KXHTEjcrcfMStyhxyxK3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8BKPKPHIEo8q8egSjynx2BKPK/H4Ek8o8cQSTyrREk8u8ZQSTy3xtBJPL/GMEs8s8awSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5dLjl0yBA8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8R7Sry3xPtKvL/EB0p8sMThJY4ocWSJo0p8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9LHF3iVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuKYEv8ocWyJf5b4V4l/l/hPif+W+F+JQyocp8JxKxyvwvErnKDCCSucqMKhFQ6rcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s8KQKrfDkCk+p8NQKT6vw9ArPqPDMCs+qcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVDq9wRIUjKxxV4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeHoCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcKx1T4R4VjK/yzwr8q/LvCfyr8t8L/KhxS4zg1jlvjeDWOX+MENU5Y40Q1Dq1xWI0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo0n1WiNJ9d4So2n1nhajafXeEaNZ9Z4Vo2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrHF4jSNqHFnjqBofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csaR9f4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1zimxj9qHFvjnzX+VePfNf5T4781/lfjkAbHaXDcBsdrcPwGJ2hwwgYnanBog8ManLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhwRMbPKlBGzy5wVMaPLXB0xo8vcEzGjyzwbMaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3h2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDwxsc0eDIBkc1+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNji6wa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BMQ3+0eDYBv9s8K8G/27wnwb/bfC/Boe0OE6L47Y4XovjtzhBixO2OFGLQ1sc1uLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS2e2OJJLdriyS2e0uKpLZ7W4uktntHimS2e1eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxze4ogWR7Y4qsWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+Zdj/unmxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxdEtftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y2OafGPaXBsi3+2+FeLf7f4T4v/tvhfi0M6HKfDcTscr8PxO5ygwwk7nKjDoR0O63DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFjmFDhgxxpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQO7fDkDk/p8NQOT+vw9A7P6PDMDs/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdDu9wRIcjOxzV4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eHoDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcOx3T4R4djO/yzw786/LvDfzr8t8P/OhzS4zg9jtvjeD2O3+MEPU7Y40Q9Du1xWI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2SI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9WiPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvsez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7HF4jyN6HNnjqJ7/Y9kem/A8GAUIp7Ztm1vbtm3b3hqp/dw2atttWNu2bTc5c2bev3DNfl2HDXD4AEcMcOQARw1w9AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+Abg/GHvDnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgGMGOHaAQwIcJ8BxAxwvwPEDnCDACQOcKMCJA5wkwEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCrApQMkwGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5wFMCNMBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AoQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAhwW4PAARwQ4MsBRAY4O8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwTIBjAxwS4jghjhvieCGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIS4dIiEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhnhTiySGeEqIhnhriaSGeHuIZIZ4Z4lkhnh3iOSGeG+J5IQ4N8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLDIT4S4qMhPhbisBCHhzgixJEhjgpxdIiP/7/nEHwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6EQyM8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2E10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgswuERjohwZISjIhwd4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwa4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGYTEOj3FEjCNjHBXj6Bgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6c4CkJmuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg0ATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCQ5LcHiCIxIcmeCoBEcn+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFJdOkRSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRPSdEUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FIemeH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0txWIrDUxyR4sgUR6U4OsXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2T4ToaLZbh4hktkuGSGS2W4dIZkuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZnhShidneEqGZnhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52U4NMPzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYhsMyHJ7hiAxHZjgqw9EZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+/b+G383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DMdkODbDITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e/+//zfGoHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBzN8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy3FojufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxHjPWJMc0xyzHPMcixzLHKsc6xybHNscuxz7Ha3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHchyW4/AcR+Q4MsdROY7O8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txTI5jcxxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BQ4t8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbgsAKHFziiwJEFjipwdIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBv/6/z6T4e4F/FPhngX8V+HeB/xT4b4H/FTimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSh5Z4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYmDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK3FYicNLHFHiyBJHlTi6xMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVbh0hVS4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1d4SoVWeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFwyocXuGICkdWOKrC0RU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKrGpWukxmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3PR/JpvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Ti0xvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNw2ocXuOIGkfWOKrG0TU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcfsIhrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ2e0qANntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbgsAaHNziiwZENjmpwdIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2px6RZpcZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u8ZQWbfHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXtzhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFoe1OLzFES2ObHFUi6NbfLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh0t3SIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4coendGiHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3U4rMPhHY7ocGSHozoc3eHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvQ4f4R4d/dvhXh393+E+H/3b4X4djOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XHSHifrcfIep+hxyh6n6nHqHqfpcdoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+tx8R6X6HHJHpfqceke6XGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB5P7vGUHu3x1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/rcWiP5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR6H9Ti8xxE9juxxVI+je/6Ppnfu4fxwnG+3W2xt29apbdu2bZ/ato33y0ZtL7q7tW3bvPnmfn4PYU4yf0wyyfGZAT47wOEDHDHAkQMcNcDnBjh6gGMGOHaAzw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8ChAY4b4HgBjh/gBAEOC3DCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQAJcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IBh/xNXBHhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAB8N8LEAHw/wiQCfDPCpAJ8O8JkAnw1weIAjAhwZ4KgAnwtwdIBjAhwb4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4XjOuQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KURDPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcRbQrw1xNtCvD3EO0K8M8S7QhyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjDQxwR4sgQR4X4XIijQxwT4tgQnw/xhRBf/H+ioRBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcL8LxI5wgwmERThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CO8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLhEY6IcGSEoyJ8LsLREY6JcGyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ahMY4b43gxjh/jBDEOi3HCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3HTpkyP9x2zzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4PMYRMY6McVSMz8U4OsYxMY6N8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcUiC4yQ4NMFxExwvwfETnCDBYQlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOAp503sqQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxMcnuCIBEcmOCrB5xIcneCYBMcm+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcmuK4KY6X4vgpTpDisBQnTHGiFCdOcZIUJ01xshQnT3GKFKdMcaoUp05xmhSnTXG6FKdPcYYUZ0xxphRnTnGWFGdNcbYUZ09xjhTnTHGuFOdOcZ4U501xvhTnT3GBFBdMcaEUF05xkRQXTXGxFBdPcYkUl0yRFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U9/kf7/1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6Y4PMURKY5McVSKz6U4OsUxKY5N8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcUiG42Q4NMNxMxwvw/EznCDDYRlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvtn/DQzcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjTDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZjg8wxEZjsxwVIbPZTg6wzEZjs3w+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHC/H8XOcIMdhOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumSM5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npSjOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH4TmOyHFkjqNyfC7H0TmOyXFsjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+B4BY5f4AQFDitwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqcOECFylw0QIXK3DxApcocMkCKXCpApcucJkCly1wuQKXL3CFAlcscKUCVy5wlQJXLXC1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3LHCjAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAi3w5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8qcFBgUGBYYFRgXGBSYFpgVmBeYFFgWTBsyJAh1gU2BbYFdgX2Bd5d4D0F3lvgfQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4PACRxQ4ssBRBT5X4OgCxxQ4tsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJY5T4tASxy1xvBLHL3GCEoeVOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKHlziixJEljirxuRJHlzimHOrYEp8v8YUSXyzxpRJfLvGVEl8t8bUSX5/of7+AEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4tMJxKxyvwvErnKDCYRVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlkhFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5UoRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0VDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wuEVjqhwZIWjKnyuwtEVjqlwbIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxqE1jlvjeDWOX+MENQ6rccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGqlxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBqt8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszUOr3FEjSNrHFXjczWOrnFMjWNrfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHNLgOA0ObXDcBsdrcPwGJ2hwWIMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSzZIg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1aIMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9tcHiDIxoc2eCoBp9rcHSDYxoc2+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+CQFsdpcWiL47Y4XovjtzhBi8NanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyRVpcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qUVbPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Why0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvDWxzR4sgWR7X/f19GtzimxbEtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+OSF+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf73f3k6HKfDoR2O2+F4HY7f4QQdDutwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7PCkDu3w5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHQ7vcESHIzsc1eFzHY7ucEyHYzt8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfD/zoc0uM4PQ7tcdwex+tx/B4n6HFYjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9kiPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKPJ/Vojyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+7xnh7v7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f7PGpHp/u8Zken+1xeI8jehzZ46gen+txdI9jehzb/380nGPz2AcDZZM2RWrbdntq27Zt26dtatu23eb/s1HbRmobabjzzO7eb3Bn7n135uDrA/jGAL45gG8N4NsD+M4AvjuA7w3g+wP4wQB+OIAfDeDHA/jJAH46gJ8N4OcDOGIAvxjALwfwqwH8egC/GcBvB/C7Afx+AH8YwB8H8KcB/HkAfxnAXwfwtwH8fQD/GMA/B/CvAfx7AP8ZwH8HcOQA/jeAowZw9ACOGcCxAzhuAMcP4KAABwc4QYATBjgkwIkCnDjASQKcNMChAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4V4NIBLhMgAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4LAAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDnB4gAMBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBjgjwiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSA/wU4KsDRAY4JcGyA4wIcH+CgEAeHOEGIE4Y4JMSJQpw4xElCnDTEoSFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4TIiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhziKSGeGqIhnhbi6SGeEeKwEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw5xeIgDIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIY4I8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFkiP+FOCrE0SGOCXFsiONCHB/ioAgHRzhBhBNGOCTCiSKcOMJJIpw0wqERThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhXh0hEuEyERLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBv/f5RDhxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyRGeEuGpERrhaRGeHuEZEQ6L8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QiHRzgQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4YgIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCEdG+F+EoyIcHeGYCMdGOC7C8REOinFwjBPEOGGMQ2KcKMaJY0aO/79xaIyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxbh0jMvESIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SoynxmiMp8V4eoxnxDgsxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa/+3n0GDBl0f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HePwGAdiDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9jHBHjFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b48gY/4txVIyjYxwT49gYx8U4PsZBCQ5OcIIEJ0xwSIITJThxgpMkOGmCQxOcLMHJE5wiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmQRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjwxwZMSPDnBUxI8NUETPC3B0xM8I8FhCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3g8AQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPExyR4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+DIBP9LcFSCoxMck+DYBMclOD7BQSkOTnGCFCdMcUiKE6U4cYqTpDhpikNTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJkVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5xVNSPDVFUzwtxdNTPCPFYSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4vAUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1MckeIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBT/S3FUiqNTHJPi2BTHpTg+xUEZDs5wggwnzHBIhhNlOHGGk2Q4aYZDM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIsMlM1wqw6UzXCZDMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI8OcNTMjw1QzM8LcPTMzwjw2EZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neHwDAcyDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88zHJHhFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgM/8twVIajMxyT4dgMx2U4PsNBOQ7OcYIcJ8xxSI4T5ThxjpPkOGmOQ3OcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKselc1wmR3JcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDnHU3I8NUdzPC3H03M8I8dhOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3j8BwHcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuyHDhr0v088m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e44gcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHEfm+F+Oo3IcneOYHMfmOC7H8TkOKnBwgRMUOGGBQwqcqMCJC5ykwEkLHFrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFLlngUgUuXeAyBVLgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQVa4GkFnl7gGQUOK/DMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkChxc4UGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuCIAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wJHFvhfgaMKHF3gmALHFjiuwPEFDipxcIkTlDhhiUNKnKjEiUucpMRJSxxa4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiVS4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSWeVOLJJZ5S4qklWuJpJZ5e4hklDivxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEoeXOFBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+IzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iiBK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR5b4X4mjShxd4pgSx5Y4rsTxJQ6qcHCFE1Q4YYVDKpyowokrnKTCSSscWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeVzFi+KBBnlDhiRWeVOHJFZ5S4akVWuFpFZ5e4RkVDqvwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCodXOFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+EzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hiAq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8KR1b4X4WjKhxd4ZgKx1Y4rsLxFQ6qcXCNE9Q4YY1DapyoxolrnKTGSWscWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1UuOyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTWeUuOpNVrjaTWeXuMZNQ6r8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqH1zhQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e44gav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qfHfGkfW+F+No2ocXeOYGsfWOK7G8TUOanBwgxM0OGGDQxqcqMGJG5ykwUkbHNrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg0u3eAyDdLgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkNntLgqQ3a4GkNnt7gGQ0Oa/DMBs9q8OwGz2nw3AbPa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGhzc40GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uCIBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNvhfg6MaHN3gmAbHNjiuwfENDmpxcIsTtDhhi0NanKjFiVucpMVJWxza4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lItLt3iMi3S4rItLjdmsMu3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4SountmiLp7V4eotntDisxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1sc3uJAi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lz7T4bIvPtfh8iy+0+GKLL7X4couvtPj/2Nhhr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3OKLFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEt/tfiqBZHtzimxbEtjvtfhxYHdTi4wwk6nLDDIR1O1OHEHU7S4aQdDu1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/oGDJo0CAP6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDu3wtA5P7/CMDod1eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090+GSHT3X4dIfDOxzoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/vcESHX3T4ZYdfdfh1h990+G2H33X4fYc/dPhjhz91+HOHv3T4a4e/dfh7h390+GeHf3X4d4f/dPhvhyM7/K/DUR2O7nBMh2M7HNfh+A4H9Ti4xwl6nLDHIT1O1OPEPU7S46Q9Du1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx7Pjx4/frcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B5P6fHUHu3xtB5P7/GMHof1eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/Dexzo8f8EAAD//9eYyt4=") chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) (fail_nth: 2) 8.419463307s ago: executing program 8 (id=2778): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.454496187s ago: executing program 5 (id=2834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4e0800, 0x21) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) sched_setattr(r1, 0x0, 0x0) add_key$user(&(0x7f0000006400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x8001}}, 0x1, 0xc7}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 5.497107289s ago: executing program 5 (id=2836): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r1 = gettid() (async, rerun: 32) setns(0xc9, 0x0) (rerun: 32) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/tcp\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async, rerun: 64) r3 = getpgrp(0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) (async) close(0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg(r5, &(0x7f0000019080), 0x0, 0x4008845) (async) write$cgroup_subtree(r4, 0x0, 0xfe33) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) (async) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) (async) pread64(r2, &(0x7f0000032680)=""/102390, 0x18ff6, 0x3ff) (async) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x7) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000b27000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000aa3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00000d4000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000adb000/0x4000)=nil, &(0x7f00005b8000/0x2000)=nil, 0x0}, 0x68) (async) tkill(r3, 0x16) 5.456354361s ago: executing program 1 (id=2837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000180)=0x15) ioctl(r4, 0x404c4701, &(0x7f00000001c0)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000241)=0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000fbffff1b00000020000180140002006e657464657673696d30000000000000080003"], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000242)=0x3f) 5.3782126s ago: executing program 8 (id=2838): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r1, r0, &(0x7f00000001c0)=0x1, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x763, &(0x7f0000000d40)="$eJzs3M9rHOUbAPBnptmmP/L9bgTBHwcRWmihdJM0l/bUePFWKBS81pBMQsgkG7Kb2o0FW89CbS4Kgqhnj16FUv8Ab1JQ8C6I1ngQLyuz2aQ03U23TdIt6ecDk33fd348z5Md3t0JmQngpfV28SOJGIqIyxFRbo+nEXG41ToScXNju/UHN6aKJYlm88ofSbFbrDfLW8dK2q/Ho7VLvB4R90oRZz5+PG6tsTo/mefZcrs/Ul9YGqk1Vs/OLUzOZrPZ4tj4hdHz4+PnR8efWMNrPdZ68r0LR+/8+O7a2k/f1W+/NXA2iYlW3dGurcfDPJWN30kpJraNL+5HsD5K+p0AAAA9Kb7nH4qIgda31HIcarUAAACAg6Q52AQAAAAOvCQeG2r9YQAAAAA4KDb/D2Dz3t79ug+2m9/fiYjhTvEHWvcQRxyJUkQcW08euTMh2dgNduXmrYi4O7H9/PumOMNu7vLYo9v6j94jfXiXR2cv3C3mn4lO80+6Nf9Eh/lnYPPZCbvUff57GP9Ql/nvco8xvv/yjVLX+Lci3hzoFD/Zip90if9+j/Fvr31yp9u65tcRpzp9/iSPxtrh+RATM3P5jo8fuPfv6fs71X+s4+df0s6he/1LPdb/4fpf893mkiL+6RM7v/+d4hfnxKftPNKIuNN+Lfpr22KcWPj5h53qn45oPsv7/1WP9f/67eD1HjcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAljQihiJJK1vtNK1UIo5HxKtxLM2rtfqZmerK4nSxLmI4SunMXJ6NRkR5o58U/bFW+2H/3Lb+eES88svRjaBzeVaZqubT/S4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALccjYiiStBIRaUT8XU7TSiVioId9B59DfgAAAMAeGe53AgAAAMC+c/0PAAAAB9+zXv8ne5wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKBdvnSpWJrrD25MFf3pa42V+eq1s9NZbb6ysDJVmaouL1Vmq9XZPKtMVReedLy8Wl0auxAr10fqWa0+UmusXl2orizWr84tTM5mV7PSc6kKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACApzXUWpK0EhFpq52mlUrE/yJiOErJzFyejUbE/yPifrk0WPTH+p00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe67WWJ2fzPNsWUOj343Nk/JFyWcfGx9FxAuQxg6N/s5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0R62xOj+Z59lyrd+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0F/pb0lEFMup8smh7WsPJ/+UW68R8cEXVz67PlmvL48V439ujdc/b4+f60f+AAAA8FK4+DQbb16nb17HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9KrWWJ2fzPNseXeNi9FYbSadtxnqd40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCz+S8AAP//46S/VQ==") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='10000', 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$udf(&(0x7f0000001880), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00089aafc727346c3e0d8728525a2641b3b31621730c58dcf8e0ca2e6767a45a978776e9d2c689feab83a160d00a77ae5112cd4e7141cad333d7cbb69dc6b314609d3827059c11066ba0b4b95c12d2d9ff9c8896d9e247bd55f9ff578a14e0e9d0ca07693396b00d2ef44adb4858475a07d5e8fa3ef5b306fe8a5d1cd2d8e06e7f88226ece092c6aabf8870e140124d5a48670513e0c419c99b7c5105959e7a535f12694634cf272490e0000"], 0x1, 0x4ac, &(0x7f0000000500)="$eJzs20tsG1UXwPFzPLbruPk+3Adpi6piCSRCS9skLmmrIKE8iEBqG0gaEBUPhdgJJk4cxSkkVUu7BHYsumTJlgUrxBZVYolYoCDUXemGjVeUHeiO52XXSewm8TT1/1e1dx7H7r33zMy914kFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIDL022NOrYdcCAAC00qWJ8Z4M4z8AAG3lMut/AACAdqJiyR+icnKurBft/YrEhfzC1ZXJkdH6L+tQUYmIZcebv4nevsyZl/vPnnPLjV+/3Y7I2MTlwfRwcX5xKVcq5bLpyYX8dDGba/gdtvr6WsftDkjPz13NzsyU0n2nMlWnV1L39+ztSg30vz8cd2MnR0ZHJwIx0dgj/+8PWW+GHxdLXhSVT374Ti+JSES23hebXDs7rcNuxHG7EZMjo3ZDCvmphWVzUiNOVKS6T+JuH7UgF1sSETH10vj2rNliYsmPojJ0uqxjImK5/XDC/mC4ofqEIWqWriLSLbsgZ4+xPWLJh6Jy53RK3nT61c5/XOR62JXDjos6939Ry/qW/Tww95N5bF54O/3GwkwxEKsR545qZnyocw+GPj600mP+bEqIJWP2HV/W8bArg5brEEvmRSX+9af2vELseelTA2ePPXs+OMM4tMn7mNhTzs3VyJgcc6YOGjF/HqHa2BYJteRPUXnwe8Le73Zyw08E2oRaUhCVf26UVWvWpVZgfe/Z7WvDna1/R2K4uLi6lJ/9eLnu+WRi8KPS8tLUdP3TlbWrFTyy2Tq2VqS5JVlSKyu+Lz4re69z1gD/q+z5tfn2un8tdNeUruD108h2w8+ZJuZRpk6qltwTlZkPDlfGGUk23TftwOR/VFRK5V/UzbST/2hlL5D/V/z+S2h16bFz+//K51ruXOLIlYPrHd+J/Js6mfy/KypDfx92PtOo5N+qiTVxXaLy3u2jTlwkbuKibnMq7ziTL+R6TOy/orL/ZzdW7NikE3vAj+01sSVR+fJOdexeJ/agH9tnYtdE5e5v9WOf9mMzJnbV5Otu2o1NmthjTmyXH3tquljIbtatJv99ovLOzdfVbfO6+Q/c/7dqSs9DOd94e7vynwocu+Xk9YqT/+gm+f9KVFb/Ouq22+5797LaZ//r59/Mlb+/XR3rTkb3+7G9jTYrbCb/+0Tl/qtrXpudtjm7foaC+X8mWl16/RpS/vcFjqWcesWb7It2VFq9NjdVKOSW2GCDDTa8jbCfTGgFM/6Pm1G931J3HuOM/52VPX/G9OBzf/wfqCk9IY3/+wPHBpxZSywqklieX4wdEkmUVq+dzM9PzeZmcwuZM/09fefP9GTOxeLu5M7farjvngQm/ydE5cZPv3rrmOr5X/35f7Km9ISU/wPBNlXNaxruirZk8t8pKv331rz15kbzf3f93/1cdendfyHl/2DgWMqpV2eTfQEAAAAAAAAAAAAAAAAAu0lSLXleVFbGX1L3O0SN/P5ftqb0hPT7X12BY9nt/16D+9WoqlONVh0AAAAAAAAAAKCVImLJN6LygpT1pjnQKXIxWOKJ9l8AAAD//16uQhc=") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') ftruncate(0xffffffffffffffff, 0x2007ffc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.355628016s ago: executing program 3 (id=2839): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 3.755849613s ago: executing program 1 (id=2840): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000200010000001800088014000780"], 0x40}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) dup(0xffffffffffffffff) socket(0xa, 0x5, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) ptrace(0x10, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb06}, 0x94) mount(0x0, 0x0, &(0x7f0000000000)='romfs\x00', 0x200000, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.321059781s ago: executing program 3 (id=2841): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000180)=""/62, 0x3e}, {&(0x7f0000001640)=""/4092, 0xffc}], 0x3}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000040)=""/104, 0x68}, {0x0}, {&(0x7f0000002740)=""/72, 0x48}], 0x5}, 0x900000}], 0x7, 0x0, 0x0) 2.787952321s ago: executing program 3 (id=2842): r0 = userfaultfd(0x80801) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f0000000200)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d7061746830") ioctl(r1, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000") ioctl(r1, 0xc138fd04, &(0x7f0000000700)="040000000000000000000000380100003801000000f0ff000000000000000000000000000000000000000000000000006d7061746830") 2.314908705s ago: executing program 3 (id=2843): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232", 0x88, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000300)=ANY=[], 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0x44, 0x32, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2b91e13}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x18}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x4000010) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82581, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000026c0)=0x4006) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000100)={0xffbfffff, 0x2, 0x4000086, 0x6, 0x17, "c7d92c0155b6056ee613657246ec62b016d5a9"}) 1.769072798s ago: executing program 3 (id=2844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8=r0, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00000008001100070000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 151.218566ms ago: executing program 1 (id=2845): openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_rr_get_interval(0x0, &(0x7f0000000340)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) sysinfo(&(0x7f00000002c0)=""/112) r3 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="81cd", 0x2, r3) keyctl$search(0xb, r3, &(0x7f0000000240)='big_key\x00', &(0x7f0000000180)={'syz', 0x1}, r3) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a0000000000000004000b00e42410cbac3d9a383038da00d0643d084ab4e2c1534b1a1e17cad4deb786dc9c680895ec450f39afe7384dc885b2af3e72d58d612a4dde395cc8411ea57b906fa89da50f2fa4f7879039353a70986c310ed614e2e772f21a8827f2d36786d7ae946b97f389cd9e62cac96162e1ae3fa14383de94231451e2906cd64d2c0c9f01d02d275bef4098860a40c6cf35666c15dbd1090bc9471b78070b1c71b36e9aa4998c02005fe486ed3378fae0d2538ecb3362459c9d21"], 0x1c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000240)) 1.401215ms ago: executing program 8 (id=2846): syz_emit_ethernet(0x2a, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1234, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0xac141401}, {0x1, 0x50, 0x8}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x301c8ca, &(0x7f0000000440)=ANY=[@ANYBLOB='nonumtail=0,nonumtail=0,nfs,uni_xlate=0,utf8=0,quiet,shortname=lower,uni_xlate=1,rodir,iocharset=utf8,utf8=0,utf8=0,check=strict,codepage=775,iocharset=cp864,nonumtail=0,dmask=000000000000000000004,uni_xlate=0,\x00\x00\x00'], 0x2, 0x2ba, &(0x7f0000000900)="$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") syz_emit_ethernet(0x6a, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x67, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@empty}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@loopback}, {@local, 0x4}]}]}}}}}}}, 0x0) r0 = open(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xc000, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r2, 0x0, 0x0}, 0x20) flock(r0, 0x2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x26, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x1, 0x8, 0xb, 0x40, 0x1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x40}, @tail_call, @ldst={0x0, 0x0, 0x0, 0x4, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x1, 0x47, &(0x7f0000000540)=""/71, 0x41000, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000005c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xd, 0x9, 0x80000000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r1, r0, r3], &(0x7f00000006c0)=[{0x5, 0x4, 0x3, 0x9}, {0x3, 0x4, 0x7, 0x9}, {0x0, 0x2, 0xe, 0xb}, {0x2, 0x1, 0x10, 0x1}, {0x0, 0x3, 0xb, 0xb}, {0x2, 0x4, 0x9, 0x5}], 0x10, 0x3}, 0x94) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80340) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000040)=""/187) 0s ago: executing program 3 (id=2847): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\]\x00r', @ANYRES8, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x2000}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 7/0x7f [ 1447.721316][T18836] ? clear_bhb_loop+0x70/0xc0 [ 1447.721345][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.721369][T18836] RIP: 0033:0x7f66b3d9e159 [ 1447.721390][T18836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.721411][T18836] RSP: 002b:00007f66b4ca3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.721436][T18836] RAX: ffffffffffffffda RBX: 00007f66b4026090 RCX: 00007f66b3d9e159 [ 1447.721462][T18836] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1447.721477][T18836] RBP: 00007f66b4ca3090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.721492][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.721507][T18836] R13: 00007f66b4026128 R14: 00007f66b4026090 R15: 00007ffc144bf188 [ 1447.721545][T18836] [ 1448.473490][ T33] audit: type=1400 audit(1790749300.207:258): apparmor="STATUS" operation="profile_replace" profile="unconfined" name=223A6F pid=18839 comm="syz.0.2478" [ 1449.180098][ T5269] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1449.683552][ T33] audit: type=1400 audit(1790749301.377:259): apparmor="STATUS" operation="profile_replace" profile="unconfined" name=223A6F pid=18854 comm="syz.0.2491" [ 1450.709064][T18868] loop0: detected capacity change from 0 to 4096 [ 1451.266172][T18871] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1452.696586][T18891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.727102][T18891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.913660][ T8700] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1452.983779][ T9869] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1453.083692][ T8700] usb 8-1: Using ep0 maxpacket: 8 [ 1453.088488][ T8700] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1453.109206][ T8700] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1453.109238][ T8700] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.109259][ T8700] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1453.109300][ T8700] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.152569][ T8700] usb 8-1: config 0 descriptor?? [ 1453.188736][ T9869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1453.207609][ T9869] usb 6-1: not running at top speed; connect to a high speed hub [ 1453.207639][ T9869] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1453.220360][ T9869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.220442][ T9869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1453.291817][ T9869] usb 6-1: string descriptor 0 read error: -22 [ 1453.291921][ T9869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.378318][ T9869] usb 6-1: 0:2 : does not exist [ 1453.613591][ T5719] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1453.766254][ T5719] usb 7-1: Using ep0 maxpacket: 32 [ 1453.768803][ T5719] usb 7-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1453.781484][ T5719] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1453.781632][ T5719] usb 7-1: config 0 has no interface number 0 [ 1453.781811][ T5719] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1453.816601][ T5719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.816624][ T5719] usb 7-1: Product: syz [ 1453.816656][ T5719] usb 7-1: Manufacturer: syz [ 1453.816668][ T5719] usb 7-1: SerialNumber: syz [ 1453.851712][ T5719] usb 7-1: config 0 descriptor?? [ 1453.903162][T18902] loop2: detected capacity change from 0 to 2048 [ 1454.003538][T18902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1454.003651][T18902] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.797486][T17221] EXT4-fs error (device loop2): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /50/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 1454.913957][T17221] EXT4-fs error (device loop2): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1454.919145][T17221] EXT4-fs error (device loop2): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1455.144976][ T5269] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1456.568347][T18918] loop0: detected capacity change from 0 to 512 [ 1456.727831][T18918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1456.759231][T18918] EXT4-fs (loop0): 1 truncate cleaned up [ 1456.760785][T18918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.792454][ T5269] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1456.925929][T17221] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.092061][ T8700] usb 8-1: USB disconnect, device number 28 [ 1457.156214][ T9869] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1457.204807][ T9869] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1457.204843][ T9869] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1457.204864][ T9869] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1457.247956][ T9869] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1457.265030][ T9869] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1457.323256][ T9869] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1457.362117][ T9869] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1457.436222][ T9869] usb 6-1: USB disconnect, device number 14 [ 1457.842840][T18413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1459.343845][ T5719] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -32 [ 1459.343908][ T5719] f81534 7-1:0.12: f81534_find_config_idx: read failed: -32 [ 1459.343928][ T5719] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 1459.344021][ T5719] f81534 7-1:0.12: probe with driver f81534 failed with error -32 [ 1459.476887][T18925] loop5: detected capacity change from 0 to 512 [ 1459.478195][T18925] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1459.482571][ T5719] usb 7-1: USB disconnect, device number 14 [ 1459.510188][T18925] EXT4-fs (loop5): 1 truncate cleaned up [ 1459.524384][T18925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.817254][ T1279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.049874][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.488218][ T1279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.985979][T14353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1461.012259][T14353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1461.014491][T14353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1461.034205][T14353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1461.034875][T14353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1461.145385][ T1279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.655216][ T1279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.133577][ T27] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1462.323202][ T27] usb 7-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1462.342859][ T27] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1462.342896][ T27] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1462.342932][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.477984][T18961] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1462.499871][ T27] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1463.185533][T14353] Bluetooth: hci3: command tx timeout [ 1463.663704][ T8700] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1463.752481][ T1279] bridge_slave_1: left allmulticast mode [ 1463.752513][ T1279] bridge_slave_1: left promiscuous mode [ 1463.752807][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.791378][T18958] loop7: detected capacity change from 0 to 32768 [ 1463.822392][T18958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2510 (18958) [ 1463.845739][ T8700] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1463.846428][ T8700] usb 6-1: not running at top speed; connect to a high speed hub [ 1463.846462][ T8700] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1463.879010][ T5719] usb 7-1: USB disconnect, device number 15 [ 1463.880934][ T8700] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.880964][ T8700] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1463.910896][ T8700] usb 6-1: string descriptor 0 read error: -22 [ 1463.911037][ T8700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.031090][ T1279] bridge_slave_0: left allmulticast mode [ 1464.031121][ T1279] bridge_slave_0: left promiscuous mode [ 1464.031347][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.203831][T18958] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1464.206003][T18958] BTRFS info (device loop7): using crc32c checksum algorithm [ 1465.914032][T14353] Bluetooth: hci3: command tx timeout [ 1465.938287][T18958] BTRFS info (device loop7): enabling ssd optimizations [ 1465.938319][T18958] BTRFS info (device loop7): turning on flush-on-commit [ 1465.938338][T18958] BTRFS info (device loop7): enabling free space tree [ 1465.938358][T18958] BTRFS info (device loop7): enabling auto defrag [ 1465.938379][T18958] BTRFS info (device loop7): use lzo compression, level 1 [ 1465.938402][T18958] BTRFS info (device loop7): max_inline set to 4096 [ 1466.128146][ T8700] usb 6-1: 0:2 : does not exist [ 1466.802638][T17322] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1466.965012][ T8700] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1467.068296][ T8700] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1467.068333][ T8700] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1467.068354][ T8700] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1467.138660][ T8700] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1467.174620][ T8700] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1467.999377][T14362] Bluetooth: hci3: command tx timeout [ 1468.098888][ T8700] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1468.126443][ T8700] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1468.297857][ T8700] usb 6-1: USB disconnect, device number 15 [ 1468.711766][ T1279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1468.813273][ T1279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1468.855761][ T1279] bond0 (unregistering): Released all slaves [ 1469.185860][ T5269] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1469.250969][T19023] 9p: Bad value for 'wfdno' [ 1469.529609][T18951] lo speed is unknown, defaulting to 1000 [ 1470.063624][T14353] Bluetooth: hci3: command tx timeout [ 1472.550354][T19045] loop0: detected capacity change from 0 to 512 [ 1472.563007][T19045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1472.639775][T19045] EXT4-fs (loop0): 1 truncate cleaned up [ 1472.641560][T19045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1472.816553][T19055] loop7: detected capacity change from 0 to 256 [ 1473.498956][T19055] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1473.535480][ T33] audit: type=1800 audit(1790749325.277:260): pid=19054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2524" name="file1" dev="loop7" ino=200 res=0 errno=-22 [ 1473.801823][ T1279] hsr_slave_0: left promiscuous mode [ 1473.828585][ T1279] hsr_slave_1: left promiscuous mode [ 1473.840336][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.840364][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.872001][ T1279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.872021][ T1279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.050630][T18413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.852473][ T1279] veth1_macvtap: left promiscuous mode [ 1474.852506][ T1279] veth0_macvtap: left promiscuous mode [ 1474.852595][ T1279] veth1_vlan: left promiscuous mode [ 1474.852643][ T1279] veth0_vlan: left promiscuous mode [ 1475.563707][T19069] loop6: detected capacity change from 0 to 4096 [ 1475.951932][T19073] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1476.118560][T19069] NILFS (loop6): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1476.855658][T16955] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1477.036162][T16955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1477.036692][T16955] usb 1-1: not running at top speed; connect to a high speed hub [ 1477.036729][T16955] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1477.040326][T16955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1477.040356][T16955] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1477.115678][T16955] usb 1-1: string descriptor 0 read error: -22 [ 1477.115818][T16955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.148797][T16955] usb 1-1: 0:2 : does not exist [ 1478.318776][ T8698] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1478.483679][ T8698] usb 6-1: Using ep0 maxpacket: 16 [ 1478.485485][ T8698] usb 6-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1478.487088][ T8698] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.487122][ T8698] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1478.491806][ T8698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.491862][ T8698] usb 6-1: Product: syz [ 1478.491880][ T8698] usb 6-1: Manufacturer: syz [ 1478.491898][ T8698] usb 6-1: SerialNumber: syz [ 1478.572623][ T8698] usb 6-1: config 0 descriptor?? [ 1478.598604][ T8698] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1478.615114][ T8698] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1478.937469][T19083] ublk_ctrl_add_dev: dev id not match 4294967295 6 [ 1478.956914][ T27] usb 6-1: USB disconnect, device number 16 [ 1479.177201][ T1279] team0 (unregistering): Port device team_slave_1 removed [ 1479.251229][ T1279] team0 (unregistering): Port device team_slave_0 removed [ 1479.632744][T16955] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1479.680388][T16955] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1479.680415][T16955] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1479.680429][T16955] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1479.717019][T16955] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1479.740283][T16955] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1479.873237][T16955] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1479.984522][T19090] gfs2: error -5 reading superblock [ 1480.117394][T16955] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1480.510309][T19091] loop0: detected capacity change from 0 to 2048 [ 1480.699376][T19091] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1481.032897][T16955] usb 1-1: USB disconnect, device number 12 [ 1481.116094][T19095] fuse: Bad value for 'fd' [ 1484.016591][T19099] loop6: detected capacity change from 0 to 512 [ 1484.018015][T19099] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1484.023193][T19099] EXT4-fs (loop6): 1 truncate cleaned up [ 1484.025906][T19099] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1484.141779][T19102] loop5: detected capacity change from 0 to 136 [ 1484.157226][T19102] iso9660: Unknown parameter 'euid<000000' [ 1484.795790][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.795855][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.903819][T19109] siw: device registration error -23 [ 1485.674225][T16956] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.264995][ T5719] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1486.431305][ T5719] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 1486.442542][ T5719] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 1486.442589][ T5719] usb 1-1: config 1 has no interface number 0 [ 1486.470420][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.470443][ T5719] usb 1-1: Product: syz [ 1486.470454][ T5719] usb 1-1: Manufacturer: syz [ 1486.470466][ T5719] usb 1-1: SerialNumber: syz [ 1486.540380][ T5719] usb 1-1: 3:1 : does not exist [ 1486.579106][ T5719] usb 1-1: 3:2 : does not exist [ 1486.763959][T19127] loop7: detected capacity change from 0 to 136 [ 1486.784569][T14353] Bluetooth: hci1: command 0x0406 tx timeout [ 1486.952467][T18951] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.952587][T18951] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.952756][T18951] bridge_slave_0: entered allmulticast mode [ 1486.977954][T18951] bridge_slave_0: entered promiscuous mode [ 1486.994655][T18951] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.994852][T18951] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.996930][T18951] bridge_slave_1: entered allmulticast mode [ 1487.038007][T18951] bridge_slave_1: entered promiscuous mode [ 1487.150252][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2541'. [ 1487.187242][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.201149][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.262066][T19128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.272200][T19128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.331315][T18951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.355665][T18951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.355918][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2541'. [ 1487.641477][T18951] team0: Port device team_slave_0 added [ 1487.661610][T18951] team0: Port device team_slave_1 added [ 1487.791016][T18951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1487.791037][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.791066][T18951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.800897][T18951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.800916][T18951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.800945][T18951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.834077][ T8698] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 1488.086658][ T8698] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1488.088104][ T8698] usb 8-1: not running at top speed; connect to a high speed hub [ 1488.088141][ T8698] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1488.089285][ T8698] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.089310][ T8698] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1488.167612][ T8698] usb 8-1: string descriptor 0 read error: -22 [ 1488.167758][ T8698] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.236557][ T8698] usb 8-1: 0:2 : does not exist [ 1488.281981][T18951] hsr_slave_0: entered promiscuous mode [ 1488.294625][T18951] hsr_slave_1: entered promiscuous mode [ 1488.295372][T18951] debugfs: 'hsr0' already exists in 'hsr' [ 1488.295396][T18951] Cannot create hsr debugfs directory [ 1489.345769][T19130] loop5: detected capacity change from 0 to 32768 [ 1489.462681][T19130] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1489.570463][ T9869] usb 1-1: USB disconnect, device number 13 [ 1489.626012][T19130] XFS (loop5): Ending clean mount [ 1489.763008][T19130] XFS (loop5): Quotacheck needed: Please wait. [ 1490.279407][T19159] loop0: detected capacity change from 0 to 4096 [ 1490.493475][T19161] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1490.811649][T19159] NILFS (loop0): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1491.141349][T18951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.150772][ T8698] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1491.166496][ T8698] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1491.166530][ T8698] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1491.166550][ T8698] usb 8-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1491.176499][ T8698] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1491.257701][ T8698] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 1491.460237][ T8698] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1491.462832][T19130] XFS (loop5): Quotacheck: Done. [ 1491.523545][ T8698] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1491.851346][ T8698] usb 8-1: USB disconnect, device number 29 [ 1492.033909][T19172] loop6: detected capacity change from 0 to 256 [ 1492.684824][T19172] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1492.731961][ T33] audit: type=1800 audit(1790749344.457:261): pid=19171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2539" name="file1" dev="loop6" ino=201 res=0 errno=-22 [ 1493.214137][T19175] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1493.255112][T18067] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1493.422345][T18951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.558714][T19182] gfs2: error -5 reading superblock [ 1494.217037][T19182] loop6: detected capacity change from 0 to 2048 [ 1494.369121][T19182] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1496.548063][T18951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.111850][T19204] loop7: detected capacity change from 0 to 40427 [ 1497.125046][T19204] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 1497.125070][T19204] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1497.146152][T19204] F2FS-fs (loop7): invalid crc value [ 1497.271959][T19204] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1497.304718][T19204] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1497.304751][T19204] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1497.383806][T18951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.883213][T19214] syz.7.2551: attempt to access beyond end of device [ 1497.883213][T19214] loop7: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 1498.248763][T19192] syzkaller0: entered promiscuous mode [ 1498.248837][T19192] syzkaller0: entered allmulticast mode [ 1499.334443][T19219] loop5: detected capacity change from 0 to 64 [ 1499.442065][T17322] syz-executor: attempt to access beyond end of device [ 1499.442065][T17322] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1499.491709][T19219] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1499.507038][T17322] CPU: 1 UID: 0 PID: 17322 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1499.507077][T17322] Tainted: [L]=SOFTLOCKUP [ 1499.507087][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1499.507101][T17322] Call Trace: [ 1499.507111][T17322] [ 1499.507122][T17322] dump_stack_lvl+0xe8/0x150 [ 1499.507165][T17322] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 1499.507390][T17322] f2fs_write_end_bio+0xda7/0x11c0 [ 1499.507494][T17322] __submit_merged_bio+0x258/0x6a0 [ 1499.507522][T17322] ? rcu_is_watching+0x16/0xb0 [ 1499.507564][T17322] f2fs_submit_merged_write_cond+0x1ef/0x590 [ 1499.507595][T17322] ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10 [ 1499.507650][T17322] f2fs_write_data_pages+0x2a13/0x36e0 [ 1499.507720][T17322] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1499.507751][T17322] ? is_bpf_text_address+0x26/0x2b0 [ 1499.507788][T17322] ? arch_stack_walk+0xfb/0x150 [ 1499.507856][T17322] ? add_lock_to_list+0xc7/0x100 [ 1499.507893][T17322] ? lockdep_unlock+0x5c/0xd0 [ 1499.507917][T17322] ? __lock_acquire+0x1511/0x2de0 [ 1499.507971][T17322] ? do_raw_spin_lock+0x12b/0x2f0 [ 1499.508006][T17322] ? do_raw_spin_unlock+0xf5/0x200 [ 1499.508030][T17322] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1499.508062][T17322] do_writepages+0x338/0x560 [ 1499.508100][T17322] ? do_raw_spin_unlock+0xf5/0x200 [ 1499.508129][T17322] filemap_fdatawrite+0x1e9/0x2f0 [ 1499.508160][T17322] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1499.508237][T17322] ? do_raw_spin_unlock+0xf5/0x200 [ 1499.508266][T17322] f2fs_sync_dirty_inodes+0x471/0x970 [ 1499.508318][T17322] f2fs_write_checkpoint+0x860/0x24d0 [ 1499.508393][T17322] kill_f2fs_super+0x2dc/0x700 [ 1499.508431][T17322] ? rcu_do_enqueue+0x616/0x870 [ 1499.508460][T17322] ? lockdep_hardirqs_on+0x7b/0x110 [ 1499.508493][T17322] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1499.508545][T17322] ? __pfx_call_rcu+0x10/0x10 [ 1499.508587][T17322] ? shrinker_free+0x2a7/0x3b0 [ 1499.508618][T17322] deactivate_locked_super+0xbe/0x110 [ 1499.508650][T17322] cleanup_mnt+0x3d3/0x460 [ 1499.508689][T17322] task_work_run+0x1d9/0x260 [ 1499.508723][T17322] ? __pfx_task_work_run+0x10/0x10 [ 1499.508763][T17322] exit_to_user_mode_loop+0x204/0x770 [ 1499.508796][T17322] ? rcu_is_watching+0x16/0xb0 [ 1499.508842][T17322] do_syscall_64+0x328/0x520 [ 1499.508874][T17322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.508898][T17322] ? clear_bhb_loop+0x70/0xc0 [ 1499.508926][T17322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.508950][T17322] RIP: 0033:0x7f581bd9f397 [ 1499.508972][T17322] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1499.508993][T17322] RSP: 002b:00007ffc4bef4a38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1499.509019][T17322] RAX: 0000000000000000 RBX: 00007f581be344bb RCX: 00007f581bd9f397 [ 1499.509035][T17322] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc4bef4af0 [ 1499.509049][T17322] RBP: 00007ffc4bef4af0 R08: 00007ffc4bef5af0 R09: 00000000ffffffff [ 1499.509065][T17322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc4bef5b80 [ 1499.509081][T17322] R13: 00007f581be344bb R14: 000000000016dc5c R15: 00007ffc4bef5bc0 [ 1499.509117][T17322] [ 1499.543153][T17322] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1499.897708][T16955] loop7: lost filesystem error report for type 5 error -108 [ 1499.905001][T19225] IPVS: length: 217 != 24 [ 1500.710122][ T27] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1500.869042][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1500.875725][ T27] usb 1-1: not running at top speed; connect to a high speed hub [ 1500.875829][ T27] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1500.901094][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.901178][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1500.966766][ T27] usb 1-1: string descriptor 0 read error: -22 [ 1500.966869][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.071196][ T27] usb 1-1: 0:2 : does not exist [ 1501.751521][T18951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1501.810374][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1501.826653][T18951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1501.864325][T19245] loop6: detected capacity change from 0 to 4096 [ 1501.915879][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1501.916834][T18951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1501.977484][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1501.978479][T18951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1502.072589][T18951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1502.505946][T18951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.564740][T19245] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 1502.745533][T18951] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.808825][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.808921][T17427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.891769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.891885][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.048378][T19237] loop5: detected capacity change from 0 to 40427 [ 1503.157517][T19258] ntfs3(loop6): ino=1f, mi_enum_attr [ 1503.373862][ T9869] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1503.523418][ T9869] usb 7-1: Using ep0 maxpacket: 8 [ 1503.524173][ T9869] usb 7-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 1503.531556][ T9869] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.531614][ T9869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1503.591600][ T9869] mdc800 7-1:1.0: probe fails -> wrong Interface [ 1503.738507][ T27] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1503.786268][T16383] usb 7-1: USB disconnect, device number 16 [ 1503.832978][ T27] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1503.833005][ T27] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1503.833019][ T27] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1503.877574][ T27] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1503.909208][ T27] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1504.071657][ T27] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1504.328220][ T27] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1504.535219][ T27] usb 1-1: USB disconnect, device number 14 [ 1504.803672][T16955] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1504.954478][T16955] usb 6-1: device descriptor read/64, error -71 [ 1506.633810][T16955] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1506.763414][T16955] usb 6-1: device descriptor read/64, error -71 [ 1506.892375][T16955] usb usb6-port1: attempt power cycle [ 1506.916965][T19298] gfs2: error -5 reading superblock [ 1507.318635][T19299] loop0: detected capacity change from 0 to 2048 [ 1507.443277][T19299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1507.683394][T16955] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1508.001597][T19293] loop7: detected capacity change from 0 to 2048 [ 1508.280258][T16955] usb 6-1: device descriptor read/8, error -71 [ 1509.532019][T19293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1509.570202][T19293] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.519350][T17322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.792831][T18951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1512.203901][T16383] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1512.366146][T16383] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1512.366765][T16383] usb 1-1: not running at top speed; connect to a high speed hub [ 1512.366799][T16383] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1512.368111][T16383] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.368137][T16383] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1512.442726][T16383] usb 1-1: string descriptor 0 read error: -22 [ 1512.442869][T16383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.488153][T16383] usb 1-1: 0:2 : does not exist [ 1512.794039][T19328] No such timeout policy "syz1" [ 1513.218581][T19332] syzkaller0: entered promiscuous mode [ 1513.218607][T19332] syzkaller0: entered allmulticast mode [ 1514.720066][T18951] veth0_vlan: entered promiscuous mode [ 1514.789607][T18951] veth1_vlan: entered promiscuous mode [ 1515.027526][T18951] veth0_macvtap: entered promiscuous mode [ 1515.063559][T18951] veth1_macvtap: entered promiscuous mode [ 1517.037354][T18951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.242839][T18951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1517.350668][T16383] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1517.387338][T16383] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1517.387372][T16383] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1517.387404][T16383] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1517.421166][T16383] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1517.441946][T16383] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1517.488805][T16383] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1517.513733][T16383] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1517.534500][ T6173] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.553911][ T6173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.554381][ T6173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.554421][ T6173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.589262][T16383] usb 1-1: USB disconnect, device number 15 [ 1517.627757][T19355] loop6: detected capacity change from 0 to 2048 [ 1517.733528][T19355] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1517.733608][T19355] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.897855][T19358] udevd[19358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1518.122164][ T5269] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1518.231851][T19368] PKCS7: Unknown OID: [83] 2.16.840.17.101.3.4.2.1 [ 1518.231870][T19368] Unsupported digest algo: 106 [ 1518.386412][ T6196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.386431][ T6196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1518.932581][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.932599][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.314553][T16956] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.945204][T19384] gfs2: error -5 reading superblock [ 1520.364482][T19386] loop6: detected capacity change from 0 to 2048 [ 1520.567205][T19386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1526.383940][ T5741] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1526.519616][T19424] loop6: detected capacity change from 0 to 2048 [ 1526.570779][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1526.575245][ T5741] usb 6-1: not running at top speed; connect to a high speed hub [ 1526.575343][ T5741] usb 6-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1526.617214][ T5741] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.617247][ T5741] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1526.664100][ T5741] usb 6-1: string descriptor 0 read error: -22 [ 1526.664265][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.743889][ T5741] usb 6-1: 0:2 : does not exist [ 1526.829885][T19424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.830018][T19424] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.280048][T19435] loop7: detected capacity change from 0 to 4096 [ 1527.805814][T19441] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1531.190275][T16956] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /92/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 1531.313433][T16956] EXT4-fs error (device loop6): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1531.325342][T16956] EXT4-fs error (device loop6): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1533.367237][T14353] Bluetooth: hci2: command 0x0406 tx timeout [ 1533.383396][ T5741] usb 6-1: 5:0: failed to get current value for ch 0 (-110) [ 1533.410376][ T8697] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1533.500513][ T5741] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1533.500552][ T5741] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1533.500573][ T5741] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1533.541106][ T5741] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1533.569002][ T5741] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1533.583774][ T8697] usb 5-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00 [ 1533.603199][ T8697] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.603253][ T8697] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1533.603534][ T8697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.666950][ T8697] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1533.719315][ T5741] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1533.750955][ T5741] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1534.276208][ T5741] usb 6-1: USB disconnect, device number 21 [ 1534.370816][T17882] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.557498][T19387] usb 5-1: USB disconnect, device number 9 [ 1537.377365][T17424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.650220][T17424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.776943][T14353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1538.789801][T14353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1538.791147][T14353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1538.823561][T14353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1538.839502][T14353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1539.186297][T19502] loop4: detected capacity change from 0 to 512 [ 1539.342196][T19502] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1539.387730][T19502] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.2596: corrupted in-inode xattr: invalid ea_ino [ 1539.387770][T19502] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1539.388118][T19502] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2596: couldn't read orphan inode 15 (err -117) [ 1539.388142][T19502] loop4: lost filesystem error report for type 5 error -117 [ 1539.446269][T19502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.478168][T17424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.540918][T19501] fscrypt: AES-256-XTS using blk-crypto-fallback [ 1539.878458][T17424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.371676][T19516] gfs2: error -5 reading superblock [ 1540.697603][T19518] loop7: detected capacity change from 0 to 2048 [ 1540.945454][T14353] Bluetooth: hci4: command tx timeout [ 1540.980427][T19518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1542.222061][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.023485][T14353] Bluetooth: hci4: command tx timeout [ 1543.797891][T19529] loop0: detected capacity change from 0 to 4096 [ 1544.204302][T19530] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1546.270772][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.270826][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.288290][T14353] Bluetooth: hci4: command tx timeout [ 1548.117980][T19387] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1548.170429][T19497] lo speed is unknown, defaulting to 1000 [ 1548.303828][T14362] Bluetooth: hci4: command tx timeout [ 1548.376817][T17424] bridge_slave_1: left allmulticast mode [ 1548.376848][T17424] bridge_slave_1: left promiscuous mode [ 1548.377139][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.416374][T17424] bridge_slave_0: left allmulticast mode [ 1548.418079][T17424] bridge_slave_0: left promiscuous mode [ 1548.418367][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.457722][T17424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1549.512083][T17424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1549.527428][T17424] bond0 (unregistering): Released all slaves [ 1549.863680][T19559] syzkaller0: entered promiscuous mode [ 1549.863708][T19559] syzkaller0: entered allmulticast mode [ 1550.515094][T19576] gfs2: error -5 reading superblock [ 1550.966058][T19578] loop4: detected capacity change from 0 to 2048 [ 1551.166902][T19578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1553.859199][T19587] gfs2: error -5 reading superblock [ 1555.840992][T19591] netlink: 'syz.5.2605': attribute type 20 has an invalid length. [ 1555.841110][T19591] IPv6: NLM_F_CREATE should be specified when creating new route [ 1557.880573][T17424] hsr_slave_0: left promiscuous mode [ 1557.890969][T17424] hsr_slave_1: left promiscuous mode [ 1557.891985][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.892015][T17424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1557.915836][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1557.915861][T17424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1557.975448][T17424] veth1_macvtap: left promiscuous mode [ 1557.975494][T17424] veth0_macvtap: left promiscuous mode [ 1557.975598][T17424] veth1_vlan: left promiscuous mode [ 1557.975669][T17424] veth0_vlan: left promiscuous mode [ 1558.408284][T19605] siw: device registration error -23 [ 1559.710915][T17424] team0 (unregistering): Port device team_slave_1 removed [ 1559.767419][T17424] team0 (unregistering): Port device team_slave_0 removed [ 1560.407113][T19624] siw: device registration error -23 [ 1561.129419][ T8697] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 1562.272207][ T8697] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1562.276171][ T8697] usb 8-1: not running at top speed; connect to a high speed hub [ 1562.276210][ T8697] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1562.311652][ T8697] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.311684][ T8697] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1562.352718][ T8697] usb 8-1: string descriptor 0 read error: -22 [ 1562.352927][ T8697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.462089][ T8697] usb 8-1: 0:2 : does not exist [ 1563.121892][T19652] gfs2: error -5 reading superblock [ 1563.629020][T19653] loop5: detected capacity change from 0 to 2048 [ 1563.862242][T19653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1564.182410][T19641] syzkaller0: entered promiscuous mode [ 1564.182566][T19641] syzkaller0: entered allmulticast mode [ 1565.776656][ T8697] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1565.846028][ T8697] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1565.846074][ T8697] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1565.846094][ T8697] usb 8-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1565.900288][ T8697] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1565.917909][T19497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.918021][T19497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.938671][T19497] bridge_slave_0: entered allmulticast mode [ 1565.957419][T19497] bridge_slave_0: entered promiscuous mode [ 1565.969129][ T8697] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 1566.007876][T19497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.007995][T19497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.027750][T19497] bridge_slave_1: entered allmulticast mode [ 1566.070735][T19497] bridge_slave_1: entered promiscuous mode [ 1566.248949][ T8697] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1566.342097][ T8697] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1566.457940][T19497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.480325][T19670] gfs2: error -5 reading superblock [ 1567.328583][ T8697] usb 8-1: USB disconnect, device number 30 [ 1569.423010][T19497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.865706][T19689] loop5: detected capacity change from 0 to 256 [ 1569.879019][T19689] vfat: Unknown parameter 'shortnamÅ> €Ü7ÛoD-i¤:oe' [ 1570.155443][T19497] team0: Port device team_slave_0 added [ 1570.231672][T19497] team0: Port device team_slave_1 added [ 1570.443092][T19497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.443114][T19497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.443145][T19497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.492730][T19497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.492752][T19497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.492784][T19497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.917074][T19497] hsr_slave_0: entered promiscuous mode [ 1570.927478][T19497] hsr_slave_1: entered promiscuous mode [ 1570.960105][T19708] loop0: detected capacity change from 0 to 16 [ 1571.371184][T19715] FAULT_INJECTION: forcing a failure. [ 1571.371184][T19715] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.371234][T19715] CPU: 1 UID: 0 PID: 19715 Comm: syz.7.2628 Tainted: G L syzkaller #0 PREEMPT(full) [ 1571.371275][T19715] Tainted: [L]=SOFTLOCKUP [ 1571.371287][T19715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1571.371305][T19715] Call Trace: [ 1571.371317][T19715] [ 1571.371329][T19715] dump_stack_lvl+0xe8/0x150 [ 1571.371379][T19715] should_fail_ex+0x3eb/0x540 [ 1571.371428][T19715] should_failslab+0xa8/0x100 [ 1571.371470][T19715] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 1571.371505][T19715] ? x509_get_sig_params+0xdb/0x690 [ 1571.371638][T19715] ? x509_get_sig_params+0xdb/0x690 [ 1571.371675][T19715] kmemdup_noprof+0x2b/0x70 [ 1571.371709][T19715] x509_get_sig_params+0xdb/0x690 [ 1571.371747][T19715] x509_cert_parse+0x514/0x7a0 [ 1571.371824][T19715] x509_key_preparse+0x64/0x6d0 [ 1571.371853][T19715] ? down_read+0x2b9/0x320 [ 1571.371899][T19715] asymmetric_key_preparse+0xb9/0x1b0 [ 1571.371942][T19715] __key_create_or_update+0x3a4/0xa70 [ 1571.372021][T19715] ? __pfx___key_create_or_update+0x10/0x10 [ 1571.372076][T19715] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1571.372142][T19715] key_create_or_update+0x42/0x60 [ 1571.372180][T19715] __se_sys_add_key+0x349/0x420 [ 1571.372222][T19715] ? __pfx___se_sys_add_key+0x10/0x10 [ 1571.372271][T19715] ? __x64_sys_add_key+0x20/0xc0 [ 1571.372316][T19715] do_syscall_64+0x166/0x520 [ 1571.372352][T19715] ? trace_irq_disable+0x3b/0x140 [ 1571.372388][T19715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.372418][T19715] ? clear_bhb_loop+0x70/0xc0 [ 1571.372450][T19715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.372478][T19715] RIP: 0033:0x7f581bd9e159 [ 1571.372504][T19715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1571.372527][T19715] RSP: 002b:00007f581cbff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1571.372562][T19715] RAX: ffffffffffffffda RBX: 00007f581c025fa0 RCX: 00007f581bd9e159 [ 1571.372584][T19715] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 1571.372612][T19715] RBP: 00007f581be3506b R08: ffffffffffffffff R09: 0000000000000000 [ 1571.372631][T19715] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 1571.372649][T19715] R13: 00007f581c026038 R14: 00007f581c025fa0 R15: 00007ffc4bef57c8 [ 1571.372691][T19715] [ 1573.414305][ T8697] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1573.575760][ T8697] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1573.576458][ T8697] usb 8-1: not running at top speed; connect to a high speed hub [ 1573.576494][ T8697] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1573.577669][ T8697] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.577697][ T8697] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1573.637175][ T8697] usb 8-1: string descriptor 0 read error: -22 [ 1573.637317][ T8697] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.647290][ T2258] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1573.687197][ T8697] usb 8-1: 0:2 : does not exist [ 1573.755924][T19728] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 1573.804797][ T2258] usb 5-1: not running at top speed; connect to a high speed hub [ 1573.804870][ T2258] usb 5-1: New USB device found: idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 1573.806369][ T2258] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.809774][ T2258] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 1573.809804][ T2258] usb 5-1: Product: syz [ 1573.809821][ T2258] usb 5-1: Manufacturer: syz [ 1573.969248][ T2258] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 1574.122781][T19718] loop4: detected capacity change from 0 to 512 [ 1574.175567][T19718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.251729][T19718] EXT4-fs error (device loop4): ext4_validate_block_bitmap:427: comm syz.4.2629: bg 0: bad block bitmap checksum [ 1574.287822][ T2258] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1574.288890][ T2258] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1574.288952][ T2258] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 1574.310281][ T2258] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 1574.408900][ T2258] usb 5-1: USB disconnect, device number 10 [ 1574.589241][ T5269] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1574.794884][T19753] gfs2: error -5 reading superblock [ 1575.150603][T19755] loop0: detected capacity change from 0 to 2048 [ 1575.426228][T19755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1577.315963][T19763] gfs2: error -5 reading superblock [ 1578.704179][ T8697] usb 8-1: 5:0: failed to get current value for ch 0 (-110) [ 1579.092178][ T8697] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1579.092214][ T8697] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1579.092234][ T8697] usb 8-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1579.122923][ T8697] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1579.135796][ T8697] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 1579.180377][ T8697] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1579.215591][ T8697] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1579.256053][ T8697] usb 8-1: USB disconnect, device number 31 [ 1579.287824][T19366] udevd[19366]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1579.383728][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.812840][T19777] siw: device registration error -23 [ 1580.657347][T19784] loop0: detected capacity change from 0 to 1024 [ 1580.659109][T19784] hfsplus: Unknown parameter '' [ 1580.722199][T19785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1581.138289][T19497] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1582.637592][T19497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1582.638380][T19497] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1582.708511][T19497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1582.725941][ T8700] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1582.745527][T19497] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1582.789244][T19497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1582.945351][T19497] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1583.016940][T19810] loop4: detected capacity change from 0 to 512 [ 1583.018555][T19810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1583.021205][ T8700] usb 1-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 1583.034371][T19810] EXT4-fs (loop4): 1 truncate cleaned up [ 1583.035814][T19810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1583.041687][ T8700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.041739][ T8700] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1583.045540][ T8700] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1583.045578][ T8700] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1583.045618][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.140866][T19497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1583.238881][ T8700] usb 1-1: config 0 descriptor?? [ 1583.634719][T19802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1583.639409][T19802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1584.638206][T14362] Bluetooth: hci3: command 0x0406 tx timeout [ 1584.763671][ T8700] usbhid 1-1:0.0: can't add hid device: -71 [ 1584.763780][ T8700] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1584.795629][ T8700] usb 1-1: USB disconnect, device number 17 [ 1584.892910][T19497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.029932][T19497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1585.060054][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.060138][ T9223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.097014][T17429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.097095][T17429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.286849][T19834] gfs2: error -5 reading superblock [ 1585.513587][T16382] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 1585.610465][T19835] loop0: detected capacity change from 0 to 2048 [ 1585.692643][T16382] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1585.716764][T16382] usb 8-1: not running at top speed; connect to a high speed hub [ 1585.786929][T16382] usb 8-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 1585.902740][T16382] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.902787][T16382] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1585.953066][T19835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1586.080607][T16382] usb 8-1: string descriptor 0 read error: -22 [ 1586.081278][T16382] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.116596][T16382] usb 8-1: 0:2 : does not exist [ 1587.651489][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1588.250945][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1588.705058][T19855] gfs2: error -5 reading superblock [ 1588.962873][T16382] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1588.971250][T19856] loop4: detected capacity change from 0 to 2048 [ 1589.259160][T19856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1589.302594][T16382] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1589.302714][T16382] usb 8-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1589.302789][T16382] usb 8-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1589.464579][T16382] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1589.656475][T16382] usb 8-1: 5:0: failed to get current value for ch 1 (-22) [ 1591.621904][T19860] syzkaller0: entered promiscuous mode [ 1591.621932][T19860] syzkaller0: entered allmulticast mode [ 1591.649593][T16382] usb 8-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1591.713024][T16382] usb 8-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1591.754313][T16382] usb 8-1: USB disconnect, device number 32 [ 1592.716065][T19896] loop4: detected capacity change from 0 to 512 [ 1593.306406][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1593.439197][T19497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1593.440453][T19896] loop4: detected capacity change from 0 to 512 [ 1593.552063][T19902] ip_tables: iptables: counters copy to user failed while replacing table [ 1593.586132][T19896] loop4: detected capacity change from 0 to 512 [ 1593.693233][T19896] loop4: detected capacity change from 0 to 512 [ 1594.031396][T19896] loop4: detected capacity change from 0 to 512 [ 1594.124881][T19906] loop7: detected capacity change from 0 to 4096 [ 1594.245398][T19896] loop4: detected capacity change from 0 to 512 [ 1594.361385][T19909] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1594.512046][T19906] NILFS (loop7): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1596.639767][ T5269] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1597.220351][T19920] gfs2: error -5 reading superblock [ 1597.494346][T19925] loop7: detected capacity change from 0 to 2048 [ 1597.676594][T19925] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1598.221463][T19927] gfs2: error -5 reading superblock [ 1598.530140][T19931] loop4: detected capacity change from 0 to 2048 [ 1600.418573][T19931] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1603.304917][T14362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1603.321104][T14362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1603.327639][T14362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1603.343144][T14362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1603.355442][T14362] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1605.339487][T19966] loop7: detected capacity change from 0 to 512 [ 1605.431256][T14362] Bluetooth: hci6: command tx timeout [ 1605.559920][T19966] EXT4-fs error (device loop7): ext4_quota_enable:7256: comm syz.7.2665: Bad quota inum: 1, type: 2 [ 1605.559949][T19966] loop7: lost filesystem error report for type 5 error -117 [ 1605.569160][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1605.569234][ C1] EXT4-fs (loop7): initial error at time 1790749457: ext4_quota_enable:7256 [ 1605.569307][ C1] EXT4-fs (loop7): last error at time 1790749457: ext4_quota_enable:7256 [ 1605.576500][T19966] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 1605.744939][T19966] EXT4-fs (loop7): mount failed [ 1607.349106][T19975] device-mapper: ioctl: device has been removed from the dev hash table. [ 1607.510486][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.510554][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.511607][T14362] Bluetooth: hci6: command tx timeout [ 1608.200211][ T5269] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1609.238274][T19952] lo speed is unknown, defaulting to 1000 [ 1609.416413][T20001] gfs2: error -5 reading superblock [ 1609.631590][T14362] Bluetooth: hci6: command tx timeout [ 1609.685753][T20002] loop5: detected capacity change from 0 to 2048 [ 1609.871742][T20002] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1611.664613][T14362] Bluetooth: hci6: command tx timeout [ 1613.331894][T20012] loop0: detected capacity change from 0 to 512 [ 1613.337872][T20012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1613.392518][T20012] EXT4-fs (loop0): 1 truncate cleaned up [ 1613.394048][T20012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1614.508178][ T12] bridge_slave_1: left allmulticast mode [ 1614.508208][ T12] bridge_slave_1: left promiscuous mode [ 1614.508497][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.509299][T20032] loop7: detected capacity change from 0 to 4096 [ 1614.553797][T20032] EXT4-fs: Ignoring removed nobh option [ 1614.553881][T20032] EXT4-fs: Ignoring removed bh option [ 1614.560303][ T12] bridge_slave_0: left allmulticast mode [ 1614.560332][ T12] bridge_slave_0: left promiscuous mode [ 1614.560562][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.613143][T20032] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1614.665345][T20032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1615.725885][T20032] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1616.272347][T20047] loop5: detected capacity change from 0 to 4096 [ 1616.493686][T20048] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1616.608895][T18413] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.409590][T17322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1617.980268][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.022683][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.042097][ T12] bond0 (unregistering): Released all slaves [ 1618.388646][ T12] hsr_slave_0: left promiscuous mode [ 1618.419397][ T12] hsr_slave_1: left promiscuous mode [ 1618.420252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.457922][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.642461][T20070] loop4: detected capacity change from 0 to 512 [ 1618.818590][T20070] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1618.840154][T20070] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.2680: corrupted in-inode xattr: invalid ea_ino [ 1618.840193][T20070] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1618.840526][T20070] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.2680: couldn't read orphan inode 15 (err -117) [ 1618.840560][T20070] loop4: lost filesystem error report for type 5 error -117 [ 1618.842380][T20070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1619.401157][ T33] audit: type=1326 audit(1790749471.137:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b3d9e159 code=0x7ffc0000 [ 1619.401312][ T33] audit: type=1326 audit(1790749471.137:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b3d9e159 code=0x7ffc0000 [ 1619.483149][ T33] audit: type=1326 audit(1790749471.217:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b3d9e159 code=0x7ffc0000 [ 1619.483944][ T33] audit: type=1326 audit(1790749471.217:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b3d9e159 code=0x7ffc0000 [ 1619.543192][ T33] audit: type=1326 audit(1790749471.287:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b3d9e159 code=0x7ffc0000 [ 1619.543938][ T33] audit: type=1326 audit(1790749471.287:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66b3d9dec2 code=0x7ffc0000 [ 1619.543992][ T33] audit: type=1326 audit(1790749471.287:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f66b3d9df57 code=0x7ffc0000 [ 1619.544040][ T33] audit: type=1326 audit(1790749471.287:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f66b3d5ae51 code=0x7ffc0000 [ 1619.544087][ T33] audit: type=1326 audit(1790749471.287:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f66b3d9ef49 code=0x7ffc0000 [ 1619.597786][ T33] audit: type=1326 audit(1790749471.317:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20074 comm="syz.5.2684" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f66b3d9e159 code=0x7ffc0000 [ 1621.091188][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1621.201350][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1621.255593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1621.683928][T20086] loop4: detected capacity change from 0 to 4096 [ 1621.874101][T20087] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1623.435335][T19952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.435476][T19952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.435675][T19952] bridge_slave_0: entered allmulticast mode [ 1623.465838][T19952] bridge_slave_0: entered promiscuous mode [ 1623.476648][T19952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1623.476729][T19952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1623.476843][T19952] bridge_slave_1: entered allmulticast mode [ 1623.511678][T19952] bridge_slave_1: entered promiscuous mode [ 1623.719861][T19952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1623.722309][T19952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1623.934420][T20106] loop7: detected capacity change from 0 to 256 [ 1624.066892][T19952] team0: Port device team_slave_0 added [ 1624.081063][T19952] team0: Port device team_slave_1 added [ 1625.118192][T19952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1625.118214][T19952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.118243][T19952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1625.292695][T19952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1625.292717][T19952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1625.292748][T19952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1625.620573][T19952] hsr_slave_0: entered promiscuous mode [ 1625.626026][T19952] hsr_slave_1: entered promiscuous mode [ 1626.649462][T20130] vivid-000: disconnect [ 1626.685257][T20129] vivid-000: reconnect [ 1626.809156][T20137] loop5: detected capacity change from 0 to 2048 [ 1627.415082][T16382] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1627.574260][T16382] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 1627.575668][T16382] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1627.575707][T16382] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1627.624238][T16382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1627.624263][T16382] usb 1-1: Product: syz [ 1627.624276][T16382] usb 1-1: Manufacturer: syz [ 1627.624289][T16382] usb 1-1: SerialNumber: syz [ 1627.755272][T20155] loop4: detected capacity change from 0 to 512 [ 1627.769855][T20155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1627.836476][T20155] EXT4-fs (loop4): 1 truncate cleaned up [ 1627.838428][T20155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.904946][T20155] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6542: inode #12: comm syz.4.2694: bad extra_isize 62 (inode size 256) [ 1627.931516][T20155] EXT4-fs (loop4): Remounting filesystem read-only [ 1628.557471][T16382] cdc_ncm 1-1:1.0: bind() failure [ 1628.591320][T16382] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1628.591363][T16382] cdc_ncm 1-1:1.1: bind() failure [ 1628.654312][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.698793][T16382] usb 1-1: USB disconnect, device number 18 [ 1629.470751][T20176] batadv_slave_1: entered promiscuous mode [ 1629.509658][T19952] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1629.542661][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1629.552144][T19952] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1629.564541][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1629.565594][T19952] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1629.600379][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1629.603223][T19952] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1629.632780][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1629.931693][T20173] batadv_slave_1: left promiscuous mode [ 1629.974532][T19952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.078690][T19952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1630.119314][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.119394][T17424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1630.180818][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.180897][ T9223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1631.921318][T20204] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2708'. [ 1632.029469][T20206] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2708'. [ 1632.249318][T20211] device-mapper: ioctl: name not supplied when creating device [ 1632.354457][ T8700] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1632.516080][ T8700] usb 1-1: Using ep0 maxpacket: 8 [ 1632.516838][ T8700] usb 1-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 1632.545858][ T8700] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1632.545881][ T8700] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1632.545915][ T8700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1632.545936][ T8700] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1632.545968][ T8700] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.631287][ T8700] hub 1-1:1.0: bad descriptor, ignoring hub [ 1632.631310][ T8700] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1632.645235][ T8700] cdc_wdm 1-1:1.0: skipping garbage [ 1632.645300][ T8700] cdc_wdm 1-1:1.0: skipping garbage [ 1632.779437][ T8700] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1632.779458][ T8700] cdc_wdm 1-1:1.0: Unknown control protocol [ 1632.930073][T20215] kvm [20214]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffff00000000 [ 1633.902627][T20241] gfs2: error -5 reading superblock [ 1634.493467][T20241] loop7: detected capacity change from 0 to 2048 [ 1634.595772][T20241] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1636.755759][ T9869] usb 1-1: USB disconnect, device number 19 [ 1637.144505][T20253] loop0: detected capacity change from 0 to 128 [ 1638.788147][T19952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.898350][T20253] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1639.327277][T20270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2719'. [ 1639.358682][T20270] FAULT_INJECTION: forcing a failure. [ 1639.358682][T20270] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.358729][T20270] CPU: 1 UID: 0 PID: 20270 Comm: syz.0.2719 Tainted: G L syzkaller #0 PREEMPT(full) [ 1639.358763][T20270] Tainted: [L]=SOFTLOCKUP [ 1639.358772][T20270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1639.358787][T20270] Call Trace: [ 1639.358797][T20270] [ 1639.358808][T20270] dump_stack_lvl+0xe8/0x150 [ 1639.358854][T20270] should_fail_ex+0x3eb/0x540 [ 1639.358900][T20270] should_failslab+0xa8/0x100 [ 1639.358939][T20270] ? prepare_creds+0x30/0x820 [ 1639.358970][T20270] kmem_cache_alloc_noprof+0x9c/0x600 [ 1639.359000][T20270] ? prepare_creds+0x30/0x820 [ 1639.359037][T20270] prepare_creds+0x30/0x820 [ 1639.359072][T20270] lookup_user_key+0x39b/0x1360 [ 1639.359107][T20270] ? __pfx_lookup_user_key+0x10/0x10 [ 1639.359137][T20270] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1639.359168][T20270] ? futex_wait+0x2a2/0x390 [ 1639.359201][T20270] ? __pfx_futex_wait+0x10/0x10 [ 1639.359236][T20270] keyctl_session_to_parent+0x28/0xa20 [ 1639.359284][T20270] __se_sys_keyctl+0x827/0xbc0 [ 1639.359311][T20270] ? __pfx___se_sys_keyctl+0x10/0x10 [ 1639.359338][T20270] ? __pfx_do_futex+0x10/0x10 [ 1639.359371][T20270] ? __se_sys_futex+0x3a8/0x450 [ 1639.359404][T20270] ? rcu_is_watching+0x16/0xb0 [ 1639.359447][T20270] ? __x64_sys_keyctl+0x20/0xc0 [ 1639.359486][T20270] do_syscall_64+0x166/0x520 [ 1639.359519][T20270] ? trace_irq_disable+0x3b/0x140 [ 1639.359551][T20270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.359582][T20270] ? clear_bhb_loop+0x70/0xc0 [ 1639.359611][T20270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.359636][T20270] RIP: 0033:0x7f854339e159 [ 1639.359658][T20270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.359680][T20270] RSP: 002b:00007f85441db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1639.359739][T20270] RAX: ffffffffffffffda RBX: 00007f8543625fa0 RCX: 00007f854339e159 [ 1639.359758][T20270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 1639.359773][T20270] RBP: 00007f854343506b R08: 0000000000000000 R09: 0000000000000000 [ 1639.359788][T20270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.359804][T20270] R13: 00007f8543626038 R14: 00007f8543625fa0 R15: 00007fffdc8163a8 [ 1639.359841][T20270] [ 1639.568832][ T32] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1639.759078][ T32] usb 5-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1639.760361][ T32] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 1639.760391][ T32] usb 5-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1639.760414][ T32] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1639.760438][ T32] usb 5-1: config 150 has no interface number 0 [ 1639.760470][ T32] usb 5-1: config 150 interface 204 has no altsetting 0 [ 1639.763045][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.763073][ T32] usb 5-1: Product: syz [ 1639.763090][ T32] usb 5-1: Manufacturer: syz [ 1639.763107][ T32] usb 5-1: SerialNumber: syz [ 1642.382236][T20291] loop7: detected capacity change from 0 to 512 [ 1643.194776][T20291] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1643.265203][T20291] EXT4-fs (loop7): 1 truncate cleaned up [ 1643.266522][T20291] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.299013][ T8700] usb 5-1: USB disconnect, device number 11 [ 1643.516591][T19952] veth0_vlan: entered promiscuous mode [ 1643.575704][T19952] veth1_vlan: entered promiscuous mode [ 1643.885341][T19952] veth0_macvtap: entered promiscuous mode [ 1643.938941][T19952] veth1_macvtap: entered promiscuous mode [ 1644.024521][T17322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.118104][T19952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.178348][T19952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1644.264001][T17433] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.264040][T17433] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.264068][T17433] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1644.264093][T17433] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.049830][T17429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.049860][T17429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.350461][ T6174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.350483][ T6174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.625517][T20312] loop5: detected capacity change from 0 to 4096 [ 1645.654476][T20312] EXT4-fs: Ignoring removed nobh option [ 1645.654531][T20312] EXT4-fs: Ignoring removed bh option [ 1645.708050][T20312] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1645.770719][T20312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.506893][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.469658][T20344] loop5: detected capacity change from 0 to 32768 [ 1650.563915][T20306] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1650.645422][ T8700] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1650.725422][T20306] usb 5-1: New USB device found: idVendor=0644, idProduct=800f, bcdDevice=0.40 [ 1650.747586][T20306] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1650.818542][T20306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.818588][T20306] usb 5-1: Product: syz [ 1650.818599][T20306] usb 5-1: Manufacturer: syz [ 1650.818611][T20306] usb 5-1: SerialNumber: syz [ 1651.224845][T20369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1651.230020][T20369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1651.551253][ T8700] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1651.551310][ T8700] usb 10-1: New USB device found: idVendor=0582, idProduct=0023, bcdDevice=0.40 [ 1651.585554][ T8700] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1651.585648][ T8700] usb 10-1: can't read configurations, error -71 [ 1651.734522][T20306] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1652.875549][T20306] usb 5-1: disable ehci-hcd to run US-144 [ 1652.892179][T20306] usb 5-1: USB disconnect, device number 12 [ 1653.168723][T19358] udevd[19358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1658.273792][T20429] loop7: detected capacity change from 0 to 512 [ 1658.981410][T20429] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1659.096755][T20429] EXT4-fs (loop7): 1 truncate cleaned up [ 1659.097974][T20429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1659.580464][T20437] gfs2: error -5 reading superblock [ 1660.215611][T20439] loop9: detected capacity change from 0 to 2048 [ 1660.714119][T20439] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1663.265509][T20445] loop5: detected capacity change from 0 to 2048 [ 1663.967862][T20445] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 1663.967892][T20445] UDF-fs: Scanning with blocksize 512 failed [ 1664.000122][T20445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1665.160418][T17322] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.660175][T20458] loop9: detected capacity change from 0 to 128 [ 1665.693811][T20458] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1665.693841][T20458] hpfs: filesystem error: improperly stopped [ 1665.693853][T20458] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1665.693865][T20458] hpfs: You really don't want any checks? You are crazy... [ 1665.693874][T20458] hpfs: Code page index out of array [ 1665.693881][T20458] hpfs: code page support is disabled [ 1665.698457][T20458] hpfs: hpfs_map_4sectors(): unaligned read [ 1665.698524][T20458] hpfs: hpfs_map_4sectors(): unaligned read [ 1665.698533][T20458] hpfs: filesystem error: unable to find root dir [ 1666.094346][T20458] hpfs: hpfs_map_4sectors(): unaligned read [ 1666.575944][T20450] loop4: detected capacity change from 0 to 32768 [ 1666.654184][T20450] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2748 (20450) [ 1666.761746][T20450] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1666.761789][T20450] BTRFS info (device loop4): using sha256 checksum algorithm [ 1667.209042][T20464] loop9: detected capacity change from 0 to 4096 [ 1667.485756][T20465] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1667.653545][T20464] NILFS (loop9): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1667.937622][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1668.046485][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1668.046902][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1668.072462][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1668.086478][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1668.090418][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1668.090701][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1668.090946][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1668.131306][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1668.132013][T20450] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1668.283880][T20450] BTRFS error (device loop4): open_ctree failed: -ENOMEM [ 1668.948738][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.950212][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.588740][T20499] loop9: detected capacity change from 0 to 4096 [ 1669.824009][T20502] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1670.361077][T20499] NILFS (loop9): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1671.956447][T20516] loop4: detected capacity change from 0 to 512 [ 1672.080179][T20516] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.2758: bad orphan inode 15 [ 1672.080214][T20516] loop4: lost filesystem error report for type 5 error -117 [ 1672.095909][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1672.095929][ C1] EXT4-fs (loop4): initial error at time 1790749523: ext4_orphan_get:1429 [ 1672.095948][ C1] EXT4-fs (loop4): last error at time 1790749523: ext4_orphan_get:1429 [ 1672.132531][T20516] ext4_test_bit(bit=14, block=5) = 0 [ 1672.133851][T20516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1673.274100][T20521] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1673.375431][T20513] loop5: detected capacity change from 0 to 2048 [ 1674.068423][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.169889][T20513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.170001][T20513] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1675.922713][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.197351][T20540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1676.198169][T20540] bridge0: port 3(bond1) entered blocking state [ 1676.198252][T20540] bridge0: port 3(bond1) entered disabled state [ 1676.201199][T20540] bond1: entered allmulticast mode [ 1676.226933][T20540] bond1: entered promiscuous mode [ 1676.292246][T14353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1676.322946][T14353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1676.336483][T14353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1676.337213][T14353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1676.338194][T14353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1676.445502][T20540] bridge0: port 3(bond1) entered blocking state [ 1676.445654][T20540] bridge0: port 3(bond1) entered forwarding state [ 1676.591681][ T6173] bridge0: port 3(bond1) entered disabled state [ 1676.898869][T20552] gfs2: error -5 reading superblock [ 1677.291177][T20554] loop5: detected capacity change from 0 to 2048 [ 1677.616442][T20554] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1678.467209][T14353] Bluetooth: hci4: command tx timeout [ 1681.163894][T14353] Bluetooth: hci4: command tx timeout [ 1682.034574][T14362] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1682.058426][T14362] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1682.061328][T14362] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1682.084828][T14362] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1682.087236][T14362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1683.183390][T14362] Bluetooth: hci4: command tx timeout [ 1683.779435][ T6197] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.223379][T14362] Bluetooth: hci2: command tx timeout [ 1685.334070][T14362] Bluetooth: hci4: command tx timeout [ 1685.596271][ T9869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1686.143009][ T9869] usb 5-1: device descriptor read/64, error -71 [ 1686.261734][T20602] loop5: detected capacity change from 0 to 4096 [ 1686.317759][T14362] Bluetooth: hci2: command tx timeout [ 1686.451410][T20603] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1686.648914][T20602] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1686.683355][ T9869] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1686.861285][ T9869] usb 5-1: device descriptor read/64, error -71 [ 1686.989874][ T9869] usb usb5-port1: attempt power cycle [ 1687.204218][ T6197] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1687.811033][ T6197] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.074758][T20544] lo speed is unknown, defaulting to 1000 [ 1688.141111][T20615] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1689.651776][T14362] Bluetooth: hci2: command tx timeout [ 1691.673441][T14362] Bluetooth: hci2: command tx timeout [ 1692.040158][ T6197] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1692.517609][T20569] lo speed is unknown, defaulting to 1000 [ 1692.765391][T20633] loop9: detected capacity change from 0 to 2048 [ 1692.808294][T20633] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.808375][T20633] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1693.638578][T19952] EXT4-fs error (device loop9): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /11/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 1693.689111][T19952] EXT4-fs error (device loop9): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1693.706583][T19952] EXT4-fs error (device loop9): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1693.734405][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1694.277743][T19952] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1694.701976][ T6197] bridge_slave_1: left allmulticast mode [ 1694.702005][ T6197] bridge_slave_1: left promiscuous mode [ 1694.702232][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1694.747330][ T6197] bridge_slave_0: left allmulticast mode [ 1694.747355][ T6197] bridge_slave_0: left promiscuous mode [ 1694.747608][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.651423][ T6197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1695.672348][ T6197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1695.709951][ T6197] bond0 (unregistering): Released all slaves [ 1696.042112][T20544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1696.042247][T20544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1696.042390][T20544] bridge_slave_0: entered allmulticast mode [ 1696.068747][T20544] bridge_slave_0: entered promiscuous mode [ 1696.139106][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1696.139773][T20544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.139879][T20544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.140037][T20544] bridge_slave_1: entered allmulticast mode [ 1696.173438][T20544] bridge_slave_1: entered promiscuous mode [ 1696.369982][T20673] (syz.5.2779,20673,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1696.370019][T20673] (syz.5.2779,20673,1):ocfs2_fill_super:1185 ERROR: status = -22 [ 1696.573880][T14353] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1696.581823][T14353] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1696.600868][T14353] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1696.611066][T14353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1696.612043][T14353] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1696.687367][T20544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1696.786357][T20544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.849387][ T6197] hsr_slave_0: left promiscuous mode [ 1696.850217][ T6197] hsr_slave_1: left promiscuous mode [ 1696.852767][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1696.852793][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1696.856736][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1696.856801][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1696.897393][ T6197] veth1_macvtap: left promiscuous mode [ 1696.897517][ T6197] veth0_macvtap: left promiscuous mode [ 1696.897803][ T6197] veth1_vlan: left promiscuous mode [ 1696.898011][ T6197] veth0_vlan: left promiscuous mode [ 1697.210355][T20687] loop4: detected capacity change from 0 to 32768 [ 1697.220270][T20687] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2782 (20687) [ 1697.247151][T20687] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1697.247190][T20687] BTRFS info (device loop4): using sha256 checksum algorithm [ 1697.392438][T20687] BTRFS info (device loop4): rebuilding free space tree [ 1697.459112][T20687] BTRFS info (device loop4): disabling free space tree [ 1697.459187][T20687] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1697.459218][T20687] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1697.513453][T20687] BTRFS info (device loop4): checking UUID tree [ 1697.517317][T20687] BTRFS info (device loop4): turning off barriers [ 1697.517348][T20687] BTRFS info (device loop4): force clearing of disk cache [ 1697.517372][T20687] BTRFS info (device loop4): use lzo compression, level 1 [ 1697.582484][ T6197] team0 (unregistering): Port device team_slave_1 removed [ 1697.653841][ T6197] team0 (unregistering): Port device team_slave_0 removed [ 1697.942271][T18951] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1698.138255][T20544] team0: Port device team_slave_0 added [ 1698.154664][T20544] team0: Port device team_slave_1 added [ 1698.272873][T14362] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1698.381146][T20544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.381167][T20544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.381196][T20544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.537602][T20544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.537643][T20544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.537694][T20544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.664790][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2785'. [ 1698.697446][T20569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.697562][T20569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.697743][T20569] bridge_slave_0: entered allmulticast mode [ 1698.704909][T20569] bridge_slave_0: entered promiscuous mode [ 1698.733890][T20569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.734013][T20569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.734175][T20569] bridge_slave_1: entered allmulticast mode [ 1698.742252][T20569] bridge_slave_1: entered promiscuous mode [ 1698.786569][T14362] Bluetooth: hci5: command tx timeout [ 1699.058788][T20724] FAULT_INJECTION: forcing a failure. [ 1699.058788][T20724] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1699.058852][T20724] CPU: 0 UID: 0 PID: 20724 Comm: syz.5.2785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1699.058895][T20724] Tainted: [L]=SOFTLOCKUP [ 1699.058906][T20724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1699.058922][T20724] Call Trace: [ 1699.058931][T20724] [ 1699.058943][T20724] dump_stack_lvl+0xe8/0x150 [ 1699.058987][T20724] should_fail_ex+0x3eb/0x540 [ 1699.059033][T20724] get_futex_key+0x8e2/0x1580 [ 1699.059084][T20724] ? __pfx_get_futex_key+0x10/0x10 [ 1699.059116][T20724] ? __kmalloc_cache_noprof+0x148/0x600 [ 1699.059145][T20724] ? refill_pi_state_cache+0x92/0x170 [ 1699.059171][T20724] ? refill_pi_state_cache+0x92/0x170 [ 1699.059202][T20724] ? __asan_memset+0x22/0x50 [ 1699.059237][T20724] futex_requeue+0x246/0x1c40 [ 1699.059268][T20724] ? preempt_schedule_thunk+0x16/0x40 [ 1699.059298][T20724] ? preempt_schedule_common+0x7f/0xd0 [ 1699.059342][T20724] ? __pfx_futex_requeue+0x10/0x10 [ 1699.059374][T20724] ? preempt_schedule_thunk+0x16/0x40 [ 1699.059406][T20724] ? futex_private_hash_put+0x132/0x160 [ 1699.059458][T20724] ? __schedule+0x1b5d/0x5b40 [ 1699.059500][T20724] do_futex+0x41b/0x4e0 [ 1699.059533][T20724] ? __pfx_do_futex+0x10/0x10 [ 1699.059557][T20724] ? lockdep_hardirqs_on+0x7b/0x110 [ 1699.059598][T20724] __se_sys_futex+0x3a8/0x450 [ 1699.059631][T20724] ? __pfx___se_sys_futex+0x10/0x10 [ 1699.059655][T20724] ? rcu_is_watching+0x16/0xb0 [ 1699.059699][T20724] ? __x64_sys_futex+0x21/0xf0 [ 1699.059727][T20724] do_syscall_64+0x166/0x520 [ 1699.059759][T20724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.059783][T20724] ? clear_bhb_loop+0x70/0xc0 [ 1699.059813][T20724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1699.059837][T20724] RIP: 0033:0x7f66b3d9e159 [ 1699.059860][T20724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1699.059882][T20724] RSP: 002b:00007f66b4c82028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1699.059918][T20724] RAX: ffffffffffffffda RBX: 00007f66b4026180 RCX: 00007f66b3d9e159 [ 1699.059937][T20724] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 1699.059953][T20724] RBP: 00007f66b3e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1699.059969][T20724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1699.059984][T20724] R13: 00007f66b4026218 R14: 00007f66b4026180 R15: 00007ffc144bf188 [ 1699.060025][T20724] [ 1699.677666][T20569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1699.722942][T20544] hsr_slave_0: entered promiscuous mode [ 1699.737296][T20544] hsr_slave_1: entered promiscuous mode [ 1699.737996][T20544] debugfs: 'hsr0' already exists in 'hsr' [ 1699.738014][T20544] Cannot create hsr debugfs directory [ 1699.821106][T20569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.042001][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 1700.198425][T20569] team0: Port device team_slave_0 added [ 1700.241608][T20569] team0: Port device team_slave_1 added [ 1700.481121][T20735] device-mapper: table: 248:2: zero-length target [ 1700.481142][T20735] device-mapper: ioctl: error adding target to table [ 1700.749659][T20739] device-mapper: table: 248:2: zero-length target [ 1700.749677][T20739] device-mapper: ioctl: error adding target to table [ 1700.824631][ T6197] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.865445][T14362] Bluetooth: hci5: command tx timeout [ 1700.892171][T20569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.892192][T20569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.892220][T20569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.972481][T20569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.972502][T20569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1700.972532][T20569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1701.044750][T20681] lo speed is unknown, defaulting to 1000 [ 1701.159078][ T6197] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.343129][ T6197] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.424729][T20569] hsr_slave_0: entered promiscuous mode [ 1701.426182][T20569] hsr_slave_1: entered promiscuous mode [ 1701.428026][T20569] debugfs: 'hsr0' already exists in 'hsr' [ 1701.428049][T20569] Cannot create hsr debugfs directory [ 1703.042684][T14362] Bluetooth: hci5: command tx timeout [ 1703.440885][ T6197] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.530786][T20762] ip_tables: iptables: counters copy to user failed while replacing table [ 1704.562180][ T6197] bridge_slave_1: left allmulticast mode [ 1704.562211][ T6197] bridge_slave_1: left promiscuous mode [ 1704.562465][ T6197] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.602601][ T6197] bridge_slave_0: left allmulticast mode [ 1704.602629][ T6197] bridge_slave_0: left promiscuous mode [ 1704.604572][ T6197] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.777092][T20764] loop4: detected capacity change from 0 to 4096 [ 1704.989276][T20768] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1705.103441][T14353] Bluetooth: hci5: command tx timeout [ 1705.348164][ T6197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1705.379723][ T6197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1705.400383][ T6197] bond0 (unregistering): Released all slaves [ 1705.788951][T20775] loop5: detected capacity change from 0 to 4096 [ 1705.802262][T20681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.802833][T20681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.830983][T20681] bridge_slave_0: entered allmulticast mode [ 1705.855582][T20681] bridge_slave_0: entered promiscuous mode [ 1705.900890][T20681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.901105][T20681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.901283][T20681] bridge_slave_1: entered allmulticast mode [ 1705.986193][T20681] bridge_slave_1: entered promiscuous mode [ 1706.040908][T20776] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1706.427902][T20773] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1707.103806][T20681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.132946][T20681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.343708][T20681] team0: Port device team_slave_0 added [ 1707.348336][T20681] team0: Port device team_slave_1 added [ 1707.976318][T20681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.976336][T20681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.976361][T20681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.071208][T20681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.071229][T20681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.071258][T20681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1709.191186][ T6197] hsr_slave_0: left promiscuous mode [ 1709.209935][ T6197] hsr_slave_1: left promiscuous mode [ 1709.210743][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1709.210761][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.224695][ T6197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.224721][ T6197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.271684][ T6197] veth1_macvtap: left promiscuous mode [ 1709.271731][ T6197] veth0_macvtap: left promiscuous mode [ 1709.271853][ T6197] veth1_vlan: left promiscuous mode [ 1709.271934][ T6197] veth0_vlan: left promiscuous mode [ 1709.797814][T20798] loop4: detected capacity change from 0 to 512 [ 1709.867439][T20798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1709.922647][ T6197] team0 (unregistering): Port device team_slave_1 removed [ 1709.964405][T20798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1709.989321][ T6197] team0 (unregistering): Port device team_slave_0 removed [ 1710.057905][T20798] EXT4-fs error (device loop4): __ext4_remount:6872: comm syz.4.2802: Abort forced by user [ 1710.059886][T20798] EXT4-fs (loop4): Remounting filesystem read-only [ 1710.061729][T20798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1710.061847][T20798] ext4 filesystem being remounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1712.562106][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.697879][T20681] hsr_slave_0: entered promiscuous mode [ 1712.710946][T20681] hsr_slave_1: entered promiscuous mode [ 1712.882603][T20810] loop4: detected capacity change from 0 to 128 [ 1713.194249][T19679] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1713.345204][T19679] usb 5-1: Using ep0 maxpacket: 32 [ 1713.356620][T19679] usb 5-1: New USB device found: idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1713.366248][T19679] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 1713.366340][T19679] usb 5-1: config 0 has no interface number 0 [ 1713.366426][T19679] usb 5-1: too many endpoints for config 0 interface 33 altsetting 207: 92, using maximum allowed: 30 [ 1713.366612][T19679] usb 5-1: config 0 interface 33 altsetting 207 has 0 endpoint descriptors, different from the interface descriptor's value: 92 [ 1713.366706][T19679] usb 5-1: config 0 interface 33 has no altsetting 0 [ 1713.399361][T19679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.399454][T19679] usb 5-1: Product: syz [ 1713.399503][T19679] usb 5-1: Manufacturer: syz [ 1713.399623][T19679] usb 5-1: SerialNumber: syz [ 1713.451425][T19679] usb 5-1: config 0 descriptor?? [ 1713.893732][T19679] airspy 5-1:0.33: Board ID: 00 [ 1713.893766][T19679] airspy 5-1:0.33: Firmware version: [ 1713.998081][ T5269] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1714.181868][T20544] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1714.201176][T19679] airspy 5-1:0.33: usb_control_msg() failed -71 request 11 [ 1714.256856][T20544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1714.257945][T20544] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1714.331005][T19679] airspy 5-1:0.33: Registered as swradio24 [ 1714.331032][T19679] airspy 5-1:0.33: SDR API is still slightly experimental and functionality changes may follow [ 1714.360333][T20544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1714.373879][T19679] usb 5-1: USB disconnect, device number 16 [ 1714.376747][T20544] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1714.436665][T20544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1714.443046][T20544] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1714.491814][T20544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1714.914517][T20569] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1714.939750][T20569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1714.940712][T20569] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1714.977454][T20569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1715.005780][T20569] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1715.040273][T20569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1715.078051][T20569] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1715.105322][T20569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1715.932064][T20824] netlink: 'syz.4.2806': attribute type 1 has an invalid length. [ 1715.932091][T20824] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2806'. [ 1715.932124][T20824] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2806'. [ 1716.028408][T20827] ftl_cs: FTL header not found. [ 1716.131211][T20827] block2mtd: mtd1: [/dev/ram0] erase_size = 4KiB [4096] [ 1717.687621][T20544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.896938][T20544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1718.332857][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.332942][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.404490][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.404613][T17434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.735121][T20569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.859128][T20569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.967025][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.967104][T17427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.978323][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.978432][T17427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.597485][ T5269] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1720.687409][T20681] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1720.706736][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1720.732141][T20681] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1720.761202][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1720.776601][T20681] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1720.827761][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1720.846937][T20681] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1720.868657][T20681] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1722.062384][T20681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1722.154879][T20681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.209440][T17424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.209585][T17424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.251980][ T6197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.252116][ T6197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.421650][T20544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1722.724309][T20544] veth0_vlan: entered promiscuous mode [ 1722.832213][T20927] loop5: detected capacity change from 0 to 512 [ 1722.934973][T20927] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.2813: bad orphan inode 15 [ 1722.935019][T20927] loop5: lost filesystem error report for type 5 error -117 [ 1722.935799][T20927] ext4_test_bit(bit=14, block=5) = 0 [ 1722.941069][T20927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1722.963888][T20544] veth1_vlan: entered promiscuous mode [ 1723.947928][T20544] veth0_macvtap: entered promiscuous mode [ 1723.960422][T20544] veth1_macvtap: entered promiscuous mode [ 1723.985487][T20544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1723.998748][T20544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.043400][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.043451][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.043492][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.043559][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1724.107102][T20924] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1724.878627][T20929] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1725.099002][T20569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.704260][T20942] loop4: detected capacity change from 0 to 4096 [ 1725.806568][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1726.228114][T20945] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.346522][T20942] NILFS (loop4): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1726.818636][T17434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.818661][T17434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.994592][T20569] veth0_vlan: entered promiscuous mode [ 1726.995927][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.995949][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.056917][ T5269] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1727.082107][T20569] veth1_vlan: entered promiscuous mode [ 1728.001691][T20952] loop5: detected capacity change from 0 to 512 [ 1728.009757][T20952] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1728.041592][T20952] EXT4-fs (loop5): 1 truncate cleaned up [ 1728.042985][T20952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1728.285322][T20569] veth0_macvtap: entered promiscuous mode [ 1728.285832][T20962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 1728.338129][T20569] veth1_macvtap: entered promiscuous mode [ 1728.434292][T20569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.442187][T20962] loop4: detected capacity change from 0 to 512 [ 1728.468680][T20962] vfat: Unknown parameter '+' [ 1728.497821][T20569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1728.574862][T17428] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.576639][T17428] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.577513][ T1279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.578133][ T1279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.021824][T20976] siw: device registration error -23 [ 1729.907600][ T9223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1729.907626][ T9223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1731.440343][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.440409][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.877094][T17427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.878991][T17427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.548433][T20681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.221466][T18067] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1733.446948][ T5269] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1733.850159][T20681] veth0_vlan: entered promiscuous mode [ 1733.902274][T20681] veth1_vlan: entered promiscuous mode [ 1734.053446][T20681] veth0_macvtap: entered promiscuous mode [ 1734.094568][T20681] veth1_macvtap: entered promiscuous mode [ 1734.155827][T21020] loop4: detected capacity change from 0 to 2048 [ 1734.201854][T20681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.229117][T21020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1734.229231][T21020] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.285465][T20681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.585070][ T6174] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.585120][ T6174] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.585158][ T6174] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.585196][ T6174] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.595945][T21035] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1735.170638][T18951] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 16: comm syz-executor: path /69/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 1735.236336][T18951] EXT4-fs error (device loop4): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1735.240475][T18951] EXT4-fs error (device loop4): ext4_lookup:1791: inode #12: comm syz-executor: deleted inode referenced: 14 [ 1737.335901][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.335927][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.437866][T18951] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1737.517894][T21052] loop1: detected capacity change from 0 to 256 [ 1737.528736][T21052] exfat: Deprecated parameter 'namecase' [ 1737.528782][T21052] exfat: Bad value for 'uid' [ 1737.528797][T21052] exfat: Bad value for 'uid' [ 1737.576648][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.576672][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1738.302710][ T1257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.984508][T14362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1738.990333][T14362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1739.009208][T14362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1739.010307][T14362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1739.027132][T14362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1739.151576][T21077] loop5: detected capacity change from 0 to 128 [ 1739.189698][T21077] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1739.189744][T21077] hpfs: filesystem error: improperly stopped [ 1739.189761][T21077] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1739.189777][T21077] hpfs: You really don't want any checks? You are crazy... [ 1739.189794][T21077] hpfs: Code page index out of array [ 1739.189802][T21077] hpfs: code page support is disabled [ 1739.189904][T21077] hpfs: hpfs_map_4sectors(): unaligned read [ 1739.189971][T21077] hpfs: hpfs_map_4sectors(): unaligned read [ 1739.189982][T21077] hpfs: filesystem error: unable to find root dir [ 1739.247347][T21077] FAULT_INJECTION: forcing a failure. [ 1739.247347][T21077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1739.247456][T21077] CPU: 0 UID: 0 PID: 21077 Comm: syz.5.2833 Tainted: G L syzkaller #0 PREEMPT(full) [ 1739.247529][T21077] Tainted: [L]=SOFTLOCKUP [ 1739.247551][T21077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1739.247592][T21077] Call Trace: [ 1739.247615][T21077] [ 1739.247645][T21077] dump_stack_lvl+0xe8/0x150 [ 1739.247725][T21077] should_fail_ex+0x3eb/0x540 [ 1739.247768][T21077] strncpy_from_user+0x36/0x2c0 [ 1739.247809][T21077] do_getname+0x77/0x250 [ 1739.247838][T21077] do_fchownat+0xe3/0x250 [ 1739.247862][T21077] ? __pfx_do_fchownat+0x10/0x10 [ 1739.247883][T21077] ? __pfx_ksys_write+0x10/0x10 [ 1739.247924][T21077] __x64_sys_chown+0x82/0xa0 [ 1739.247948][T21077] do_syscall_64+0x166/0x520 [ 1739.247981][T21077] ? trace_irq_disable+0x3b/0x140 [ 1739.248012][T21077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.248037][T21077] ? clear_bhb_loop+0x70/0xc0 [ 1739.248065][T21077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.248088][T21077] RIP: 0033:0x7f66b3d9e159 [ 1739.248110][T21077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.248130][T21077] RSP: 002b:00007f66b4cc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 1739.248154][T21077] RAX: ffffffffffffffda RBX: 00007f66b4025fa0 RCX: 00007f66b3d9e159 [ 1739.248171][T21077] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 1739.248195][T21077] RBP: 00007f66b4cc4090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.248210][T21077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.248224][T21077] R13: 00007f66b4026038 R14: 00007f66b4025fa0 R15: 00007ffc144bf188 [ 1739.248261][T21077] [ 1739.651823][ T1257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.327752][T14362] Bluetooth: hci3: command tx timeout [ 1743.279675][ T1257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.343724][T14362] Bluetooth: hci3: command tx timeout [ 1743.480234][T21101] loop8: detected capacity change from 0 to 2048 [ 1743.653802][T21101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1743.653911][T21101] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.723620][ T1257] netdevsim netdevsim4 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.457418][T21127] device-mapper: table: 248:2: multipath: invalid number of feature args (-EINVAL) [ 1744.457444][T21127] device-mapper: ioctl: error adding target to table [ 1744.873153][T21074] lo speed is unknown, defaulting to 1000 [ 1745.405730][ T1257] bond1: left allmulticast mode [ 1745.422378][ T1257] bond1: left promiscuous mode [ 1745.422769][ T1257] bridge0: port 3(bond1) entered disabled state [ 1745.424682][T14362] Bluetooth: hci3: command tx timeout [ 1745.499997][ T1257] bridge_slave_1: left allmulticast mode [ 1745.500022][ T1257] bridge_slave_1: left promiscuous mode [ 1745.500190][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.541469][ T1257] bridge_slave_0: left allmulticast mode [ 1745.541494][ T1257] bridge_slave_0: left promiscuous mode [ 1745.541678][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.141816][T21156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2840'. [ 1747.072244][T20681] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1747.099706][T21159] loop1: detected capacity change from 0 to 512 [ 1747.190662][T21159] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.2845: bad orphan inode 15 [ 1747.190706][T21159] loop1: lost filesystem error report for type 5 error -117 [ 1747.190970][T21159] ext4_test_bit(bit=14, block=5) = 0 [ 1747.255252][T21159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1747.424175][T21163] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 1747.513754][T14362] Bluetooth: hci3: command tx timeout [ 1747.743462][T21167] ================================================================== [ 1747.743484][T21167] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 1747.743614][T21167] Read of size 8 at addr ffff88802af12e18 by task syz.1.2845/21167 [ 1747.743636][T21167] [ 1747.743652][T21167] CPU: 1 UID: 0 PID: 21167 Comm: syz.1.2845 Tainted: G L syzkaller #0 PREEMPT(full) [ 1747.743686][T21167] Tainted: [L]=SOFTLOCKUP [ 1747.743696][T21167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1747.743712][T21167] Call Trace: [ 1747.743721][T21167] [ 1747.743732][T21167] dump_stack_lvl+0xe8/0x150 [ 1747.743768][T21167] print_address_description+0x55/0x1e0 [ 1747.743813][T21167] ? dvb_device_open+0xc4/0x340 [ 1747.743835][T21167] print_report+0x58/0x70 [ 1747.743864][T21167] kasan_report+0x117/0x150 [ 1747.743899][T21167] ? preempt_schedule_thunk+0x16/0x40 [ 1747.743927][T21167] ? dvb_device_open+0xc4/0x340 [ 1747.743956][T21167] dvb_device_open+0xc4/0x340 [ 1747.743983][T21167] chrdev_open+0x4d9/0x600 [ 1747.744007][T21167] ? __pfx_chrdev_open+0x10/0x10 [ 1747.744030][T21167] ? do_dentry_open+0x25/0x1360 [ 1747.744056][T21167] ? __pfx_chrdev_open+0x10/0x10 [ 1747.744077][T21167] do_dentry_open+0x80e/0x1360 [ 1747.744109][T21167] vfs_open_consume+0x4a/0x350 [ 1747.744132][T21167] ? path_openat+0x148a/0x1da0 [ 1747.744166][T21167] path_openat+0x14a6/0x1da0 [ 1747.744213][T21167] do_file_open+0x23e/0x4a0 [ 1747.744245][T21167] ? __pfx___schedule+0x10/0x10 [ 1747.744277][T21167] ? __pfx_do_file_open+0x10/0x10 [ 1747.744325][T21167] ? _raw_spin_unlock+0x41/0x50 [ 1747.744351][T21167] ? alloc_fd+0x6af/0x760 [ 1747.744386][T21167] do_sys_openat2+0x115/0x200 [ 1747.744409][T21167] ? lockdep_hardirqs_on+0x7b/0x110 [ 1747.744441][T21167] ? __pfx_do_sys_openat2+0x10/0x10 [ 1747.744477][T21167] __x64_sys_openat+0x138/0x170 [ 1747.744506][T21167] do_syscall_64+0x166/0x520 [ 1747.744537][T21167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.744561][T21167] ? clear_bhb_loop+0x70/0xc0 [ 1747.744595][T21167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.744619][T21167] RIP: 0033:0x7f3bcb15e98e [ 1747.744640][T21167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1747.744661][T21167] RSP: 002b:00007f3bcc0cfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1747.744688][T21167] RAX: ffffffffffffffda RBX: 00007f3bcc0d06c0 RCX: 00007f3bcb15e98e [ 1747.744705][T21167] RDX: 0000000000040002 RSI: 00007f3bcc0cfc00 RDI: ffffffffffffff9c [ 1747.744722][T21167] RBP: 00007f3bcc0cfc00 R08: 0000000000000000 R09: 0000000000000000 [ 1747.744738][T21167] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1747.744754][T21167] R13: 00007f3bcb426308 R14: 00007f3bcb426270 R15: 00007ffc71d65228 [ 1747.744783][T21167] [ 1747.744792][T21167] [ 1747.744805][T21167] Allocated by task 1: [ 1747.744823][T21167] kasan_save_track+0x3e/0x80 [ 1747.744853][T21167] __kasan_kmalloc+0x93/0xb0 [ 1747.744883][T21167] __kmalloc_cache_noprof+0x31c/0x600 [ 1747.744910][T21167] dvb_register_device+0x309/0x1dd0 [ 1747.744930][T21167] dvb_register_frontend+0x603/0x900 [ 1747.744995][T21167] vidtv_bridge_probe+0xab2/0x10e0 [ 1747.745047][T21167] platform_probe+0xf9/0x190 [ 1747.745113][T21167] really_probe+0x254/0xae0 [ 1747.745142][T21167] __driver_probe_device+0x1e8/0x360 [ 1747.745171][T21167] driver_probe_device+0x4f/0x240 [ 1747.745201][T21167] __driver_attach+0x339/0x600 [ 1747.745229][T21167] bus_for_each_dev+0x23b/0x2c0 [ 1747.745249][T21167] bus_add_driver+0x345/0x670 [ 1747.745270][T21167] driver_register+0x23a/0x320 [ 1747.745301][T21167] vidtv_bridge_init+0x3d/0x60 [ 1747.745416][T21167] do_one_initcall+0x250/0x870 [ 1747.745448][T21167] do_initcall_level+0x10a/0x1a0 [ 1747.745527][T21167] do_initcalls+0x59/0xa0 [ 1747.745547][T21167] kernel_init_freeable+0x29d/0x3e0 [ 1747.745568][T21167] kernel_init+0x22/0x1d0 [ 1747.745594][T21167] ret_from_fork+0x514/0xb70 [ 1747.745615][T21167] ret_from_fork_asm+0x1a/0x30 [ 1747.745647][T21167] [ 1747.745653][T21167] Freed by task 20924: [ 1747.745665][T21167] kasan_save_track+0x3e/0x80 [ 1747.745693][T21167] kasan_save_free_info+0x40/0x50 [ 1747.745717][T21167] __kasan_slab_free+0x5c/0x80 [ 1747.745746][T21167] kfree+0x1c5/0x650 [ 1747.745767][T21167] dvb_device_open+0x2b8/0x340 [ 1747.745787][T21167] chrdev_open+0x4d9/0x600 [ 1747.745805][T21167] do_dentry_open+0x80e/0x1360 [ 1747.745824][T21167] vfs_open_consume+0x4a/0x350 [ 1747.745844][T21167] path_openat+0x14a6/0x1da0 [ 1747.745872][T21167] do_file_open+0x23e/0x4a0 [ 1747.745901][T21167] do_sys_openat2+0x115/0x200 [ 1747.745921][T21167] __x64_sys_openat+0x138/0x170 [ 1747.745942][T21167] do_syscall_64+0x166/0x520 [ 1747.745970][T21167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1747.745991][T21167] [ 1747.745998][T21167] The buggy address belongs to the object at ffff88802af12e00 [ 1747.745998][T21167] which belongs to the cache kmalloc-256 of size 256 [ 1747.746020][T21167] The buggy address is located 24 bytes inside of [ 1747.746020][T21167] freed 256-byte region [ffff88802af12e00, ffff88802af12f00) [ 1747.746044][T21167] [ 1747.746051][T21167] The buggy address belongs to the physical page: [ 1747.746068][T21167] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802af12e00 pfn:0x2af12 [ 1747.746093][T21167] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1747.746112][T21167] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1747.746135][T21167] page_type: f5(slab) [ 1747.746156][T21167] raw: 00fff00000000240 ffff88801b041b40 ffffea0000d12810 ffffea0000ba1910 [ 1747.746177][T21167] raw: ffff88802af12e00 000000000010000f 00000000f5000000 0000000000000000 [ 1747.746200][T21167] head: 00fff00000000240 ffff88801b041b40 ffffea0000d12810 ffffea0000ba1910 [ 1747.746221][T21167] head: ffff88802af12e00 000000000010000f 00000000f5000000 0000000000000000 [ 1747.746243][T21167] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1747.746264][T21167] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1747.746277][T21167] page dumped because: kasan: bad access detected [ 1747.746294][T21167] page_owner tracks the page as allocated [ 1747.746303][T21167] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17881595774 [ 1747.746339][T21167] post_alloc_hook+0x1f9/0x250 [ 1747.746364][T21167] get_page_from_freelist+0x220f/0x2280 [ 1747.746393][T21167] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 1747.746422][T21167] allocate_slab+0x7d/0x5e0 [ 1747.746441][T21167] refill_objects+0x2d5/0x350 [ 1747.746460][T21167] __pcs_replace_empty_main+0x2c8/0x6c0 [ 1747.746493][T21167] __kmalloc_cache_noprof+0x396/0x600 [ 1747.746520][T21167] bus_add_driver+0x162/0x670 [ 1747.746540][T21167] driver_register+0x23a/0x320 [ 1747.746579][T21167] usb_register_driver+0x1e4/0x390 [ 1747.746653][T21167] do_one_initcall+0x250/0x870 [ 1747.746684][T21167] do_initcall_level+0x10a/0x1a0 [ 1747.746706][T21167] do_initcalls+0x59/0xa0 [ 1747.746726][T21167] kernel_init_freeable+0x29d/0x3e0 [ 1747.746747][T21167] kernel_init+0x22/0x1d0 [ 1747.746766][T21167] ret_from_fork+0x514/0xb70 [ 1747.746785][T21167] page_owner free stack trace missing [ 1747.746793][T21167] [ 1747.746800][T21167] Memory state around the buggy address: [ 1747.746812][T21167] ffff88802af12d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1747.746828][T21167] ffff88802af12d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1747.746844][T21167] >ffff88802af12e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1747.746857][T21167] ^ [ 1747.746870][T21167] ffff88802af12e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1747.746887][T21167] ffff88802af12f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1747.746900][T21167] ================================================================== [ 1747.746979][T21167] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1748.514048][T21167] CPU: 1 UID: 0 PID: 21167 Comm: syz.1.2845 Tainted: G L syzkaller #0 PREEMPT(full) [ 1748.525145][T21167] Tainted: [L]=SOFTLOCKUP [ 1748.529505][T21167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1748.539598][T21167] Call Trace: [ 1748.542919][T21167] [ 1748.545882][T21167] vpanic+0x26f/0x710 [ 1748.549960][T21167] panic+0xc5/0xd0 [ 1748.553756][T21167] ? __pfx_panic+0x10/0x10 [ 1748.558257][T21167] ? preempt_schedule_thunk+0x16/0x40 [ 1748.563677][T21167] ? dvb_device_open+0xc4/0x340 [ 1748.568600][T21167] check_panic_on_warn+0x89/0xb0 [ 1748.573594][T21167] ? dvb_device_open+0xc4/0x340 [ 1748.578493][T21167] end_report+0x73/0x170 [ 1748.582781][T21167] ? dvb_device_open+0xc4/0x340 [ 1748.587664][T21167] kasan_report+0x128/0x150 [ 1748.592303][T21167] ? preempt_schedule_thunk+0x16/0x40 [ 1748.597733][T21167] ? dvb_device_open+0xc4/0x340 [ 1748.602628][T21167] dvb_device_open+0xc4/0x340 [ 1748.607354][T21167] chrdev_open+0x4d9/0x600 [ 1748.611815][T21167] ? __pfx_chrdev_open+0x10/0x10 [ 1748.616898][T21167] ? do_dentry_open+0x25/0x1360 [ 1748.621782][T21167] ? __pfx_chrdev_open+0x10/0x10 [ 1748.626748][T21167] do_dentry_open+0x80e/0x1360 [ 1748.631551][T21167] vfs_open_consume+0x4a/0x350 [ 1748.636344][T21167] ? path_openat+0x148a/0x1da0 [ 1748.641164][T21167] path_openat+0x14a6/0x1da0 [ 1748.645813][T21167] do_file_open+0x23e/0x4a0 [ 1748.650367][T21167] ? __pfx___schedule+0x10/0x10 [ 1748.655267][T21167] ? __pfx_do_file_open+0x10/0x10 [ 1748.660365][T21167] ? _raw_spin_unlock+0x41/0x50 [ 1748.665253][T21167] ? alloc_fd+0x6af/0x760 [ 1748.669684][T21167] do_sys_openat2+0x115/0x200 [ 1748.674416][T21167] ? lockdep_hardirqs_on+0x7b/0x110 [ 1748.679657][T21167] ? __pfx_do_sys_openat2+0x10/0x10 [ 1748.684898][T21167] __x64_sys_openat+0x138/0x170 [ 1748.689784][T21167] do_syscall_64+0x166/0x520 [ 1748.694414][T21167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.700519][T21167] ? clear_bhb_loop+0x70/0xc0 [ 1748.705234][T21167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.711175][T21167] RIP: 0033:0x7f3bcb15e98e [ 1748.715625][T21167] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1748.735281][T21167] RSP: 002b:00007f3bcc0cfb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1748.743760][T21167] RAX: ffffffffffffffda RBX: 00007f3bcc0d06c0 RCX: 00007f3bcb15e98e [ 1748.751761][T21167] RDX: 0000000000040002 RSI: 00007f3bcc0cfc00 RDI: ffffffffffffff9c [ 1748.759765][T21167] RBP: 00007f3bcc0cfc00 R08: 0000000000000000 R09: 0000000000000000 [ 1748.767769][T21167] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1748.775801][T21167] R13: 00007f3bcb426308 R14: 00007f3bcb426270 R15: 00007ffc71d65228 [ 1748.783845][T21167] [ 1748.787496][T21167] Kernel Offset: disabled [ 1748.791842][T21167] Rebooting in 86400 seconds..