last executing test programs: 22.638484015s ago: executing program 4 (id=519): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 22.440373701s ago: executing program 4 (id=523): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', 0x110001, &(0x7f0000000340)=ANY=[], 0x1, 0x579, &(0x7f0000001040)="$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") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x78202, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000140)={0x0, 0x0}) r2 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x51}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/112, 0x70}], 0x1, 0x1007fff, 0x0, 0xf) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40383d0c, &(0x7f0000000040)) io_uring_enter(r4, 0xf352, 0xc953, 0x3, &(0x7f0000000040)={[0x24d5d330]}, 0x8) 21.98035861s ago: executing program 4 (id=526): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64], 0x3, 0x551d, &(0x7f0000001d00)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmz6seit6i5+YJey6sGTpkkasptkSpOmtScPHsWD/4koePLo3+DBszfxoHgTlMxMdOsHCE2a3e3vB5Nn3jdvnjxvKIFnpiSAM2sx+fXnUlyLSxExHxFXI7LzUnFkNvLwQkRcj4i5R45SMf/nxPmIuBwR10bJ85yl4qnPbw5vrP/01i/ffHfh3JUvvv5+drsGZu3FiOju5ucH3TymrTw+KOZrw3YWu2vDIuZPdB8W4zSPB83tLMNBbbyulsXVVr4+3d3vj+JOp1YfxVZ7J5vf7eVv2B+2xnmyFzyo7WXjRnM7i+1+msXWUV7X4VH+3XbUH+R5GkW+j7L0MRiMYz7fPGzm+9l9mMV6b1DM53nTRvNwFIdFHH/31tNOI6tj+wQf9GPu7XZv/zAZNvf67bSXrFeqL1Wqt8vVvbTRHDTXyrVu4/ZastTqjJaVB81ad6OVpq1Os1JPu8vJUqteL1erydKd5na71kuq1cpq5VZ5fbk4u5m8fu+9pNNIlkbx1XZvf9Du9JOddC/JX7GcrFRWX15OblSTdza3kq37d+9ubr37wZ33772y+eZrxaJ/lJUsrdxaWSlXb5VXqstnaP+fFEVPcP9wIqVZFwDw5NH/A7Mwvf5/737E9Pv/mGL/X7yd/v9x63/Pev8/hf3Diej/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrB8WvnwjO1nMx1eK+WeKqeeKcSki5iLi938xH+eP5Zwv8iz8x/qFv9XwbSmyDKP3uFAclyNiozh+e3banwIAAAA8vb76+PpnebeePyzOuiBOU37RZu7qhxPKV4qIhcUfJ5RtbvTw/ISSZX/f5+JwQtmyC1gXJ5Qsv+R2blLZ/pf5Y+HiI6GUh7lTLQcAADgVxzuB0+1CAAAAOE2fzroAZqMU41uZ43vB2X/e/3VD8NKxEQAAAPAEKs26AAAAAGDqsv7f7/8BAADA0y3//T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537yVkaCOMA/LZQAf9EYtx7FXdwCuMRXLo0HMBLsHJdr+AFOAPGjUcwYOgUIgYICdOSjzxP0m++aeHHDIGEdyYpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpZ9VPf/+5d3XW3M226tMIuLkhTyzAQAAAE5ZV/W8+Wea+i/a86/aU2/afhER5ZnifRDPjjIHbU515vHVf2P4EdEk7F5j1B7PI+J9e/x53fW7AAAAAI9rtVjOUrWe/kzvPSD6lBZtypcfM+UVEVFNf2dKK3d5bzOFNZ/vYXzOlNYsYI0zhaUlt2GutKs0X/fDqt34n6ZITXn5+dnmDgAA9ChVAvvf+/1WIQAAAPTp070HQEc+XL5cxH4r87AVOEpNu703OeoBAAAAT1Bx7wEAAAAAnWvq/3VVf/sV7v8HAAAAjyrd/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAurat6vlosZ7fmbLa3yTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+sj/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG9+95f/E1PjTDL32lh6HknWTo2tU2Pv3Dj6w/j6NQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rykQAgEQRTMGf876fsfVhL0DCJEQMOjilo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFzv37xk3FAQB/ts9XUkAcAd0QBpAYYKHXa2npBgygiIE/ASlKryX0yo82A60qUBY2lLkLKiNCSKCw9X/o3EpdwtbhhiIxF9ln5xxyiIMk9pF8PtLz+9py/b7PV0X5+vkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXRu5M4yTadcRwXx+4/vrWa9Q/+0mfubj5cyloWR3Um/f+wUN2Jus0lAgAAwPEQFbV9Uuxvp1vLWR938vo/Lc/Lav47z07+TZhS95d9Wftn7ddfHr24M1hnPE520Utrw8Hpvem0Dm+m8+25fzyjld/5/NlLkn8g8QcbL4zS/H5G39679147D0/UkS0A8F+cGnfbd4qg/H0o6/uNZgbAcdGqFN5l/Z90ms0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoA6jjfB0GUchhKXWJM48eHxrdVp/d/PhUtnO3769Wb1mdok0hHBpbTg4XeNc5t31GzevrAyHg2v1By+HEJoa/e1i+lc+muHkEBq5P4IDCuLiw56XfPYdPCn/9x7SEO+EEIYN/UACAODISouW1fXb6dZydixaDOHJ97vr/9cqcZix/n/08fn71bGq9X+/thnOv9761c9712/cfGPt6srlweXBp2+e6b/VP3vh3LkLvfxZSc8TEwAAAPanXbRq/R8v7l3/P1mJw4z1/xff9b+qjpWo/6eaLPo1nQkAAMDx9vwrf/weTTketdvhy5X19Wv98XZn/8x420Cq/9qJolXr/2Sx6awAAACAOow2ol3r/xcrcZhx/f+ZH176qXrNJISwUKz/n1r9bHixvunMtYP88vDXf/M9+abnCAAAQLMWilZd/0/z9//jnVce4hDC66+O4+LPAM5U/yfvf/Njdazq+/9n65viXIq74/uR990QWt2mMwIAAOAoe6poWbH/W7q1/MnPJz9se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoG5/BgAA//9kVzgr") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00', 0x800001}}}, 0x88) syz_mount_image$fuse(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) copy_file_range(r5, 0x0, r2, 0x0, 0x80, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000105000000000000000002000000", @ANYRES32=r6, @ANYBLOB="1000c4000a00010028f69243607ab083"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x2, @broadcast=0xac141418}]}, 0x20}}, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c022b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000240)={'#! ', './file1', [], 0xa, "b26c45b0ba9f93e1b884d7ee0fa7c5c76f1c3fb93b37678feb7121427c1f78066c84fa85fce5d562792cbf969492b749b81ec1da8d58"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000000, 0x13, r8, 0x0) r10 = socket(0x3, 0x6, 0x8) r11 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r11, 0x720, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0xfffffffffffffffe}) getsockopt$inet6_mreq(r10, 0x10d, 0x93, 0x0, &(0x7f0000000040)) 4.590654256s ago: executing program 3 (id=622): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4c7041aec0d13196}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000000514080226bd7000fedbdf25080001000200000008000300010000000800010000000000080003000100010000002100030004000000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x40000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001e80)=[{{&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000000840)=""/79, 0x4f}, {&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/68, 0x44}], 0x7, &(0x7f0000000a80)=""/172, 0xac}, 0x1}, {{&(0x7f0000000b40)=@caif=@dgm, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/19, 0x13}, {&(0x7f0000000c00)=""/63, 0x3f}, {&(0x7f0000006140)=""/4096, 0x1000}, {&(0x7f0000001fc0)=""/162, 0xa2}], 0x4, &(0x7f0000001300)=""/41, 0x29}, 0xff}, {{&(0x7f0000000d80)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/170, 0xaa}, {&(0x7f0000000f40)=""/99, 0x63}, {&(0x7f0000000fc0)=""/187, 0xbb}, {&(0x7f0000001080)=""/9, 0x9}, {&(0x7f00000010c0)=""/194, 0xc2}], 0x5, &(0x7f0000001240)=""/134, 0x86}, 0x80}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/160, 0xa0}, {&(0x7f0000007140)=""/4096, 0x1000}, {&(0x7f0000001480)=""/106, 0x6a}, {&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/11, 0xb}, {&(0x7f00000015c0)=""/63, 0x3f}, {&(0x7f0000001600)=""/79, 0x4f}, {&(0x7f0000001a40)=""/222, 0xde}], 0x8, &(0x7f0000001800)=""/6, 0x6}, 0x7}, {{&(0x7f0000001840)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001d40), 0x0, &(0x7f0000001d80)=""/218, 0xda}, 0x5}], 0x5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c40)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2c}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xdf}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100000}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x7c}}, 0x4) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180), 0x14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@map_fd, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r7, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="08a7c5c3e8fc5926bb87e6c8eb659a0c3f01cf37dfa9739d70fb22c0511bc99af73deacfe39f42d8a9c723b4a829637ff838031460398fcf19afd0954b2c3a152891ec8e21e7ba6c596b576e67d281f08c748282cc1e199c866c7c6b94013526b9fcfbf3ecbd8aee1324b82c25d68c83cc46176a99e77b62dcf9c8b61dbe7c17f236e0cc0b0e7cce7df435d49c2e303452e48b66be1d1827c3bc9db900000000", @ANYRES64=0x0], 0x10) sendmsg$nl_generic(r4, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000001900)={0x104, 0x27, 0x4, 0x70bd27, 0x25dfdbfd, {0x8}, [@generic="8d98ffdcc079a6c05a4caccfb511e0a004544c7b38aa3df9a67e1bdbb0f32f100584e43f02ab60b10505e5ca229b9f8fd29be0931b7995e1d8eee5fcebba668189a198edd16e4071a73402f36cf9d41df86e2fa15abec932447e4cd589b7da2b9c0dff9a6bb56fa44cd872dceadb97ba8d731db64ad151dbaf1a4783ef2e4b17fb44449b060318cdf5c847ba9a8e74a82423c7a717b018f12d65bd885f3ec92d95f62a5d81d8e97cbc6a822ae649d4c5d070daac9621eb263a59c3d893b93a12062b6998cbadc468937ff242d429523c4f632f7088c8b70bb7a7784c4c2b2b13", @nested={0xc, 0xb6, 0x0, 0x1, [@typed={0x8, 0xe8, 0x0, 0x0, @pid=r1}]}, @typed={0x4, 0x4f, 0x0, 0x0, @binary}, @generic]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000001b40)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'sip\x00'}}, {@appraise}, {@flag='sync'}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, '/dev/fuse\x00'}}, {@fowner_eq}, {@uid_lt}, {@smackfsfloor={'smackfsfloor', 0x3d, '\xb1+\'){/'}}]}}) syz_fuse_handle_req(r8, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000e00)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0xeffdf5ff, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 4.217478507s ago: executing program 0 (id=624): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r2, 0x489, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 4.086488608s ago: executing program 0 (id=625): clock_adjtime(0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="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"/372, @ANYBLOB="a6af891d142bbb006c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c56aec07fcb9b2173a2ca7d2e93bfdaf6ce754ff58ada9c5425c1484210091f49282c667355a1ede7cc064370a47f6b4345b1cf4ee9098af0a44d5b4a67b20e28dc923cede7367eb292b0cc893f2cedd114a2fe9d4121bd1d92b3", @ANYBLOB="b49afc55067944ab9c5569124af34dfac6fa5d79598ba4dc459e3a033733b6cb4712c05e37a629af74e69f57bda745c50cb7c241517b803ebe286a2cd2511ba8931a907d05008405e8accd99e468f54e", @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64], 0x0, 0x1e3, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmallocinfo\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendfile(r4, r3, 0x0, 0x20000023893) 3.357389899s ago: executing program 0 (id=629): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000900), 0x13f, 0x5}}, 0xfffffee8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) setsockopt$ax25_int(r3, 0x101, 0x8, &(0x7f0000000000)=0xb5d, 0x4) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(r4, 0x1, &(0x7f0000000680)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) setsockopt$inet6_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000240)="43ce19fda85d67cdae405c5f40ac3a7722de3be02268789b6519c55de122267687492bd8dccfe83db9feae33f14efd1c65d989f8313bdd6ecdbf0616ff15898b5339942957ed11", 0x47) 3.353953449s ago: executing program 1 (id=630): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x1, 0xc9, 0xfffc}}}, 0x8) 3.286850335s ago: executing program 3 (id=631): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x66, &(0x7f0000000200)={r1}, &(0x7f00000000c0)=0x8) r7 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0xfffffffd, 0x1}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x7}, 0x8) 3.2294382s ago: executing program 1 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x30, r2, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {0x5}, {}, {}], "7ecbad144922f925"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (fail_nth: 7) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) 3.008860768s ago: executing program 0 (id=633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x44, 0xfc, &(0x7f0000000780)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f00000008c0)="f39df5e8f61fa201ffc37b1d8472cee4c0fe872521733ec1246ed7bcab0dd00f15c3f560e8bb2193ca44c39e107fd737701cbcbe6aebd035d7063b0f7d694d461931350f2dddb844c7348aaec71e00c6"}) 2.813680445s ago: executing program 1 (id=634): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x65, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x676, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1, 0x0, 0x0, @void, @value}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x14, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x101}, @TCA_FQ_PIE_BETA={0x8}]}}]}, 0x44}}, 0x0) 2.740866991s ago: executing program 3 (id=635): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x50, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9f0}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xf72}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5c0}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x88}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffe5, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffe, 0x2}) 2.649442108s ago: executing program 2 (id=636): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x766e, &(0x7f0000000840)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2205}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 2.529046199s ago: executing program 1 (id=637): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000006c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@errors_continue}]}, 0x0, 0x236, &(0x7f0000000300)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00Q\x00\x00'], 0x0) socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 2.491486082s ago: executing program 3 (id=638): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000040)='.\x02\x00', 0x21000e, &(0x7f0000001340)={[{@resuid}]}, 0x1, 0x547, &(0x7f0000000bc0)="$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") 2.289323149s ago: executing program 2 (id=639): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0xfffffffd, 0x1}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x7}, 0x8) 2.047811549s ago: executing program 3 (id=640): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000400), 0x4) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000018c0)}, 0x0) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r3, @ANYRES64=r3], 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x13) socket$kcm(0x2, 0x0, 0x2) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="02c910"], 0x1d) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f00000004c0)={0x0, 0x0}) request_key(&(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0xfffffffffffffffd) ioctl$TCSETS(r6, 0x5402, &(0x7f0000001600)={0x0, 0x0, 0x998, 0x0, 0x0, "c4fa5fecfb2c34f2df5d2afc4e16ea19a88635"}) 1.945042798s ago: executing program 0 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) (fail_nth: 5) 1.721919246s ago: executing program 2 (id=642): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x3}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x3000000, 0x10001, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xfffffffe, 0x2}) 1.581043828s ago: executing program 0 (id=643): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x800000) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x800, 0x0) mkdirat(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '?'}]}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9e"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="c364d27bd4743ac252d00f634b7b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7", @ANYBLOB="3873213ccef277e2", @ANYRESHEX], 0x1, 0x5581, &(0x7f000000bbc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.417674412s ago: executing program 3 (id=644): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f00000001c0)="3f6c00c2231bc4cb501d70870800", 0x0, 0xdbf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x66, &(0x7f0000000200)={r1}, &(0x7f00000000c0)=0x8) r6 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0xfffffffd, 0x1}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x7}, 0x8) 983.656088ms ago: executing program 4 (id=582): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000100000100c28000050006"], 0x48}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 968.908269ms ago: executing program 1 (id=645): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 793.312054ms ago: executing program 2 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x3, 0x6, 0x3, 0x6, 0x18, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000340)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x6, 0x9149, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r1, 0x0, 0xd1, 0x7c, &(0x7f0000001340)="a1fffbcb7799053451cd8667d4f561b569160bd25f46dbdabecf4b2c98714665741a3cc156993f8d06696d8d8c968b74738da3a37ad09abd9360dd30c62e5437d5d448fe8c7fada2311c73d3e3e18bd858af2c379a42291252f65f16251c5e798d5d0409909c26d62afe9102a075527d4ac1bbba463d2178e273caa441216b1660f2b29e3e3f78dd665b2692d280eca68d0e7495b48610d2078ed98a104b6c9007f71e34b55fe06537c6f42767e48eb3f12b889dddf540ea2bab2ffe237ba28310b1c9ea2f890d988acfbc5c17bf76904f", &(0x7f0000000200)=""/124, 0x10000, 0x0, 0xb7, 0xa0, &(0x7f0000001440)="7b22681ef412a320e0a26fe0f885c271bc36745d17fa7646729c0cdaa8f01b9b11f25b46c46cb52c43a54d814d1639b1e4bc7acc75f5f18fb2bce8617a47d1e2420a8753d66d1c06ccf82e315cd36cf4fe2eeff858348876cfa54b0a9fe7d7147b58fc0d2c032198e8e75de5af33d4f2d304a60433b7ceeda9c8cf24348234ad6aff7cbed3d5b3720b271a8c27f7c0209a5d7931015f0e761214b92c9bd96182b92cf375c7284451fc7a9f0ebb65e983abfcd04052a303", &(0x7f0000001500)="7929684ff5bced7e90f376b7210a20a3e9ffc29455bd72312ed3df20e1f4213cb446f25e5179ea907ceee90e2ca1ebff40647cb6dd5ed42c50c219f25dc97aa52336bb5224c66573eba3732fedf291b0594b86e5a12c7943d894546fd289fbea2f6737e7b9c2456b70fbbc420dc5528cba5e0ee1f9ab01ffdfc88f81295cffd30674a00ceb4437a521cac172abfffafaf1c7e06d7b399f453e6fa6fea346a9ff", 0x1, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000300)={0x0, 0x1, &(0x7f00000002c0)={&(0x7f0000000000)={0x34, 0x6, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 720.90647ms ago: executing program 4 (id=647): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e110b07"], 0xfc) tgkill(0x0, 0x0, 0xf) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000620a70ff000000004500000000000000950000000000000018100a00", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x95, &(0x7f0000000240)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x59) sendmsg$nl_xfrm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000bed64e82c77a78ca4d3f9b00fc00000000000000000000000000000000000000000a00"/75, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b\x00\x00\x00\x00\x00'], 0xc4}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x478, &(0x7f0000000dc0)="$eJzs3c9vFFUcAPDvTH/w21ZEEQSsopH4o6Xlhxy8aDTxoImJHjCealsIslBDSyKEaPWAR0Pi3Xg08S/wpBejnky8arwaEmK4gCYma2Z3Bpb9ZVu3TMN+PsnAe/Pe7nvfmXm7b2Z2uwH0rbHsnyRia0T8GhEj9eydFcbq/928fmnmr+uXZpKoVt/8M6nVu3H90kxRtXjclnqmWs3zG9q0e/mdiOlKZe5cnp9YPPP+xMKFi8+dOjN9cu7k3NmpY8cOH9o7fHTqyCqiSlrWZHHd2P3h/J5dr7595fWZ41fe/fHrrNbWvLwxjl4Zq2/dtp7sdWMl29aQTgZL7Agr8k9EZLtrqDb+R2IgNt0qG4lXPim1c8Caqlar1Xbvz7mlKnAPS6LsHgDlKN7os/PfYrlLU4914dqL9ROgLO6b+VIvGYw0Ijbm50bb1qj9sYg4vvT3F9kSa3QdAgCg0bfZ/OfZdvO/NB5qqHdffg9lNCLuj4jtEfFAROyIiAcjanV3RsTDK2y/+Q5J6/wnvbqqwJYpm/+9kN/bunP+lxZVRgfy3LZa/EPJiVOVuYP5NjkQQxuy/GSXNr57+ZfPOpU1zv+yJWu/mAvm/bg62HSBbnZ6cfr/xNzo2scRuwfbxZ9EcRsniYhdEbF7lW2cevqrPZ3KmuLPNnNT/F304D5T9cuIp+r7fyma4i8kHe9PTj5/dOrIxMaozB2cKI6KVj/9fPmN1rX15//v/b+2sv2/ue3xX+/fUMRosjFi4cLF07X7tQsrb+Pyb592PKdZ7fE/nLxVSw/n6z6YXlw8NxkxnLzWun7q9mOLfFE/i//A/vbjf3vc3hKPRER2EO+NiH0R8Wje98ci4vGI2N8pwN93xg8vPfHeyuPvclW+h7L4Z7vs/+wlL0vd3v/NB8JSm6I7EwOnv/+mU/vL2/+Ha6kD+ZrlvP516U67IAAAAOCeltY+A5+k47fSaTo+Xv8M/47YnFbmFxafOTF//uxs/bPyozGUFle6Rhquh07m14aL/FRT/lB+3fjzgU21/PjMfGW27OChz23pMP4zfwyU3Ttgzfm+FvQv4x/6l/EP/cv4h/5l/EP/ajf+PyqhH8DdVxv/adm9AMpQG//n95XdDaAEzv+hfxn/0Jc6fjc+7Vwk0dPEpsh/CmGd9GeZiUjXRTfWWyKWInr3hHHh4unBZf8xi9Ulkmhb1P11o/UXNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANanfwMAAP//0JjdTg==") waitid(0x0, 0x0, 0x0, 0x60000004, &(0x7f00000002c0)) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0x1, [{@private=0xa010102, 0x7ff}, {@broadcast, 0xc52}, {@multicast1, 0xb}]}]}}}}}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000000)=0x1, 0xfefb) sendto$inet(r4, &(0x7f0000000480)="a6", 0x1, 0x20040040, &(0x7f0000000540)={0x2, 0x0, @remote}, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000003c0)=0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000004c0)=r5) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000400)=0xe) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000001280)={0x2e, @remote, 0x0, 0x0, 'wlc\x00', 0xd}, 0x2c) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ef136c8e19262404dc7237b5729e61f461a10db7217510311f806225c1ed0f38a29de6131b8c644f009894a6069aa224da3325d75aaf90c5f9d7a9d0861a977cc4ac23516487e2a7cdf6d302eed6b81fb0c9ff5736f8560a0d55b074c6a990a7ecd49497bb9d5ef2e3a9db05239c6038", @ANYRES16=r8, @ANYBLOB="000128bd7000fcdbdf2501000000050005001f0000000800020005000000", @ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x73b7930139ca366e) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r6, r9, 0x0, 0x7ffff000) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r11 = dup(r10) getsockopt$bt_BT_DEFER_SETUP(r11, 0x112, 0x13, 0x0, &(0x7f0000000980)) sendmsg$nl_route(r9, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2881d3ce600728c6b30e8d0000006900000425bd7000fedbdf2500000000000000000800010002000000080001000100000038db95a1dff600100000df5eb8049f7d05568397d5aebbf2a6c86cd72c0805805a6e5c423e0789c2635993409002000000d75b129944d59e91d55fba541ee7a4bb1a6d9659c2318d9f15df8e1717b2efaab6116c3e9d6b4ecc5a937a6e3c1b7c91fdc3d695aeb5e00f392313c1b58a5546cb5d157d79ec7b5706638dbaa3f200000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 602.73977ms ago: executing program 2 (id=648): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_io_uring_setup(0x766e, &(0x7f0000000840)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2205}}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 245.43018ms ago: executing program 2 (id=649): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f0000000080)={[{@ssd_spread}, {@noautodefrag}, {@max_inline={'max_inline', 0x3d, [0x54, 0x25, 0x67]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@ssd}, {@acl}]}, 0x1, 0x55a4, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 152.903658ms ago: executing program 4 (id=650): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r2 = io_uring_setup(0x31f7, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000080)=[@ioring_restriction_sqe_op], 0x1) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf2501"], 0x34}}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r3, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000440)=0x2, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000005c0)={@broadcast, @random, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x4, 0x63}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r7, 0x800, 0x70bd2c, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x400c000) 0s ago: executing program 1 (id=651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000180)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x0, 0xfffffffd, 0x1}}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r1, 0x7}, 0x8) kernel console output (not intermixed with test programs): ity change from 0 to 32768 [ 125.992813][ T5867] XFS: ikeep mount option is deprecated. [ 126.104707][ T5867] XFS (loop1): Mounting V5 Filesystem [ 126.308658][ T5867] XFS (loop1): Ending clean mount [ 126.312184][ T5867] XFS (loop1): Quotacheck needed: Please wait. [ 126.936990][ T5826] hid-generic 0000:0000:0000.0001: item fetching failed at offset 0/2 [ 126.939205][ T5826] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 [ 126.985698][ T4325] Bluetooth: hci6: command tx timeout [ 127.032645][ T5867] XFS (loop1): Quotacheck: Done. [ 127.042733][ T47] Bluetooth: hci6: ACL packet for unknown connection handle 456 [ 127.259695][ T4655] XFS (loop1): Unmounting Filesystem [ 127.303641][ T5876] loop3: detected capacity change from 0 to 32768 [ 127.475471][ T5876] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.624795][ T4568] ocfs2: Unmounting device (7,3) on (node local) [ 127.846545][ T5898] binder: 5897:5898 ioctl c0306201 20000140 returned -14 [ 127.929996][ T5902] loop1: detected capacity change from 0 to 128 [ 128.055827][ T5902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 128.085501][ T5906] loop3: detected capacity change from 0 to 512 [ 128.172155][ T5906] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.302: casefold flag without casefold feature [ 128.176017][ T5906] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.302: couldn't read orphan inode 15 (err -117) [ 128.186977][ T5906] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.217671][ T5906] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 128.324044][ T4325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 128.328770][ T4325] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 128.331064][ T4325] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 128.333329][ T4325] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 128.335360][ T4325] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 128.337115][ T4325] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 128.363530][ T5891] FAULT_INJECTION: forcing a failure. [ 128.363530][ T5891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.366328][ T5891] CPU: 1 PID: 5891 Comm: syz.2.296 Not tainted 6.1.113-syzkaller #0 [ 128.367893][ T5891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 128.369882][ T5891] Call trace: [ 128.370573][ T5891] dump_backtrace+0x1c8/0x1f4 [ 128.371503][ T5891] show_stack+0x2c/0x3c [ 128.372326][ T5891] dump_stack_lvl+0x108/0x170 [ 128.373221][ T5891] dump_stack+0x1c/0x5c [ 128.374067][ T5891] should_fail_ex+0x3c0/0x51c [ 128.374992][ T5891] should_fail+0x14/0x24 [ 128.375798][ T5891] should_fail_usercopy+0x20/0x30 [ 128.376783][ T5891] kstrtouint_from_user+0xd0/0x280 [ 128.377780][ T5891] proc_fail_nth_write+0xa8/0x274 [ 128.378851][ T5891] vfs_write+0x2a4/0x91c [ 128.379735][ T5891] ksys_write+0x15c/0x26c [ 128.380618][ T5891] __arm64_sys_write+0x7c/0x90 [ 128.381658][ T5891] invoke_syscall+0x98/0x2c0 [ 128.382571][ T5891] el0_svc_common+0x138/0x258 [ 128.383528][ T5891] do_el0_svc+0x64/0x218 [ 128.384332][ T5891] el0_svc+0x58/0x168 [ 128.385175][ T5891] el0t_64_sync_handler+0x84/0xf0 [ 128.386136][ T5891] el0t_64_sync+0x18c/0x190 [ 128.544756][ T4568] EXT4-fs (loop3): unmounting filesystem. [ 128.670574][ T4302] EXT4-fs (loop0): unmounting filesystem. [ 128.716015][ T5919] overlayfs: failed to resolve './file0': -2 [ 128.982192][ T47] block nbd4: Receive control failed (result -32) [ 128.992391][ T5914] block nbd4: shutting down sockets [ 129.239811][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.445219][ T5920] loop3: detected capacity change from 0 to 32768 [ 129.468306][ T5920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.304 (5920) [ 129.484779][ T5920] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.496235][ T5920] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 129.498080][ T5920] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 129.500161][ T5920] BTRFS info (device loop3): use zstd compression, level 3 [ 129.501582][ T5920] BTRFS info (device loop3): using free space tree [ 129.551731][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.697578][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 129.911408][ T4737] bio_check_eod: 52480 callbacks suppressed [ 129.911493][ T4737] syz.2.54: attempt to access beyond end of device [ 129.911493][ T4737] loop2: rw=524288, sector=51352, nr_sectors = 8 limit=40427 [ 130.156974][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.162023][ T4743] syz.4.55: attempt to access beyond end of device [ 130.162023][ T4743] loop4: rw=0, sector=49984, nr_sectors = 8 limit=40427 [ 130.191926][ T4737] syz.2.54: attempt to access beyond end of device [ 130.191926][ T4737] loop2: rw=524288, sector=51360, nr_sectors = 8 limit=40427 [ 130.392144][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.397801][ T4737] syz.2.54: attempt to access beyond end of device [ 130.397801][ T4737] loop2: rw=524288, sector=51368, nr_sectors = 8 limit=40427 [ 130.400611][ T4737] syz.2.54: attempt to access beyond end of device [ 130.400611][ T4737] loop2: rw=524288, sector=51376, nr_sectors = 8 limit=40427 [ 130.403455][ T4737] syz.2.54: attempt to access beyond end of device [ 130.403455][ T4737] loop2: rw=524288, sector=51384, nr_sectors = 8 limit=40427 [ 130.407439][ T47] Bluetooth: hci7: command tx timeout [ 130.421993][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.424228][ T5915] device bridge_slave_0 entered promiscuous mode [ 130.438019][ T4743] syz.4.55: attempt to access beyond end of device [ 130.438019][ T4743] loop4: rw=0, sector=49992, nr_sectors = 8 limit=40427 [ 130.440669][ T4743] syz.4.55: attempt to access beyond end of device [ 130.440669][ T4743] loop4: rw=0, sector=50000, nr_sectors = 8 limit=40427 [ 130.443571][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.445454][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.461109][ T4737] syz.2.54: attempt to access beyond end of device [ 130.461109][ T4737] loop2: rw=524288, sector=51392, nr_sectors = 8 limit=40427 [ 130.475856][ T4737] syz.2.54: attempt to access beyond end of device [ 130.475856][ T4737] loop2: rw=524288, sector=51400, nr_sectors = 8 limit=40427 [ 130.477201][ T5915] device bridge_slave_1 entered promiscuous mode [ 130.515832][ T5920] BTRFS info (device loop3): enabling ssd optimizations [ 130.580439][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.771030][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.774820][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.810318][ T4568] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 130.946458][ T5915] team0: Port device team_slave_0 added [ 130.956494][ T5915] team0: Port device team_slave_1 added [ 131.124693][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.126325][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.145936][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.179763][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.181298][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.225707][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.284917][ T5970] loop3: detected capacity change from 0 to 256 [ 131.354586][ T5970] FAT-fs (loop3): Directory bread(block 64) failed [ 131.359118][ T5970] FAT-fs (loop3): Directory bread(block 65) failed [ 131.360614][ T5970] FAT-fs (loop3): Directory bread(block 66) failed [ 131.362016][ T5970] FAT-fs (loop3): Directory bread(block 67) failed [ 131.363379][ T5970] FAT-fs (loop3): Directory bread(block 68) failed [ 131.364804][ T5970] FAT-fs (loop3): Directory bread(block 69) failed [ 131.386098][ T5970] FAT-fs (loop3): Directory bread(block 70) failed [ 131.387578][ T5970] FAT-fs (loop3): Directory bread(block 71) failed [ 131.389052][ T5970] FAT-fs (loop3): Directory bread(block 72) failed [ 131.390422][ T5970] FAT-fs (loop3): Directory bread(block 73) failed [ 131.398006][ T5915] device hsr_slave_0 entered promiscuous mode [ 131.508796][ T5970] binder: 5969:5970 ioctl c0306201 20000140 returned -14 [ 131.535987][ T5915] device hsr_slave_1 entered promiscuous mode [ 131.636022][ T5915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.637563][ T5915] Cannot create hsr debugfs directory [ 131.872792][ T4655] EXT4-fs (loop1): unmounting filesystem. [ 131.941945][ T5987] FAULT_INJECTION: forcing a failure. [ 131.941945][ T5987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.944762][ T5987] CPU: 0 PID: 5987 Comm: syz.1.314 Not tainted 6.1.113-syzkaller #0 [ 131.946420][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.948532][ T5987] Call trace: [ 131.949169][ T5987] dump_backtrace+0x1c8/0x1f4 [ 131.950180][ T5987] show_stack+0x2c/0x3c [ 131.951042][ T5987] dump_stack_lvl+0x108/0x170 [ 131.952009][ T5987] dump_stack+0x1c/0x5c [ 131.953061][ T5987] should_fail_ex+0x3c0/0x51c [ 131.954026][ T5987] should_fail+0x14/0x24 [ 131.954816][ T5987] should_fail_usercopy+0x20/0x30 [ 131.955882][ T5987] copy_msghdr_from_user+0xb8/0x59c [ 131.956972][ T5987] __sys_sendmsg+0x200/0x33c [ 131.957861][ T5987] __arm64_sys_sendmsg+0x80/0x94 [ 131.958813][ T5987] invoke_syscall+0x98/0x2c0 [ 131.959700][ T5987] el0_svc_common+0x138/0x258 [ 131.960665][ T5987] do_el0_svc+0x64/0x218 [ 131.961606][ T5987] el0_svc+0x58/0x168 [ 131.962584][ T5987] el0t_64_sync_handler+0x84/0xf0 [ 131.963669][ T5987] el0t_64_sync+0x18c/0x190 [ 132.141930][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.290289][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.339896][ T5957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.309'. [ 132.485935][ T4325] Bluetooth: hci7: command tx timeout [ 133.298805][ T6009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.366026][ T6009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.415886][ T6011] loop3: detected capacity change from 0 to 256 [ 133.476764][ T6011] FAT-fs (loop3): Directory bread(block 64) failed [ 133.478196][ T6011] FAT-fs (loop3): Directory bread(block 65) failed [ 133.479567][ T6011] FAT-fs (loop3): Directory bread(block 66) failed [ 133.480889][ T6011] FAT-fs (loop3): Directory bread(block 67) failed [ 133.482150][ T6011] FAT-fs (loop3): Directory bread(block 68) failed [ 133.483891][ T6011] FAT-fs (loop3): Directory bread(block 69) failed [ 133.485325][ T6011] FAT-fs (loop3): Directory bread(block 70) failed [ 133.517262][ T6011] FAT-fs (loop3): Directory bread(block 71) failed [ 133.518735][ T6011] FAT-fs (loop3): Directory bread(block 72) failed [ 133.520026][ T6011] FAT-fs (loop3): Directory bread(block 73) failed [ 133.639119][ T6011] binder: 6010:6011 ioctl c0306201 20000140 returned -14 [ 133.878510][ T6020] loop3: detected capacity change from 0 to 128 [ 133.963688][ T6020] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 134.054683][ T6008] loop1: detected capacity change from 0 to 32768 [ 134.104292][ T6008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.320 (6008) [ 134.128970][ T6008] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.131183][ T6008] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 134.132874][ T6008] BTRFS info (device loop1): enabling auto defrag [ 134.134228][ T6008] BTRFS info (device loop1): doing ref verification [ 134.150342][ T6008] BTRFS info (device loop1): max_inline at 0 [ 134.151645][ T6008] BTRFS info (device loop1): force clearing of disk cache [ 134.153071][ T6008] BTRFS info (device loop1): turning on sync discard [ 134.154468][ T6008] BTRFS info (device loop1): disabling free space tree [ 134.433517][ T6008] BTRFS info (device loop1): enabling ssd optimizations [ 134.436829][ T6008] BTRFS info (device loop1): rebuilding free space tree [ 134.456153][ T6008] BTRFS info (device loop1): disabling free space tree [ 134.457787][ T6008] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 134.459804][ T6008] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 134.565735][ T4325] Bluetooth: hci7: command tx timeout [ 134.595544][ T4655] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.917435][ T6059] netlink: 32 bytes leftover after parsing attributes in process `syz.4.326'. [ 134.921903][ T4737] bio_check_eod: 34427 callbacks suppressed [ 134.921915][ T4737] syz.2.54: attempt to access beyond end of device [ 134.921915][ T4737] loop2: rw=524288, sector=51440, nr_sectors = 8 limit=40427 [ 134.938940][ T4737] syz.2.54: attempt to access beyond end of device [ 134.938940][ T4737] loop2: rw=524288, sector=51448, nr_sectors = 8 limit=40427 [ 134.941786][ T4737] syz.2.54: attempt to access beyond end of device [ 134.941786][ T4737] loop2: rw=524288, sector=51456, nr_sectors = 8 limit=40427 [ 134.944710][ T4737] syz.2.54: attempt to access beyond end of device [ 134.944710][ T4737] loop2: rw=524288, sector=51464, nr_sectors = 8 limit=40427 [ 134.975926][ T4743] syz.4.55: attempt to access beyond end of device [ 134.975926][ T4743] loop4: rw=524288, sector=51888, nr_sectors = 8 limit=40427 [ 134.978860][ T4743] syz.4.55: attempt to access beyond end of device [ 134.978860][ T4743] loop4: rw=524288, sector=51896, nr_sectors = 8 limit=40427 [ 134.983688][ T4737] syz.2.54: attempt to access beyond end of device [ 134.983688][ T4737] loop2: rw=524288, sector=51472, nr_sectors = 8 limit=40427 [ 135.002663][ T4737] syz.2.54: attempt to access beyond end of device [ 135.002663][ T4737] loop2: rw=524288, sector=51480, nr_sectors = 8 limit=40427 [ 135.006241][ T4737] syz.2.54: attempt to access beyond end of device [ 135.006241][ T4737] loop2: rw=524288, sector=51488, nr_sectors = 8 limit=40427 [ 135.009030][ T4737] syz.2.54: attempt to access beyond end of device [ 135.009030][ T4737] loop2: rw=524288, sector=51496, nr_sectors = 8 limit=40427 [ 135.086696][ T6061] binder: 6056:6061 got reply transaction with no transaction stack [ 135.098869][ T6061] binder: 6056:6061 transaction reply to 0:0 failed 6/29201/-71, size 0-0 line 2955 [ 135.587636][ T6055] loop1: detected capacity change from 0 to 32768 [ 135.596902][ T6055] XFS: ikeep mount option is deprecated. [ 135.752665][ T6055] XFS (loop1): Mounting V5 Filesystem [ 136.559317][ T6055] XFS (loop1): Ending clean mount [ 136.564216][ T6055] XFS (loop1): Quotacheck needed: Please wait. [ 136.647087][ T6055] XFS (loop1): Quotacheck: Done. [ 136.655751][ T47] Bluetooth: hci7: command tx timeout [ 136.810798][ T4655] XFS (loop1): Unmounting Filesystem [ 136.952816][ T5915] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.006735][ T5915] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.168525][ T5915] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.238964][ T5915] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.533109][ T4568] EXT4-fs (loop3): unmounting filesystem. [ 137.816505][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.864976][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.914491][ T11] device hsr_slave_0 left promiscuous mode [ 137.955861][ T11] device hsr_slave_1 left promiscuous mode [ 137.987065][ T6127] loop1: detected capacity change from 0 to 256 [ 138.036901][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.038561][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.041763][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.043512][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.059807][ T11] bridge0: port 3(team0) entered disabled state [ 138.097898][ T11] device bridge_slave_1 left promiscuous mode [ 138.099309][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.119801][ T6120] loop3: detected capacity change from 0 to 32768 [ 138.134253][ T6120] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.334 (6120) [ 138.142163][ T11] device bridge_slave_0 left promiscuous mode [ 138.143491][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.160571][ T6120] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.163029][ T6120] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 138.166161][ T6120] BTRFS info (device loop3): enabling auto defrag [ 138.168770][ T6120] BTRFS info (device loop3): doing ref verification [ 138.171251][ T6120] BTRFS info (device loop3): max_inline at 0 [ 138.174829][ T6120] BTRFS info (device loop3): force clearing of disk cache [ 138.178981][ T6120] BTRFS info (device loop3): turning on sync discard [ 138.182714][ T6120] BTRFS info (device loop3): disabling free space tree [ 138.296783][ T11] device veth1_macvtap left promiscuous mode [ 138.298046][ T11] device veth0_macvtap left promiscuous mode [ 138.299388][ T11] device veth1_vlan left promiscuous mode [ 138.300631][ T11] device veth0_vlan left promiscuous mode [ 138.314772][ T6120] BTRFS info (device loop3): enabling ssd optimizations [ 138.318221][ T6120] BTRFS info (device loop3): rebuilding free space tree [ 138.341778][ T6120] BTRFS info (device loop3): disabling free space tree [ 138.350195][ T6120] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.362377][ T6120] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.500692][ T4568] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 138.598500][ T5512] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 138.823085][ T11] device batadv1 left promiscuous mode [ 138.827963][ T11] team0 (unregistering): Port device batadv1 removed [ 139.859702][ T4355] hid-generic 0000:0000:0000.0002: item fetching failed at offset 0/2 [ 139.861614][ T4355] hid-generic: probe of 0000:0000:0000.0002 failed with error -22 [ 139.912949][ T4325] Bluetooth: hci5: ACL packet for unknown connection handle 456 [ 139.925796][ T4737] bio_check_eod: 76804 callbacks suppressed [ 139.925810][ T4737] syz.2.54: attempt to access beyond end of device [ 139.925810][ T4737] loop2: rw=0, sector=50080, nr_sectors = 8 limit=40427 [ 139.929737][ T4743] syz.4.55: attempt to access beyond end of device [ 139.929737][ T4743] loop4: rw=524288, sector=52552, nr_sectors = 8 limit=40427 [ 139.929794][ T4737] syz.2.54: attempt to access beyond end of device [ 139.929794][ T4737] loop2: rw=0, sector=50088, nr_sectors = 8 limit=40427 [ 139.933025][ T4743] syz.4.55: attempt to access beyond end of device [ 139.933025][ T4743] loop4: rw=524288, sector=52560, nr_sectors = 8 limit=40427 [ 139.935449][ T4737] syz.2.54: attempt to access beyond end of device [ 139.935449][ T4737] loop2: rw=0, sector=50096, nr_sectors = 8 limit=40427 [ 139.941080][ T4737] syz.2.54: attempt to access beyond end of device [ 139.941080][ T4737] loop2: rw=0, sector=50104, nr_sectors = 8 limit=40427 [ 139.943737][ T4737] syz.2.54: attempt to access beyond end of device [ 139.943737][ T4737] loop2: rw=0, sector=50112, nr_sectors = 8 limit=40427 [ 139.946638][ T4737] syz.2.54: attempt to access beyond end of device [ 139.946638][ T4737] loop2: rw=0, sector=50120, nr_sectors = 8 limit=40427 [ 139.949431][ T4737] syz.2.54: attempt to access beyond end of device [ 139.949431][ T4737] loop2: rw=0, sector=50128, nr_sectors = 8 limit=40427 [ 139.952031][ T4737] syz.2.54: attempt to access beyond end of device [ 139.952031][ T4737] loop2: rw=0, sector=50136, nr_sectors = 8 limit=40427 [ 140.776068][ T11] device team_slave_1 left promiscuous mode [ 140.779667][ T11] team0 (unregistering): Port device team_slave_1 removed [ 140.996021][ T11] device team_slave_0 left promiscuous mode [ 140.998432][ T11] team0 (unregistering): Port device team_slave_0 removed [ 141.187641][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.226893][ T11] device bond_slave_1 left promiscuous mode [ 144.312319][ T11] bond0 (unregistering): Released all slaves [ 144.782262][ T6163] netlink: 'syz.4.342': attribute type 6 has an invalid length. [ 145.579684][ T4743] bio_check_eod: 210806 callbacks suppressed [ 145.579699][ T4743] syz.4.55: attempt to access beyond end of device [ 145.579699][ T4743] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 145.591856][ T4737] syz.2.54: attempt to access beyond end of device [ 145.591856][ T4737] loop2: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 145.608428][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.615250][ T4737] syz.2.54: attempt to access beyond end of device [ 145.615250][ T4737] loop2: rw=524288, sector=49160, nr_sectors = 8 limit=40427 [ 145.621937][ T4743] syz.4.55: attempt to access beyond end of device [ 145.621937][ T4743] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427 [ 145.624751][ T4743] syz.4.55: attempt to access beyond end of device [ 145.624751][ T4743] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427 [ 145.665128][ T4737] syz.2.54: attempt to access beyond end of device [ 145.665128][ T4737] loop2: rw=524288, sector=49168, nr_sectors = 8 limit=40427 [ 145.668104][ T4737] syz.2.54: attempt to access beyond end of device [ 145.668104][ T4737] loop2: rw=524288, sector=49176, nr_sectors = 8 limit=40427 [ 145.670933][ T4737] syz.2.54: attempt to access beyond end of device [ 145.670933][ T4737] loop2: rw=524288, sector=49184, nr_sectors = 8 limit=40427 [ 145.673828][ T4737] syz.2.54: attempt to access beyond end of device [ 145.673828][ T4737] loop2: rw=524288, sector=49192, nr_sectors = 8 limit=40427 [ 145.682792][ T4743] syz.4.55: attempt to access beyond end of device [ 145.682792][ T4743] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427 [ 145.699518][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.701612][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.717838][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.736363][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.738821][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.740968][ T4931] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.742338][ T4931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.771698][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.773878][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.779413][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.781420][ T4931] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.782849][ T4931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.801016][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.803309][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.845012][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.874441][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.886440][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.907221][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.909652][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.924283][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.927264][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.964672][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.969432][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.988441][ T5915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.022443][ T6183] loop3: detected capacity change from 0 to 128 [ 146.056377][ T6183] hpfs: Bad magic ... probably not HPFS [ 146.392274][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.394223][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.400248][ T6165] loop1: detected capacity change from 0 to 32768 [ 146.403847][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.416218][ T6165] XFS: ikeep mount option is deprecated. [ 146.480404][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.482354][ T6165] XFS (loop1): Mounting V5 Filesystem [ 146.482536][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.538854][ T5915] device veth0_vlan entered promiscuous mode [ 146.546826][ T5915] device veth1_vlan entered promiscuous mode [ 146.566527][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.568680][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.570942][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.573258][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.575268][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.656537][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.664321][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.671263][ T6165] XFS (loop1): Ending clean mount [ 146.674746][ T6165] XFS (loop1): Quotacheck needed: Please wait. [ 146.675071][ T5915] device veth0_macvtap entered promiscuous mode [ 146.698196][ T5915] device veth1_macvtap entered promiscuous mode [ 146.716652][ T6165] XFS (loop1): Quotacheck: Done. [ 146.775580][ T6191] loop3: detected capacity change from 0 to 32768 [ 146.776398][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.783183][ T6191] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (6191) [ 146.794496][ T6191] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 146.795200][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.799704][ T6191] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 146.801576][ T6191] BTRFS info (device loop3): enabling auto defrag [ 146.807481][ T6191] BTRFS info (device loop3): doing ref verification [ 146.808916][ T6191] BTRFS info (device loop3): max_inline at 0 [ 146.810104][ T6191] BTRFS info (device loop3): force clearing of disk cache [ 146.812056][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.814287][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.815882][ T6191] BTRFS info (device loop3): turning on sync discard [ 146.822076][ T6191] BTRFS info (device loop3): disabling free space tree [ 146.845111][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.863334][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.865408][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.871420][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.892253][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.894362][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.925052][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.930022][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 146.932055][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 146.934487][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 146.944921][ T4655] XFS (loop1): Unmounting Filesystem [ 146.996804][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.009285][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.011353][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.013341][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.015349][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.023437][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.025434][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.063855][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.066410][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.078676][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.080967][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.083072][ T5915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.085247][ T5915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.105730][ T6191] BTRFS info (device loop3): enabling ssd optimizations [ 147.107988][ T6191] BTRFS info (device loop3): rebuilding free space tree [ 147.116970][ T6191] BTRFS info (device loop3): disabling free space tree [ 147.118357][ T6191] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.120421][ T6191] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.146989][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.407686][ T4568] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.571952][ T5915] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.573843][ T5915] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.619813][ T5915] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.621841][ T5915] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.624973][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.656626][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.876484][ T4931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.878395][ T4931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.947247][ T4931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.037041][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.038787][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.044176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.131533][ T6232] FAULT_INJECTION: forcing a failure. [ 148.131533][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 148.133918][ T6232] CPU: 1 PID: 6232 Comm: syz.1.351 Not tainted 6.1.113-syzkaller #0 [ 148.135493][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.137501][ T6233] loop3: detected capacity change from 0 to 256 [ 148.137599][ T6232] Call trace: [ 148.139540][ T6232] dump_backtrace+0x1c8/0x1f4 [ 148.140528][ T6232] show_stack+0x2c/0x3c [ 148.141412][ T6232] dump_stack_lvl+0x108/0x170 [ 148.142390][ T6232] dump_stack+0x1c/0x5c [ 148.143262][ T6232] should_fail_ex+0x3c0/0x51c [ 148.144274][ T6232] __should_failslab+0xc8/0x128 [ 148.145360][ T6232] should_failslab+0x10/0x28 [ 148.146365][ T6232] __kmem_cache_alloc_node+0x80/0x388 [ 148.147626][ T6232] kmalloc_trace+0x48/0x94 [ 148.148670][ T6232] rtnl_newlink+0xe8/0x1b74 [ 148.149599][ T6232] rtnetlink_rcv_msg+0x72c/0xd94 [ 148.150649][ T6232] netlink_rcv_skb+0x20c/0x3b8 [ 148.151706][ T6232] rtnetlink_rcv+0x28/0x38 [ 148.152667][ T6232] netlink_unicast+0x65c/0x898 [ 148.153689][ T6232] netlink_sendmsg+0x834/0xb18 [ 148.154778][ T6232] ____sys_sendmsg+0x55c/0x848 [ 148.155737][ T6232] __sys_sendmsg+0x26c/0x33c [ 148.156640][ T6232] __arm64_sys_sendmsg+0x80/0x94 [ 148.157613][ T6232] invoke_syscall+0x98/0x2c0 [ 148.158491][ T6232] el0_svc_common+0x138/0x258 [ 148.159425][ T6232] do_el0_svc+0x64/0x218 [ 148.160419][ T6232] el0_svc+0x58/0x168 [ 148.161292][ T6232] el0t_64_sync_handler+0x84/0xf0 [ 148.162252][ T6232] el0t_64_sync+0x18c/0x190 [ 148.225329][ T6237] FAULT_INJECTION: forcing a failure. [ 148.225329][ T6237] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.242705][ T6237] CPU: 0 PID: 6237 Comm: syz.2.352 Not tainted 6.1.113-syzkaller #0 [ 148.244508][ T6237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.246641][ T6237] Call trace: [ 148.247293][ T6237] dump_backtrace+0x1c8/0x1f4 [ 148.248276][ T6237] show_stack+0x2c/0x3c [ 148.249136][ T6237] dump_stack_lvl+0x108/0x170 [ 148.250202][ T6237] dump_stack+0x1c/0x5c [ 148.250997][ T6237] should_fail_ex+0x3c0/0x51c [ 148.252003][ T6237] should_fail_alloc_page+0x74/0xb8 [ 148.253141][ T6237] prepare_alloc_pages+0x1c0/0x508 [ 148.254332][ T6237] __alloc_pages+0x150/0x730 [ 148.255310][ T6237] __folio_alloc+0x1c/0x48 [ 148.256263][ T6237] vma_alloc_folio+0x394/0x8d8 [ 148.257336][ T6237] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 148.258733][ T6237] handle_mm_fault+0x1d9c/0x3d38 [ 148.259774][ T6237] do_page_fault+0x330/0x890 [ 148.260754][ T6237] do_translation_fault+0x94/0xc8 [ 148.261861][ T6237] do_mem_abort+0x74/0x200 [ 148.262773][ T6237] el0_da+0x70/0x184 [ 148.263634][ T6237] el0t_64_sync_handler+0xcc/0xf0 [ 148.264641][ T6237] el0t_64_sync+0x18c/0x190 [ 148.265597][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.289576][ T6237] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 149.279812][ T6238] loop0: detected capacity change from 0 to 8192 [ 149.306775][ T6238] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 149.309535][ T6238] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 149.311471][ T6238] REISERFS (device loop0): using ordered data mode [ 149.312871][ T6238] reiserfs: using flush barriers [ 149.405725][ T6238] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.409771][ T6238] REISERFS (device loop0): checking transaction log (loop0) [ 149.443872][ T6238] REISERFS (device loop0): Using r5 hash to sort names [ 149.462622][ T6236] reiserfs: enabling write barrier flush mode [ 149.474488][ T6236] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 149.524957][ T6253] netlink: 'syz.2.356': attribute type 1 has an invalid length. [ 149.532686][ T6236] netlink: 48 bytes leftover after parsing attributes in process `syz.0.301'. [ 149.731546][ T6244] loop1: detected capacity change from 0 to 32768 [ 149.877643][ T6258] FAULT_INJECTION: forcing a failure. [ 149.877643][ T6258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.880527][ T6258] CPU: 1 PID: 6258 Comm: syz.0.359 Not tainted 6.1.113-syzkaller #0 [ 149.882210][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 149.884342][ T6258] Call trace: [ 149.885021][ T6258] dump_backtrace+0x1c8/0x1f4 [ 149.885902][ T6258] show_stack+0x2c/0x3c [ 149.886853][ T6258] dump_stack_lvl+0x108/0x170 [ 149.887762][ T6258] dump_stack+0x1c/0x5c [ 149.888620][ T6258] should_fail_ex+0x3c0/0x51c [ 149.889631][ T6258] should_fail+0x14/0x24 [ 149.890603][ T6258] should_fail_usercopy+0x20/0x30 [ 149.891663][ T6258] _copy_from_iter+0x1a8/0xe4c [ 149.892642][ T6258] copy_page_from_iter+0x1f8/0x2f8 [ 149.893726][ T6258] skb_copy_datagram_from_iter+0x264/0x5b8 [ 149.894970][ T6258] tun_get_user+0x1178/0x386c [ 149.895885][ T6258] tun_chr_write_iter+0xfc/0x204 [ 149.896931][ T6258] vfs_write+0x610/0x91c [ 149.897779][ T6258] ksys_write+0x15c/0x26c [ 149.898863][ T6258] __arm64_sys_write+0x7c/0x90 [ 149.899792][ T6258] invoke_syscall+0x98/0x2c0 [ 149.900675][ T6258] el0_svc_common+0x138/0x258 [ 149.901725][ T6258] do_el0_svc+0x64/0x218 [ 149.902598][ T6258] el0_svc+0x58/0x168 [ 149.903427][ T6258] el0t_64_sync_handler+0x84/0xf0 [ 149.904510][ T6258] el0t_64_sync+0x18c/0x190 [ 149.908549][ T6244] XFS (loop1): Mounting V5 Filesystem [ 149.980321][ T6244] XFS (loop1): Ending clean mount [ 150.042626][ T6251] loop3: detected capacity change from 0 to 32768 [ 150.044474][ T6251] XFS: ikeep mount option is deprecated. [ 150.077074][ T4655] XFS (loop1): Unmounting Filesystem [ 150.152378][ T6251] XFS (loop3): Mounting V5 Filesystem [ 150.253574][ T6251] XFS (loop3): Ending clean mount [ 150.262487][ T6251] XFS (loop3): Quotacheck needed: Please wait. [ 150.285402][ T6251] XFS (loop3): Quotacheck: Done. [ 150.443244][ T4568] XFS (loop3): Unmounting Filesystem [ 150.600974][ T4737] bio_check_eod: 46955 callbacks suppressed [ 150.600991][ T4737] syz.2.54: attempt to access beyond end of device [ 150.600991][ T4737] loop2: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 150.605290][ T4737] syz.2.54: attempt to access beyond end of device [ 150.605290][ T4737] loop2: rw=524288, sector=49160, nr_sectors = 8 limit=40427 [ 150.611291][ T4737] syz.2.54: attempt to access beyond end of device [ 150.611291][ T4737] loop2: rw=524288, sector=49168, nr_sectors = 8 limit=40427 [ 150.614122][ T4737] syz.2.54: attempt to access beyond end of device [ 150.614122][ T4737] loop2: rw=524288, sector=49176, nr_sectors = 8 limit=40427 [ 150.621330][ T4737] syz.2.54: attempt to access beyond end of device [ 150.621330][ T4737] loop2: rw=524288, sector=49184, nr_sectors = 8 limit=40427 [ 150.624120][ T4737] syz.2.54: attempt to access beyond end of device [ 150.624120][ T4737] loop2: rw=524288, sector=49192, nr_sectors = 8 limit=40427 [ 150.630467][ T4737] syz.2.54: attempt to access beyond end of device [ 150.630467][ T4737] loop2: rw=524288, sector=49200, nr_sectors = 8 limit=40427 [ 150.633336][ T4737] syz.2.54: attempt to access beyond end of device [ 150.633336][ T4737] loop2: rw=524288, sector=49208, nr_sectors = 8 limit=40427 [ 150.640586][ T4737] syz.2.54: attempt to access beyond end of device [ 150.640586][ T4737] loop2: rw=524288, sector=49216, nr_sectors = 8 limit=40427 [ 150.643510][ T4737] syz.2.54: attempt to access beyond end of device [ 150.643510][ T4737] loop2: rw=524288, sector=49224, nr_sectors = 8 limit=40427 [ 151.615210][ T6290] loop0: detected capacity change from 0 to 1024 [ 151.777498][ T6297] loop3: detected capacity change from 0 to 256 [ 152.844932][ T6304] loop1: detected capacity change from 0 to 32768 [ 152.875962][ T6304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.368 (6304) [ 152.886899][ T6304] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.888876][ T6304] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 152.890689][ T6304] BTRFS info (device loop1): turning off barriers [ 152.891945][ T6304] BTRFS info (device loop1): enabling auto defrag [ 152.893305][ T6304] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.895138][ T6304] BTRFS info (device loop1): use lzo compression, level 0 [ 152.896756][ T6304] BTRFS info (device loop1): using free space tree [ 152.992556][ T6311] netlink: 168 bytes leftover after parsing attributes in process `syz.0.371'. [ 153.063726][ T6307] loop3: detected capacity change from 0 to 8192 [ 153.068964][ T6307] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.071537][ T6307] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 153.073360][ T6307] REISERFS (device loop3): using ordered data mode [ 153.074774][ T6307] reiserfs: using flush barriers [ 153.076873][ T6307] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.080147][ T6307] REISERFS (device loop3): checking transaction log (loop3) [ 153.114580][ T6307] REISERFS (device loop3): Using r5 hash to sort names [ 153.126094][ T6307] reiserfs: enabling write barrier flush mode [ 153.130006][ T6307] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 153.229443][ T6307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.370'. [ 153.540717][ T4655] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.929677][ T6337] loop3: detected capacity change from 0 to 4096 [ 153.970529][ T6329] loop0: detected capacity change from 0 to 32768 [ 153.972859][ T6329] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.372 (6329) [ 153.979082][ T6329] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.981222][ T6329] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 153.983148][ T6329] BTRFS info (device loop0): enabling auto defrag [ 153.984524][ T6329] BTRFS info (device loop0): doing ref verification [ 153.995761][ T6329] BTRFS info (device loop0): max_inline at 0 [ 153.997097][ T6329] BTRFS info (device loop0): force clearing of disk cache [ 154.001613][ T6329] BTRFS info (device loop0): turning on sync discard [ 154.003038][ T6329] BTRFS info (device loop0): disabling free space tree [ 155.007377][ T6329] BTRFS info (device loop0): enabling ssd optimizations [ 155.009815][ T6329] BTRFS info (device loop0): rebuilding free space tree [ 155.021407][ T6329] BTRFS info (device loop0): disabling free space tree [ 155.023054][ T6329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.059892][ T6329] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.121974][ T6367] loop1: detected capacity change from 0 to 256 [ 155.169098][ T6369] FAULT_INJECTION: forcing a failure. [ 155.169098][ T6369] name failslab, interval 1, probability 0, space 0, times 0 [ 155.174758][ T6369] CPU: 0 PID: 6369 Comm: syz.3.381 Not tainted 6.1.113-syzkaller #0 [ 155.176401][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.178616][ T6369] Call trace: [ 155.179478][ T6369] dump_backtrace+0x1c8/0x1f4 [ 155.180532][ T6369] show_stack+0x2c/0x3c [ 155.181377][ T6369] dump_stack_lvl+0x108/0x170 [ 155.182347][ T6369] dump_stack+0x1c/0x5c [ 155.183259][ T6369] should_fail_ex+0x3c0/0x51c [ 155.184257][ T6369] __should_failslab+0xc8/0x128 [ 155.185241][ T6369] should_failslab+0x10/0x28 [ 155.186307][ T6369] __kmem_cache_alloc_node+0x80/0x388 [ 155.187465][ T6369] kmalloc_trace+0x48/0x94 [ 155.188319][ T6369] rtnl_newlink+0xe8/0x1b74 [ 155.189281][ T6369] rtnetlink_rcv_msg+0x72c/0xd94 [ 155.190311][ T6369] netlink_rcv_skb+0x20c/0x3b8 [ 155.191311][ T6369] rtnetlink_rcv+0x28/0x38 [ 155.192220][ T6369] netlink_unicast+0x65c/0x898 [ 155.193348][ T6369] netlink_sendmsg+0x834/0xb18 [ 155.194427][ T6369] ____sys_sendmsg+0x55c/0x848 [ 155.195554][ T6369] __sys_sendmsg+0x26c/0x33c [ 155.196566][ T6369] __arm64_sys_sendmsg+0x80/0x94 [ 155.197587][ T6369] invoke_syscall+0x98/0x2c0 [ 155.198478][ T6369] el0_svc_common+0x138/0x258 [ 155.199558][ T6369] do_el0_svc+0x64/0x218 [ 155.200501][ T6369] el0_svc+0x58/0x168 [ 155.201298][ T6369] el0t_64_sync_handler+0x84/0xf0 [ 155.202361][ T6369] el0t_64_sync+0x18c/0x190 [ 155.203433][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.294593][ T6371] FAULT_INJECTION: forcing a failure. [ 155.294593][ T6371] name failslab, interval 1, probability 0, space 0, times 0 [ 155.298801][ T6371] CPU: 0 PID: 6371 Comm: syz.1.382 Not tainted 6.1.113-syzkaller #0 [ 155.300470][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.302482][ T6371] Call trace: [ 155.303206][ T6371] dump_backtrace+0x1c8/0x1f4 [ 155.304157][ T6371] show_stack+0x2c/0x3c [ 155.304977][ T6371] dump_stack_lvl+0x108/0x170 [ 155.305915][ T6371] dump_stack+0x1c/0x5c [ 155.306813][ T6371] should_fail_ex+0x3c0/0x51c [ 155.307748][ T6371] __should_failslab+0xc8/0x128 [ 155.308806][ T6371] should_failslab+0x10/0x28 [ 155.309753][ T6371] kmem_cache_alloc+0x8c/0x37c [ 155.310772][ T6371] pte_alloc_one+0x78/0x258 [ 155.311612][ T6371] __pte_alloc+0x84/0x144 [ 155.312568][ T6371] handle_mm_fault+0x3078/0x3d38 [ 155.313665][ T6371] do_page_fault+0x330/0x890 [ 155.314699][ T6371] do_translation_fault+0x94/0xc8 [ 155.315777][ T6371] do_mem_abort+0x74/0x200 [ 155.316700][ T6371] el1_abort+0x3c/0x5c [ 155.317560][ T6371] el1h_64_sync_handler+0x60/0xac [ 155.318721][ T6371] el1h_64_sync+0x64/0x68 [ 155.319543][ T6371] __arch_copy_to_user+0x104/0x234 [ 155.320521][ T6371] sock_do_ioctl+0x134/0x2dc [ 155.321532][ T6371] sock_ioctl+0x4ec/0x858 [ 155.322390][ T6371] __arm64_sys_ioctl+0x14c/0x1c8 [ 155.323430][ T6371] invoke_syscall+0x98/0x2c0 [ 155.324455][ T6371] el0_svc_common+0x138/0x258 [ 155.325491][ T6371] do_el0_svc+0x64/0x218 [ 155.326438][ T6371] el0_svc+0x58/0x168 [ 155.327322][ T6371] el0t_64_sync_handler+0x84/0xf0 [ 155.328438][ T6371] el0t_64_sync+0x18c/0x190 [ 155.329495][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.332025][ T5915] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.621238][ T4737] bio_check_eod: 32677 callbacks suppressed [ 155.621253][ T4737] syz.2.54: attempt to access beyond end of device [ 155.621253][ T4737] loop2: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 155.623389][ T4743] syz.4.55: attempt to access beyond end of device [ 155.623389][ T4743] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 155.625519][ T4737] syz.2.54: attempt to access beyond end of device [ 155.625519][ T4737] loop2: rw=524288, sector=49160, nr_sectors = 8 limit=40427 [ 155.661265][ T4737] syz.2.54: attempt to access beyond end of device [ 155.661265][ T4737] loop2: rw=524288, sector=49168, nr_sectors = 8 limit=40427 [ 155.675309][ T4737] syz.2.54: attempt to access beyond end of device [ 155.675309][ T4737] loop2: rw=524288, sector=49176, nr_sectors = 8 limit=40427 [ 155.678582][ T4743] syz.4.55: attempt to access beyond end of device [ 155.678582][ T4743] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427 [ 155.681463][ T4743] syz.4.55: attempt to access beyond end of device [ 155.681463][ T4743] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427 [ 155.684228][ T4743] syz.4.55: attempt to access beyond end of device [ 155.684228][ T4743] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427 [ 155.685433][ T4737] syz.2.54: attempt to access beyond end of device [ 155.685433][ T4737] loop2: rw=524288, sector=49184, nr_sectors = 8 limit=40427 [ 155.689679][ T4737] syz.2.54: attempt to access beyond end of device [ 155.689679][ T4737] loop2: rw=524288, sector=49192, nr_sectors = 8 limit=40427 [ 155.737416][ T6375] loop1: detected capacity change from 0 to 8192 [ 155.773630][ T6375] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.778074][ T6375] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 155.797147][ T6375] REISERFS (device loop1): using ordered data mode [ 155.798528][ T6375] reiserfs: using flush barriers [ 155.813326][ T6375] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.840490][ T6375] REISERFS (device loop1): checking transaction log (loop1) [ 155.854453][ T6375] REISERFS (device loop1): Using r5 hash to sort names [ 155.901206][ T6375] reiserfs: enabling write barrier flush mode [ 155.930069][ T6374] loop3: detected capacity change from 0 to 32768 [ 155.935303][ T6375] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 155.938617][ T6374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.385 (6374) [ 155.968480][ T6374] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.970763][ T6374] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 155.976105][ T6374] BTRFS info (device loop3): setting nodatacow, compression disabled [ 155.977888][ T6374] BTRFS info (device loop3): turning on flush-on-commit [ 155.983665][ T6374] BTRFS info (device loop3): enabling auto defrag [ 155.985105][ T6374] BTRFS info (device loop3): max_inline at 0 [ 155.989662][ T6374] BTRFS info (device loop3): using free space tree [ 156.020004][ T6375] netlink: 48 bytes leftover after parsing attributes in process `syz.1.384'. [ 156.972798][ T6374] BTRFS info (device loop3): enabling ssd optimizations [ 157.193594][ T6412] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.391' sets config #4095 [ 157.604728][ T4568] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.630161][ T6416] loop0: detected capacity change from 0 to 32768 [ 157.683278][ T6416] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.393 (6416) [ 157.772115][ T6416] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.787113][ T6416] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 157.788913][ T6416] BTRFS info (device loop0): enabling auto defrag [ 157.790323][ T6416] BTRFS info (device loop0): doing ref verification [ 157.866658][ T6416] BTRFS info (device loop0): max_inline at 0 [ 157.868072][ T6416] BTRFS info (device loop0): force clearing of disk cache [ 157.869769][ T6416] BTRFS info (device loop0): turning on sync discard [ 157.871348][ T6416] BTRFS info (device loop0): disabling free space tree [ 158.470927][ T6437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'. [ 158.592492][ T6416] BTRFS info (device loop0): enabling ssd optimizations [ 158.595016][ T6416] BTRFS info (device loop0): rebuilding free space tree [ 158.607736][ T6416] BTRFS info (device loop0): disabling free space tree [ 158.609195][ T6416] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 158.611167][ T6416] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 158.745840][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 159.047746][ T4303] Bluetooth: hci2: command 0x0406 tx timeout [ 159.560990][ T5915] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.799500][ T6473] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 160.152479][ T6478] device veth1_to_team entered promiscuous mode [ 160.605741][ T6471] device veth1_to_team left promiscuous mode [ 160.647513][ T4743] bio_check_eod: 19716 callbacks suppressed [ 160.648496][ T4743] syz.4.55: attempt to access beyond end of device [ 160.648496][ T4743] loop4: rw=524288, sector=51696, nr_sectors = 8 limit=40427 [ 161.240086][ T4737] syz.2.54: attempt to access beyond end of device [ 161.240086][ T4737] loop2: rw=0, sector=53160, nr_sectors = 8 limit=40427 [ 161.242868][ T4737] syz.2.54: attempt to access beyond end of device [ 161.242868][ T4737] loop2: rw=0, sector=53168, nr_sectors = 8 limit=40427 [ 161.255879][ T4737] syz.2.54: attempt to access beyond end of device [ 161.255879][ T4737] loop2: rw=0, sector=53176, nr_sectors = 8 limit=40427 [ 161.285826][ T4743] syz.4.55: attempt to access beyond end of device [ 161.285826][ T4743] loop4: rw=524288, sector=51704, nr_sectors = 8 limit=40427 [ 161.288678][ T4743] syz.4.55: attempt to access beyond end of device [ 161.288678][ T4743] loop4: rw=524288, sector=51712, nr_sectors = 8 limit=40427 [ 161.291350][ T4743] syz.4.55: attempt to access beyond end of device [ 161.291350][ T4743] loop4: rw=524288, sector=51720, nr_sectors = 8 limit=40427 [ 161.324795][ T4737] syz.2.54: attempt to access beyond end of device [ 161.324795][ T4737] loop2: rw=0, sector=53184, nr_sectors = 8 limit=40427 [ 161.343044][ T4737] syz.2.54: attempt to access beyond end of device [ 161.343044][ T4737] loop2: rw=0, sector=53192, nr_sectors = 8 limit=40427 [ 161.354461][ T4743] syz.4.55: attempt to access beyond end of device [ 161.354461][ T4743] loop4: rw=524288, sector=51728, nr_sectors = 8 limit=40427 [ 161.534008][ T6482] loop1: detected capacity change from 0 to 2048 [ 162.316152][ T6482] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 162.517960][ T6482] EXT4-fs (loop1): unmounting filesystem. [ 162.631361][ T6473] loop0: detected capacity change from 0 to 32768 [ 162.646280][ T6473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.403 (6473) [ 162.669028][ T6473] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.671011][ T6473] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 162.672695][ T6473] BTRFS info (device loop0): turning off barriers [ 162.673877][ T6473] BTRFS info (device loop0): force clearing of disk cache [ 162.675175][ T6473] BTRFS info (device loop0): doing ref verification [ 162.685701][ T6473] BTRFS info (device loop0): using free space tree [ 162.856717][ T6473] BTRFS error (device loop0): open_ctree failed [ 162.938008][ T6461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6461) [ 163.458499][ T6527] loop1: detected capacity change from 0 to 256 [ 164.277095][ T6556] loop3: detected capacity change from 0 to 256 [ 164.494582][ T6560] loop3: detected capacity change from 0 to 1024 [ 164.496573][ T6560] ext4: Unknown parameter 'nouser_xattr' [ 164.560934][ T6563] loop0: detected capacity change from 0 to 512 [ 164.615925][ T6563] EXT2-fs (loop0): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 164.618333][ T6563] EXT2-fs (loop0): error: bad blocksize 65536 [ 165.656428][ T4743] bio_check_eod: 43253 callbacks suppressed [ 165.656443][ T4743] syz.4.55: attempt to access beyond end of device [ 165.656443][ T4743] loop4: rw=0, sector=53008, nr_sectors = 8 limit=40427 [ 165.660331][ T4743] syz.4.55: attempt to access beyond end of device [ 165.660331][ T4743] loop4: rw=0, sector=53016, nr_sectors = 8 limit=40427 [ 165.663358][ T4743] syz.4.55: attempt to access beyond end of device [ 165.663358][ T4743] loop4: rw=0, sector=53024, nr_sectors = 8 limit=40427 [ 165.674854][ T4737] syz.2.54: attempt to access beyond end of device [ 165.674854][ T4737] loop2: rw=0, sector=51176, nr_sectors = 8 limit=40427 [ 165.681575][ T4737] syz.2.54: attempt to access beyond end of device [ 165.681575][ T4737] loop2: rw=0, sector=51184, nr_sectors = 8 limit=40427 [ 165.684490][ T4743] syz.4.55: attempt to access beyond end of device [ 165.684490][ T4743] loop4: rw=0, sector=53032, nr_sectors = 8 limit=40427 [ 165.689104][ T4743] syz.4.55: attempt to access beyond end of device [ 165.689104][ T4743] loop4: rw=0, sector=53040, nr_sectors = 8 limit=40427 [ 165.692279][ T4737] syz.2.54: attempt to access beyond end of device [ 165.692279][ T4737] loop2: rw=0, sector=51192, nr_sectors = 8 limit=40427 [ 165.695236][ T4743] syz.4.55: attempt to access beyond end of device [ 165.695236][ T4743] loop4: rw=0, sector=53048, nr_sectors = 8 limit=40427 [ 165.703016][ T4737] syz.2.54: attempt to access beyond end of device [ 165.703016][ T4737] loop2: rw=0, sector=51200, nr_sectors = 8 limit=40427 [ 165.992839][ T6586] loop1: detected capacity change from 0 to 256 [ 166.114812][ T6588] FAULT_INJECTION: forcing a failure. [ 166.114812][ T6588] name failslab, interval 1, probability 0, space 0, times 0 [ 166.117354][ T6588] CPU: 0 PID: 6588 Comm: syz.1.441 Not tainted 6.1.113-syzkaller #0 [ 166.119009][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.121115][ T6588] Call trace: [ 166.121772][ T6588] dump_backtrace+0x1c8/0x1f4 [ 166.122745][ T6588] show_stack+0x2c/0x3c [ 166.123629][ T6588] dump_stack_lvl+0x108/0x170 [ 166.124602][ T6588] dump_stack+0x1c/0x5c [ 166.125410][ T6588] should_fail_ex+0x3c0/0x51c [ 166.126380][ T6588] __should_failslab+0xc8/0x128 [ 166.127453][ T6588] should_failslab+0x10/0x28 [ 166.128549][ T6588] __kmem_cache_alloc_node+0x80/0x388 [ 166.129714][ T6588] __kmalloc+0xc4/0x1c4 [ 166.130570][ T6588] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 166.131913][ T6588] genl_rcv_msg+0x664/0xc2c [ 166.132822][ T6588] netlink_rcv_skb+0x20c/0x3b8 [ 166.133807][ T6588] genl_rcv+0x38/0x50 [ 166.134577][ T6588] netlink_unicast+0x65c/0x898 [ 166.135665][ T6588] netlink_sendmsg+0x834/0xb18 [ 166.136700][ T6588] ____sys_sendmsg+0x55c/0x848 [ 166.137778][ T6588] __sys_sendmsg+0x26c/0x33c [ 166.138673][ T6588] __arm64_sys_sendmsg+0x80/0x94 [ 166.139674][ T6588] invoke_syscall+0x98/0x2c0 [ 166.140664][ T6588] el0_svc_common+0x138/0x258 [ 166.141670][ T6588] do_el0_svc+0x64/0x218 [ 166.142639][ T6588] el0_svc+0x58/0x168 [ 166.143488][ T6588] el0t_64_sync_handler+0x84/0xf0 [ 166.144491][ T6588] el0t_64_sync+0x18c/0x190 [ 166.145509][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.283220][ T6590] loop1: detected capacity change from 0 to 2048 [ 166.343021][ T6590] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.320069][ T6605] tipc: Trying to set illegal importance in message [ 167.458423][ T6608] binder: 6607:6608 tried to acquire reference to desc 0, got 1 instead [ 167.472569][ T6608] binder: 6607:6608 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 167.484959][ T6608] binder: 6608 RLIMIT_NICE not set [ 167.490707][ T6608] binder: undelivered transaction 11, fd fixups failed [ 167.494438][ T6608] binder: transaction release 11 bad handle 1, ret = -22 [ 167.498654][ T6608] binder: 6607:6608 async transaction 11 fd fixups failed 29201/-12, line 4675 [ 167.503782][ T4355] binder: undelivered TRANSACTION_COMPLETE [ 167.693899][ T6613] loop1: detected capacity change from 0 to 256 [ 167.719778][ T6615] FAULT_INJECTION: forcing a failure. [ 167.719778][ T6615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.723605][ T6615] CPU: 0 PID: 6615 Comm: syz.0.452 Not tainted 6.1.113-syzkaller #0 [ 167.725144][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.727229][ T6615] Call trace: [ 167.727929][ T6615] dump_backtrace+0x1c8/0x1f4 [ 167.728862][ T6615] show_stack+0x2c/0x3c [ 167.729851][ T6615] dump_stack_lvl+0x108/0x170 [ 167.730879][ T6615] dump_stack+0x1c/0x5c [ 167.731784][ T6615] should_fail_ex+0x3c0/0x51c [ 167.732739][ T6615] should_fail+0x14/0x24 [ 167.733491][ T6615] should_fail_usercopy+0x20/0x30 [ 167.734502][ T6615] simple_read_from_buffer+0xd4/0x248 [ 167.735598][ T6615] proc_fail_nth_read+0x198/0x234 [ 167.736544][ T6615] vfs_read+0x280/0x8b4 [ 167.737010][ T6618] netlink: 'syz.3.453': attribute type 21 has an invalid length. [ 167.737275][ T6615] ksys_read+0x15c/0x26c [ 167.738957][ T6618] netlink: 128 bytes leftover after parsing attributes in process `syz.3.453'. [ 167.739783][ T6615] __arm64_sys_read+0x7c/0x90 [ 167.741640][ T6618] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 167.742493][ T6615] invoke_syscall+0x98/0x2c0 [ 167.744029][ T6618] netlink: 3 bytes leftover after parsing attributes in process `syz.3.453'. [ 167.744998][ T6615] el0_svc_common+0x138/0x258 [ 167.745017][ T6615] do_el0_svc+0x64/0x218 [ 167.745029][ T6615] el0_svc+0x58/0x168 [ 167.745040][ T6615] el0t_64_sync_handler+0x84/0xf0 [ 167.750648][ T6615] el0t_64_sync+0x18c/0x190 [ 167.751656][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.136954][ T6633] loop3: detected capacity change from 0 to 128 [ 168.182329][ T6633] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 168.879396][ T6652] binder: 6650:6652 tried to acquire reference to desc 0, got 1 instead [ 168.892566][ T3420] binder: release 6650:6652 transaction 17 out, still active [ 168.894356][ T3420] binder: undelivered TRANSACTION_COMPLETE [ 168.909214][ T6649] FAULT_INJECTION: forcing a failure. [ 168.909214][ T6649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.946608][ T6649] CPU: 1 PID: 6649 Comm: syz.4.465 Not tainted 6.1.113-syzkaller #0 [ 168.948167][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.950229][ T6649] Call trace: [ 168.950943][ T6649] dump_backtrace+0x1c8/0x1f4 [ 168.951922][ T6649] show_stack+0x2c/0x3c [ 168.952705][ T6649] dump_stack_lvl+0x108/0x170 [ 168.953701][ T6649] dump_stack+0x1c/0x5c [ 168.954528][ T6649] should_fail_ex+0x3c0/0x51c [ 168.955454][ T6649] should_fail+0x14/0x24 [ 168.956441][ T6649] should_fail_usercopy+0x20/0x30 [ 168.957514][ T6649] kstrtouint_from_user+0xd0/0x280 [ 168.958523][ T6649] proc_fail_nth_write+0xa8/0x274 [ 168.959621][ T6649] vfs_write+0x2a4/0x91c [ 168.960619][ T6649] ksys_write+0x15c/0x26c [ 168.961627][ T6649] __arm64_sys_write+0x7c/0x90 [ 168.962639][ T6649] invoke_syscall+0x98/0x2c0 [ 168.963550][ T6649] el0_svc_common+0x138/0x258 [ 168.964592][ T6649] do_el0_svc+0x64/0x218 [ 168.965550][ T6649] el0_svc+0x58/0x168 [ 168.966434][ T6649] el0t_64_sync_handler+0x84/0xf0 [ 168.967557][ T6649] el0t_64_sync+0x18c/0x190 [ 168.969318][ T4303] Bluetooth: hci3: command 0x0406 tx timeout [ 168.972218][ T3420] binder: send failed reply for transaction 17, target dead [ 169.575414][ T6665] binder: 6664:6665 tried to acquire reference to desc 0, got 1 instead [ 169.593756][ T6665] FAULT_INJECTION: forcing a failure. [ 169.593756][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.617607][ T6665] CPU: 1 PID: 6665 Comm: syz.2.471 Not tainted 6.1.113-syzkaller #0 [ 169.619245][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.621337][ T6665] Call trace: [ 169.622018][ T6665] dump_backtrace+0x1c8/0x1f4 [ 169.622915][ T6665] show_stack+0x2c/0x3c [ 169.623866][ T6665] dump_stack_lvl+0x108/0x170 [ 169.624804][ T6665] dump_stack+0x1c/0x5c [ 169.625593][ T6665] should_fail_ex+0x3c0/0x51c [ 169.626524][ T6665] should_fail+0x14/0x24 [ 169.627470][ T6665] should_fail_usercopy+0x20/0x30 [ 169.628515][ T6665] binder_ioctl_write_read+0x148/0x9900 [ 169.629598][ T6665] binder_ioctl+0x41c/0x2730 [ 169.630593][ T6665] __arm64_sys_ioctl+0x14c/0x1c8 [ 169.631581][ T6665] invoke_syscall+0x98/0x2c0 [ 169.632595][ T6665] el0_svc_common+0x138/0x258 [ 169.633590][ T6665] do_el0_svc+0x64/0x218 [ 169.634460][ T6665] el0_svc+0x58/0x168 [ 169.635258][ T6665] el0t_64_sync_handler+0x84/0xf0 [ 169.636424][ T6665] el0t_64_sync+0x18c/0x190 [ 169.691828][ T6653] loop1: detected capacity change from 0 to 32768 [ 169.707846][ T6665] binder: 6664:6665 ioctl c0306201 20000540 returned -14 [ 169.718071][ T6653] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.720176][ T7] binder: release 6664:6665 transaction 22 out, still active [ 169.720228][ T7] binder: undelivered TRANSACTION_COMPLETE [ 169.726078][ T6653] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 169.731141][ T6653] BTRFS info (device loop1): doing ref verification [ 169.737908][ T6653] BTRFS info (device loop1): setting nodatacow, compression disabled [ 169.742925][ T6653] BTRFS error (device loop1): unrecognized mount option 'fragment=data' [ 169.752808][ T6653] BTRFS error (device loop1): open_ctree failed [ 169.774422][ T6461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (6461) [ 169.822690][ T4331] binder: send failed reply for transaction 22, target dead [ 169.928094][ T6674] openvswitch: netlink: Missing key (keys=40, expected=80) [ 170.040408][ T6676] loop0: detected capacity change from 0 to 64 [ 170.471930][ T6692] loop0: detected capacity change from 0 to 256 [ 170.666957][ T4737] bio_check_eod: 62009 callbacks suppressed [ 170.666972][ T4737] syz.2.54: attempt to access beyond end of device [ 170.666972][ T4737] loop2: rw=0, sector=51072, nr_sectors = 8 limit=40427 [ 170.667029][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667029][ T4737] loop2: rw=0, sector=51080, nr_sectors = 8 limit=40427 [ 170.667071][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667071][ T4737] loop2: rw=0, sector=51088, nr_sectors = 8 limit=40427 [ 170.667112][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667112][ T4737] loop2: rw=0, sector=51096, nr_sectors = 8 limit=40427 [ 170.667153][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667153][ T4737] loop2: rw=0, sector=51104, nr_sectors = 8 limit=40427 [ 170.667194][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667194][ T4737] loop2: rw=0, sector=51112, nr_sectors = 8 limit=40427 [ 170.667235][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667235][ T4737] loop2: rw=0, sector=51120, nr_sectors = 8 limit=40427 [ 170.667276][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667276][ T4737] loop2: rw=0, sector=51128, nr_sectors = 8 limit=40427 [ 170.667316][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667316][ T4737] loop2: rw=0, sector=51136, nr_sectors = 8 limit=40427 [ 170.667357][ T4737] syz.2.54: attempt to access beyond end of device [ 170.667357][ T4737] loop2: rw=0, sector=51144, nr_sectors = 8 limit=40427 [ 170.856405][ T4568] EXT4-fs (loop3): unmounting filesystem. [ 171.050056][ T6703] loop0: detected capacity change from 0 to 512 [ 171.139495][ T6703] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 171.158801][ T6710] FAULT_INJECTION: forcing a failure. [ 171.158801][ T6710] name failslab, interval 1, probability 0, space 0, times 0 [ 171.161664][ T6710] CPU: 0 PID: 6710 Comm: syz.3.485 Not tainted 6.1.113-syzkaller #0 [ 171.163383][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.165605][ T6710] Call trace: [ 171.166341][ T6710] dump_backtrace+0x1c8/0x1f4 [ 171.167362][ T6710] show_stack+0x2c/0x3c [ 171.168232][ T6710] dump_stack_lvl+0x108/0x170 [ 171.169280][ T6710] dump_stack+0x1c/0x5c [ 171.170201][ T6710] should_fail_ex+0x3c0/0x51c [ 171.171254][ T6710] __should_failslab+0xc8/0x128 [ 171.172309][ T6710] should_failslab+0x10/0x28 [ 171.173301][ T6710] __kmem_cache_alloc_node+0x80/0x388 [ 171.174575][ T6710] __kmalloc+0xc4/0x1c4 [ 171.175565][ T6710] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 171.176900][ T6710] genl_rcv_msg+0x664/0xc2c [ 171.177930][ T6710] netlink_rcv_skb+0x20c/0x3b8 [ 171.178489][ T6678] loop1: detected capacity change from 0 to 32768 [ 171.178883][ T6710] genl_rcv+0x38/0x50 [ 171.180595][ T6678] xfs: Unknown parameter 'fsmagic' [ 171.180970][ T6710] netlink_unicast+0x65c/0x898 [ 171.183205][ T6710] netlink_sendmsg+0x834/0xb18 [ 171.184265][ T6710] ____sys_sendmsg+0x55c/0x848 [ 171.185257][ T6710] __sys_sendmsg+0x26c/0x33c [ 171.186257][ T6710] __arm64_sys_sendmsg+0x80/0x94 [ 171.187399][ T6710] invoke_syscall+0x98/0x2c0 [ 171.188336][ T6710] el0_svc_common+0x138/0x258 [ 171.189349][ T6710] do_el0_svc+0x64/0x218 [ 171.190273][ T6710] el0_svc+0x58/0x168 [ 171.191272][ T6710] el0t_64_sync_handler+0x84/0xf0 [ 171.192362][ T6710] el0t_64_sync+0x18c/0x190 [ 171.244711][ T5915] EXT4-fs (loop0): unmounting filesystem. [ 171.360185][ T6719] FAULT_INJECTION: forcing a failure. [ 171.360185][ T6719] name failslab, interval 1, probability 0, space 0, times 0 [ 171.362835][ T6719] CPU: 0 PID: 6719 Comm: syz.0.487 Not tainted 6.1.113-syzkaller #0 [ 171.364539][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.366594][ T6719] Call trace: [ 171.366685][ T6718] FAULT_INJECTION: forcing a failure. [ 171.366685][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 171.367279][ T6719] dump_backtrace+0x1c8/0x1f4 [ 171.370835][ T6719] show_stack+0x2c/0x3c [ 171.371670][ T6719] dump_stack_lvl+0x108/0x170 [ 171.372612][ T6719] dump_stack+0x1c/0x5c [ 171.373474][ T6719] should_fail_ex+0x3c0/0x51c [ 171.374418][ T6719] __should_failslab+0xc8/0x128 [ 171.375565][ T6719] should_failslab+0x10/0x28 [ 171.376605][ T6719] __kmem_cache_alloc_node+0x80/0x388 [ 171.377725][ T6719] __kmalloc+0xc4/0x1c4 [ 171.378692][ T6719] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 171.380013][ T6719] genl_rcv_msg+0x664/0xc2c [ 171.380905][ T6719] netlink_rcv_skb+0x20c/0x3b8 [ 171.381817][ T6719] genl_rcv+0x38/0x50 [ 171.382660][ T6719] netlink_unicast+0x65c/0x898 [ 171.383655][ T6719] netlink_sendmsg+0x834/0xb18 [ 171.384692][ T6719] ____sys_sendmsg+0x55c/0x848 [ 171.385705][ T6719] __sys_sendmsg+0x26c/0x33c [ 171.386627][ T6719] __arm64_sys_sendmsg+0x80/0x94 [ 171.387615][ T6719] invoke_syscall+0x98/0x2c0 [ 171.388547][ T6719] el0_svc_common+0x138/0x258 [ 171.389483][ T6719] do_el0_svc+0x64/0x218 [ 171.390360][ T6719] el0_svc+0x58/0x168 [ 171.391174][ T6719] el0t_64_sync_handler+0x84/0xf0 [ 171.392174][ T6719] el0t_64_sync+0x18c/0x190 [ 171.393171][ T6718] CPU: 1 PID: 6718 Comm: syz.3.488 Not tainted 6.1.113-syzkaller #0 [ 171.394880][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.396921][ T6718] Call trace: [ 171.397558][ T6718] dump_backtrace+0x1c8/0x1f4 [ 171.398532][ T6718] show_stack+0x2c/0x3c [ 171.399488][ T6718] dump_stack_lvl+0x108/0x170 [ 171.400410][ T6718] dump_stack+0x1c/0x5c [ 171.401258][ T6718] should_fail_ex+0x3c0/0x51c [ 171.402258][ T6718] __should_failslab+0xc8/0x128 [ 171.403214][ T6718] should_failslab+0x10/0x28 [ 171.404111][ T6718] kmem_cache_alloc+0x8c/0x37c [ 171.405067][ T6718] skb_clone+0x19c/0x304 [ 171.406034][ T6718] __netlink_deliver_tap+0x364/0x6e4 [ 171.407200][ T6718] netlink_deliver_tap+0x1ac/0x1b0 [ 171.408295][ T6718] netlink_unicast+0x640/0x898 [ 171.409375][ T6718] netlink_sendmsg+0x834/0xb18 [ 171.410325][ T6718] ____sys_sendmsg+0x55c/0x848 [ 171.411351][ T6718] __sys_sendmsg+0x26c/0x33c [ 171.412248][ T6718] __arm64_sys_sendmsg+0x80/0x94 [ 171.413228][ T6718] invoke_syscall+0x98/0x2c0 [ 171.414183][ T6718] el0_svc_common+0x138/0x258 [ 171.415099][ T6718] do_el0_svc+0x64/0x218 [ 171.415977][ T6718] el0_svc+0x58/0x168 [ 171.416834][ T6718] el0t_64_sync_handler+0x84/0xf0 [ 171.417819][ T6718] el0t_64_sync+0x18c/0x190 [ 171.564103][ T6723] loop3: detected capacity change from 0 to 64 [ 171.703120][ T6727] loop0: detected capacity change from 0 to 128 [ 171.712309][ T6727] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 171.890678][ T6723] binder: 6722:6723 BC_FREE_BUFFER u0000000020ffd000 no match [ 172.543988][ T6748] openvswitch: netlink: Missing key (keys=40, expected=80) [ 173.186089][ T6765] loop1: detected capacity change from 0 to 256 [ 173.651819][ T6766] loop3: detected capacity change from 0 to 32768 [ 173.694053][ T6766] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.722283][ T6766] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 173.724035][ T6766] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 173.755862][ T6766] BTRFS info (device loop3): use lzo compression, level 0 [ 173.759720][ T6766] BTRFS info (device loop3): turning off barriers [ 173.761162][ T6766] BTRFS info (device loop3): doing ref verification [ 173.762465][ T6766] BTRFS info (device loop3): enabling disk space caching [ 173.763969][ T6766] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 173.769443][ T6766] BTRFS error (device loop3): cannot disable free space tree [ 173.772148][ T6766] BTRFS error (device loop3): open_ctree failed [ 174.081584][ T5915] EXT4-fs (loop0): unmounting filesystem. [ 174.096433][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 174.232061][ T6785] netlink: 'syz.4.497': attribute type 5 has an invalid length. [ 174.563020][ T6797] loop1: detected capacity change from 0 to 2048 [ 174.648781][ T6806] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.723985][ T6808] FAULT_INJECTION: forcing a failure. [ 174.723985][ T6808] name failslab, interval 1, probability 0, space 0, times 0 [ 174.762116][ T6808] CPU: 1 PID: 6808 Comm: syz.2.516 Not tainted 6.1.113-syzkaller #0 [ 174.763725][ T6808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 174.765912][ T6808] Call trace: [ 174.766686][ T6808] dump_backtrace+0x1c8/0x1f4 [ 174.767624][ T6808] show_stack+0x2c/0x3c [ 174.768418][ T6808] dump_stack_lvl+0x108/0x170 [ 174.769348][ T6808] dump_stack+0x1c/0x5c [ 174.770266][ T6808] should_fail_ex+0x3c0/0x51c [ 174.771170][ T6808] __should_failslab+0xc8/0x128 [ 174.772166][ T6808] should_failslab+0x10/0x28 [ 174.773162][ T6808] __kmem_cache_alloc_node+0x80/0x388 [ 174.774301][ T6808] __kmalloc_node+0xcc/0x1d0 [ 174.775324][ T6808] memcg_alloc_slab_cgroups+0x90/0x164 [ 174.776456][ T6808] slab_post_alloc_hook+0xc8/0x458 [ 174.777580][ T6808] kmem_cache_alloc_lru+0x1ac/0x2f8 [ 174.778658][ T6808] __d_alloc+0x40/0x6ac [ 174.779571][ T6808] d_alloc_pseudo+0x28/0x8c [ 174.780481][ T6808] alloc_file_pseudo+0x110/0x278 [ 174.781495][ T6808] __shmem_file_setup+0x19c/0x26c [ 174.782428][ T6808] shmem_file_setup+0x40/0x54 [ 174.783348][ T6808] __arm64_sys_memfd_create+0x2d8/0x530 [ 174.784555][ T6808] invoke_syscall+0x98/0x2c0 [ 174.785420][ T6808] el0_svc_common+0x138/0x258 [ 174.786434][ T6808] do_el0_svc+0x64/0x218 [ 174.787301][ T6808] el0_svc+0x58/0x168 [ 174.788214][ T6808] el0t_64_sync_handler+0x84/0xf0 [ 174.789342][ T6808] el0t_64_sync+0x18c/0x190 [ 175.173911][ T6825] loop1: detected capacity change from 0 to 128 [ 175.179875][ T6832] FAULT_INJECTION: forcing a failure. [ 175.179875][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 175.194718][ T6832] CPU: 1 PID: 6832 Comm: syz.2.522 Not tainted 6.1.113-syzkaller #0 [ 175.196375][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.198502][ T6832] Call trace: [ 175.199199][ T6832] dump_backtrace+0x1c8/0x1f4 [ 175.200226][ T6832] show_stack+0x2c/0x3c [ 175.201067][ T6832] dump_stack_lvl+0x108/0x170 [ 175.201988][ T6832] dump_stack+0x1c/0x5c [ 175.202826][ T6832] should_fail_ex+0x3c0/0x51c [ 175.203830][ T6832] __should_failslab+0xc8/0x128 [ 175.204837][ T6832] should_failslab+0x10/0x28 [ 175.205731][ T6832] __kmem_cache_alloc_node+0x80/0x388 [ 175.206791][ T6832] __kmalloc+0xc4/0x1c4 [ 175.207617][ T6832] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 175.208912][ T6832] genl_rcv_msg+0x664/0xc2c [ 175.209831][ T6832] netlink_rcv_skb+0x20c/0x3b8 [ 175.210825][ T6832] genl_rcv+0x38/0x50 [ 175.211667][ T6832] netlink_unicast+0x65c/0x898 [ 175.212589][ T6832] netlink_sendmsg+0x834/0xb18 [ 175.213568][ T6832] ____sys_sendmsg+0x55c/0x848 [ 175.214632][ T6832] __sys_sendmsg+0x26c/0x33c [ 175.215563][ T6832] __arm64_sys_sendmsg+0x80/0x94 [ 175.216630][ T6832] invoke_syscall+0x98/0x2c0 [ 175.217660][ T6832] el0_svc_common+0x138/0x258 [ 175.218605][ T6832] do_el0_svc+0x64/0x218 [ 175.219551][ T6832] el0_svc+0x58/0x168 [ 175.220350][ T6832] el0t_64_sync_handler+0x84/0xf0 [ 175.221396][ T6832] el0t_64_sync+0x18c/0x190 [ 175.234626][ T6825] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 175.543899][ T6842] loop0: detected capacity change from 0 to 1024 [ 175.545600][ T6842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.561156][ T6842] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 175.564507][ T6844] FAULT_INJECTION: forcing a failure. [ 175.564507][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 175.580316][ T6842] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e801c09c, mo2=0003] [ 175.592383][ T6842] System zones: 0-1, 3-36 [ 175.594581][ T6842] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.596904][ T6844] CPU: 0 PID: 6844 Comm: syz.2.525 Not tainted 6.1.113-syzkaller #0 [ 175.598480][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.600466][ T6844] Call trace: [ 175.601116][ T6844] dump_backtrace+0x1c8/0x1f4 [ 175.601981][ T6844] show_stack+0x2c/0x3c [ 175.602870][ T6844] dump_stack_lvl+0x108/0x170 [ 175.603848][ T6844] dump_stack+0x1c/0x5c [ 175.604702][ T6844] should_fail_ex+0x3c0/0x51c [ 175.605656][ T6844] __should_failslab+0xc8/0x128 [ 175.606584][ T6844] should_failslab+0x10/0x28 [ 175.607687][ T6844] __kmem_cache_alloc_node+0x80/0x388 [ 175.608799][ T6844] __kmalloc+0xc4/0x1c4 [ 175.609785][ T6844] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 175.610984][ T6844] genl_rcv_msg+0x664/0xc2c [ 175.611864][ T6844] netlink_rcv_skb+0x20c/0x3b8 [ 175.612819][ T6844] genl_rcv+0x38/0x50 [ 175.613666][ T6844] netlink_unicast+0x65c/0x898 [ 175.614631][ T6844] netlink_sendmsg+0x834/0xb18 [ 175.615586][ T6844] ____sys_sendmsg+0x55c/0x848 [ 175.616553][ T6844] __sys_sendmsg+0x26c/0x33c [ 175.617522][ T6844] __arm64_sys_sendmsg+0x80/0x94 [ 175.618422][ T6844] invoke_syscall+0x98/0x2c0 [ 175.619388][ T6844] el0_svc_common+0x138/0x258 [ 175.620314][ T6844] do_el0_svc+0x64/0x218 [ 175.621282][ T6844] el0_svc+0x58/0x168 [ 175.622100][ T6844] el0t_64_sync_handler+0x84/0xf0 [ 175.623137][ T6844] el0t_64_sync+0x18c/0x190 [ 175.675742][ T4737] bio_check_eod: 47450 callbacks suppressed [ 175.675756][ T4737] syz.2.54: attempt to access beyond end of device [ 175.675756][ T4737] loop2: rw=0, sector=52600, nr_sectors = 8 limit=40427 [ 175.678562][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 175.680061][ T4737] syz.2.54: attempt to access beyond end of device [ 175.680061][ T4737] loop2: rw=0, sector=52608, nr_sectors = 8 limit=40427 [ 175.685529][ T4743] syz.4.55: attempt to access beyond end of device [ 175.685529][ T4743] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 175.692115][ T4737] syz.2.54: attempt to access beyond end of device [ 175.692115][ T4737] loop2: rw=0, sector=52616, nr_sectors = 8 limit=40427 [ 175.694882][ T4737] syz.2.54: attempt to access beyond end of device [ 175.694882][ T4737] loop2: rw=0, sector=52624, nr_sectors = 8 limit=40427 [ 175.697761][ T4737] syz.2.54: attempt to access beyond end of device [ 175.697761][ T4737] loop2: rw=0, sector=52632, nr_sectors = 8 limit=40427 [ 175.700446][ T4737] syz.2.54: attempt to access beyond end of device [ 175.700446][ T4737] loop2: rw=0, sector=52640, nr_sectors = 8 limit=40427 [ 175.703367][ T4737] syz.2.54: attempt to access beyond end of device [ 175.703367][ T4737] loop2: rw=0, sector=52648, nr_sectors = 8 limit=40427 [ 175.709746][ T4737] syz.2.54: attempt to access beyond end of device [ 175.709746][ T4737] loop2: rw=0, sector=52656, nr_sectors = 8 limit=40427 [ 175.710671][ T6850] netlink: 'syz.0.524': attribute type 10 has an invalid length. [ 175.714245][ T4737] syz.2.54: attempt to access beyond end of device [ 175.714245][ T4737] loop2: rw=0, sector=52664, nr_sectors = 8 limit=40427 [ 175.774242][ T6850] netlink: 'syz.0.524': attribute type 11 has an invalid length. [ 175.785759][ T6850] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.524'. [ 175.848023][ T4655] EXT4-fs (loop1): unmounting filesystem. [ 175.909461][ T6855] FAULT_INJECTION: forcing a failure. [ 175.909461][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 175.915138][ T6855] CPU: 0 PID: 6855 Comm: syz.1.528 Not tainted 6.1.113-syzkaller #0 [ 175.916873][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.919010][ T6855] Call trace: [ 175.919712][ T6855] dump_backtrace+0x1c8/0x1f4 [ 175.920711][ T6855] show_stack+0x2c/0x3c [ 175.921540][ T6855] dump_stack_lvl+0x108/0x170 [ 175.922521][ T6855] dump_stack+0x1c/0x5c [ 175.923388][ T6855] should_fail_ex+0x3c0/0x51c [ 175.924326][ T6855] __should_failslab+0xc8/0x128 [ 175.925274][ T6855] should_failslab+0x10/0x28 [ 175.926249][ T6855] kmem_cache_alloc+0x8c/0x37c [ 175.927294][ T6855] __alloc_file+0x30/0x22c [ 175.928109][ T6855] alloc_empty_file+0xa8/0x198 [ 175.929208][ T6855] alloc_file+0x64/0x55c [ 175.930001][ T6855] alloc_file_pseudo+0x1e0/0x278 [ 175.930978][ T6855] __shmem_file_setup+0x19c/0x26c [ 175.932022][ T6855] shmem_file_setup+0x40/0x54 [ 175.932993][ T6855] __arm64_sys_memfd_create+0x2d8/0x530 [ 175.934211][ T6855] invoke_syscall+0x98/0x2c0 [ 175.935116][ T6855] el0_svc_common+0x138/0x258 [ 175.936198][ T6855] do_el0_svc+0x64/0x218 [ 175.937153][ T6855] el0_svc+0x58/0x168 [ 175.937970][ T6855] el0t_64_sync_handler+0x84/0xf0 [ 175.938875][ T6855] el0t_64_sync+0x18c/0x190 [ 175.945355][ T5915] EXT4-fs (loop0): unmounting filesystem. [ 176.025472][ T6858] loop0: detected capacity change from 0 to 256 [ 176.057176][ T6828] loop3: detected capacity change from 0 to 32768 [ 176.083711][ T6828] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop3 scanned by syz.3.521 (6828) [ 176.101568][ T6828] BTRFS info (device loop3): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 176.109644][ T6828] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 176.111520][ T6828] BTRFS info (device loop3): using free space tree [ 176.682740][ T6828] BTRFS info (device loop3): enabling ssd optimizations [ 176.839118][ T4568] BTRFS info (device loop3): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 177.249596][ T6895] loop0: detected capacity change from 0 to 164 [ 177.296448][ T6895] isofs_fill_super: root inode is not a directory. Corrupted media? [ 177.335806][ T6168] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.574279][ T6872] loop1: detected capacity change from 0 to 32768 [ 177.591733][ T6872] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.533 (6872) [ 177.733848][ T6902] loop0: detected capacity change from 0 to 128 [ 177.742629][ T6872] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.744925][ T6872] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 177.747845][ T6872] BTRFS info (device loop1): use zlib compression, level 3 [ 177.757406][ T6872] BTRFS info (device loop1): using free space tree [ 177.773042][ T6902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.103431][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 178.165186][ T6872] BTRFS info (device loop1): enabling ssd optimizations [ 178.243035][ T6926] loop3: detected capacity change from 0 to 64 [ 178.452668][ T5915] EXT4-fs (loop0): unmounting filesystem. [ 178.557766][ T6931] loop0: detected capacity change from 0 to 256 [ 179.585397][ T4655] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.922321][ T6949] FAULT_INJECTION: forcing a failure. [ 179.922321][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 179.925037][ T6949] CPU: 1 PID: 6949 Comm: syz.1.548 Not tainted 6.1.113-syzkaller #0 [ 179.926793][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.928928][ T6949] Call trace: [ 179.929498][ T6949] dump_backtrace+0x1c8/0x1f4 [ 179.930381][ T6949] show_stack+0x2c/0x3c [ 179.931278][ T6949] dump_stack_lvl+0x108/0x170 [ 179.932227][ T6949] dump_stack+0x1c/0x5c [ 179.933120][ T6949] should_fail_ex+0x3c0/0x51c [ 179.934092][ T6949] __should_failslab+0xc8/0x128 [ 179.935108][ T6949] should_failslab+0x10/0x28 [ 179.936006][ T6949] __kmem_cache_alloc_node+0x80/0x388 [ 179.937151][ T6949] __kmalloc+0xc4/0x1c4 [ 179.938008][ T6949] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 179.939269][ T6949] genl_rcv_msg+0x664/0xc2c [ 179.940208][ T6949] netlink_rcv_skb+0x20c/0x3b8 [ 179.941285][ T6949] genl_rcv+0x38/0x50 [ 179.942073][ T6949] netlink_unicast+0x65c/0x898 [ 179.943045][ T6949] netlink_sendmsg+0x834/0xb18 [ 179.944088][ T6949] ____sys_sendmsg+0x55c/0x848 [ 179.945039][ T6949] __sys_sendmsg+0x26c/0x33c [ 179.946034][ T6949] __arm64_sys_sendmsg+0x80/0x94 [ 179.947106][ T6949] invoke_syscall+0x98/0x2c0 [ 179.948068][ T6949] el0_svc_common+0x138/0x258 [ 179.949157][ T6949] do_el0_svc+0x64/0x218 [ 179.950070][ T6949] el0_svc+0x58/0x168 [ 179.950851][ T6949] el0t_64_sync_handler+0x84/0xf0 [ 179.951844][ T6949] el0t_64_sync+0x18c/0x190 [ 180.685648][ T4737] bio_check_eod: 56316 callbacks suppressed [ 180.685667][ T4737] syz.2.54: attempt to access beyond end of device [ 180.685667][ T4737] loop2: rw=524288, sector=50448, nr_sectors = 8 limit=40427 [ 180.686968][ T4743] syz.4.55: attempt to access beyond end of device [ 180.686968][ T4743] loop4: rw=0, sector=52800, nr_sectors = 8 limit=40427 [ 180.687072][ T4737] syz.2.54: attempt to access beyond end of device [ 180.687072][ T4737] loop2: rw=524288, sector=50456, nr_sectors = 8 limit=40427 [ 180.695478][ T4737] syz.2.54: attempt to access beyond end of device [ 180.695478][ T4737] loop2: rw=524288, sector=50464, nr_sectors = 8 limit=40427 [ 180.698562][ T4737] syz.2.54: attempt to access beyond end of device [ 180.698562][ T4737] loop2: rw=524288, sector=50472, nr_sectors = 8 limit=40427 [ 180.699725][ T4743] syz.4.55: attempt to access beyond end of device [ 180.699725][ T4743] loop4: rw=0, sector=52808, nr_sectors = 8 limit=40427 [ 180.701330][ T4737] syz.2.54: attempt to access beyond end of device [ 180.701330][ T4737] loop2: rw=524288, sector=50480, nr_sectors = 8 limit=40427 [ 180.706861][ T4743] syz.4.55: attempt to access beyond end of device [ 180.706861][ T4743] loop4: rw=0, sector=52816, nr_sectors = 8 limit=40427 [ 180.709640][ T4743] syz.4.55: attempt to access beyond end of device [ 180.709640][ T4743] loop4: rw=0, sector=52824, nr_sectors = 8 limit=40427 [ 180.712317][ T4743] syz.4.55: attempt to access beyond end of device [ 180.712317][ T4743] loop4: rw=0, sector=52832, nr_sectors = 8 limit=40427 [ 180.729849][ T6963] loop1: detected capacity change from 0 to 512 [ 180.739901][ T6963] EXT4-fs (loop1): Test dummy encryption mode enabled [ 180.752805][ T6963] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.970489][ T6963] EXT4-fs (loop1): 1 orphan inode deleted [ 180.971675][ T6963] EXT4-fs (loop1): 1 truncate cleaned up [ 180.972769][ T6963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.990694][ T6968] loop0: detected capacity change from 0 to 256 [ 181.091429][ T6963] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 181.107463][ T6963] EXT4-fs (loop1): Remounting filesystem read-only [ 181.682966][ T4655] EXT4-fs (loop1): unmounting filesystem. [ 182.042816][ T6989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.560'. [ 182.052113][ T6989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 182.093970][ T6987] loop0: detected capacity change from 0 to 32768 [ 182.114314][ T6987] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.559 (6987) [ 182.119223][ T6990] binder: 6988:6990 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 182.121140][ T6990] binder: 6988:6990 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 182.123634][ T6990] binder: 6990 RLIMIT_NICE not set [ 182.127494][ T6987] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.129824][ T6987] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 182.131554][ T6987] BTRFS error (device loop0): superblock checksum mismatch [ 182.134723][ T6987] BTRFS error (device loop0): open_ctree failed [ 182.153395][ T6461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6461) [ 182.295424][ T6993] binder: 6991:6993 ioctl 400c620e 200002c0 returned -22 [ 182.326935][ T6997] FAULT_INJECTION: forcing a failure. [ 182.326935][ T6997] name failslab, interval 1, probability 0, space 0, times 0 [ 182.340003][ T6997] CPU: 0 PID: 6997 Comm: syz.0.562 Not tainted 6.1.113-syzkaller #0 [ 182.341610][ T6997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.343692][ T6997] Call trace: [ 182.344416][ T6997] dump_backtrace+0x1c8/0x1f4 [ 182.345395][ T6997] show_stack+0x2c/0x3c [ 182.346312][ T6997] dump_stack_lvl+0x108/0x170 [ 182.347253][ T6997] dump_stack+0x1c/0x5c [ 182.348207][ T6997] should_fail_ex+0x3c0/0x51c [ 182.349235][ T6997] __should_failslab+0xc8/0x128 [ 182.350202][ T6997] should_failslab+0x10/0x28 [ 182.351178][ T6997] kmem_cache_alloc_node+0x90/0x3b4 [ 182.352285][ T6997] __alloc_skb+0x114/0x580 [ 182.353099][ T6997] netlink_ack+0x2f4/0xf20 [ 182.354011][ T6997] netlink_rcv_skb+0x1ec/0x3b8 [ 182.355029][ T6997] nfnetlink_rcv+0x21c/0x1e04 [ 182.356062][ T6997] netlink_unicast+0x65c/0x898 [ 182.357022][ T6997] netlink_sendmsg+0x834/0xb18 [ 182.358039][ T6997] ____sys_sendmsg+0x55c/0x848 [ 182.358954][ T6997] __sys_sendmsg+0x26c/0x33c [ 182.359876][ T6997] __arm64_sys_sendmsg+0x80/0x94 [ 182.360831][ T6997] invoke_syscall+0x98/0x2c0 [ 182.361850][ T6997] el0_svc_common+0x138/0x258 [ 182.362844][ T6997] do_el0_svc+0x64/0x218 [ 182.363693][ T6997] el0_svc+0x58/0x168 [ 182.364523][ T6997] el0t_64_sync_handler+0x84/0xf0 [ 182.365556][ T6997] el0t_64_sync+0x18c/0x190 [ 182.366535][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.480052][ T7001] loop0: detected capacity change from 0 to 256 [ 182.754092][ T7005] loop0: detected capacity change from 0 to 128 [ 182.782178][ T7005] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.556161][ T7013] FAULT_INJECTION: forcing a failure. [ 183.556161][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 183.558759][ T7013] CPU: 0 PID: 7013 Comm: syz.3.567 Not tainted 6.1.113-syzkaller #0 [ 183.560218][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.562193][ T7013] Call trace: [ 183.562958][ T7013] dump_backtrace+0x1c8/0x1f4 [ 183.563890][ T7013] show_stack+0x2c/0x3c [ 183.564731][ T7013] dump_stack_lvl+0x108/0x170 [ 183.565687][ T7013] dump_stack+0x1c/0x5c [ 183.566515][ T7013] should_fail_ex+0x3c0/0x51c [ 183.567410][ T7013] __should_failslab+0xc8/0x128 [ 183.568436][ T7013] should_failslab+0x10/0x28 [ 183.569292][ T7013] __kmem_cache_alloc_node+0x80/0x388 [ 183.570454][ T7013] kmalloc_trace+0x48/0x94 [ 183.571301][ T7013] rtnl_newlink+0xe8/0x1b74 [ 183.572184][ T7013] rtnetlink_rcv_msg+0x72c/0xd94 [ 183.573241][ T7013] netlink_rcv_skb+0x20c/0x3b8 [ 183.574122][ T7013] rtnetlink_rcv+0x28/0x38 [ 183.575074][ T7013] netlink_unicast+0x65c/0x898 [ 183.576064][ T7013] netlink_sendmsg+0x834/0xb18 [ 183.577062][ T7013] ____sys_sendmsg+0x55c/0x848 [ 183.577971][ T7013] __sys_sendmsg+0x26c/0x33c [ 183.579002][ T7013] __arm64_sys_sendmsg+0x80/0x94 [ 183.580011][ T7013] invoke_syscall+0x98/0x2c0 [ 183.580880][ T7013] el0_svc_common+0x138/0x258 [ 183.581864][ T7013] do_el0_svc+0x64/0x218 [ 183.582647][ T7013] el0_svc+0x58/0x168 [ 183.583462][ T7013] el0t_64_sync_handler+0x84/0xf0 [ 183.584477][ T7013] el0t_64_sync+0x18c/0x190 [ 183.585334][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.098845][ T5915] EXT4-fs (loop0): unmounting filesystem. [ 184.196115][ T7025] loop3: detected capacity change from 0 to 2048 [ 184.216709][ T7025] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.332156][ T7025] UDF-fs: error (device loop3): udf_truncate_tail_extent: Extent after EOF in inode 1367 [ 184.447756][ T7032] FAULT_INJECTION: forcing a failure. [ 184.447756][ T7032] name failslab, interval 1, probability 0, space 0, times 0 [ 184.450303][ T7032] CPU: 0 PID: 7032 Comm: syz.1.575 Not tainted 6.1.113-syzkaller #0 [ 184.452020][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.454090][ T7032] Call trace: [ 184.454845][ T7032] dump_backtrace+0x1c8/0x1f4 [ 184.455821][ T7032] show_stack+0x2c/0x3c [ 184.456641][ T7032] dump_stack_lvl+0x108/0x170 [ 184.457627][ T7032] dump_stack+0x1c/0x5c [ 184.458443][ T7032] should_fail_ex+0x3c0/0x51c [ 184.459475][ T7032] __should_failslab+0xc8/0x128 [ 184.460527][ T7032] should_failslab+0x10/0x28 [ 184.461398][ T7032] __kmem_cache_alloc_node+0x80/0x388 [ 184.462470][ T7032] kmalloc_trace+0x48/0x94 [ 184.463389][ T7032] rtnl_newlink+0xe8/0x1b74 [ 184.464345][ T7032] rtnetlink_rcv_msg+0x72c/0xd94 [ 184.465442][ T7032] netlink_rcv_skb+0x20c/0x3b8 [ 184.466463][ T7032] rtnetlink_rcv+0x28/0x38 [ 184.467383][ T7032] netlink_unicast+0x65c/0x898 [ 184.468349][ T7032] netlink_sendmsg+0x834/0xb18 [ 184.469436][ T7032] ____sys_sendmsg+0x55c/0x848 [ 184.470398][ T7032] __sys_sendmsg+0x26c/0x33c [ 184.471274][ T7032] __arm64_sys_sendmsg+0x80/0x94 [ 184.472276][ T7032] invoke_syscall+0x98/0x2c0 [ 184.473222][ T7032] el0_svc_common+0x138/0x258 [ 184.474130][ T7032] do_el0_svc+0x64/0x218 [ 184.475009][ T7032] el0_svc+0x58/0x168 [ 184.475941][ T7032] el0t_64_sync_handler+0x84/0xf0 [ 184.477030][ T7032] el0t_64_sync+0x18c/0x190 [ 184.478092][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.532543][ T7036] nsfs: Unknown parameter 'fd' [ 185.252932][ T7039] netlink: 'syz.3.576': attribute type 1 has an invalid length. [ 185.402287][ T7043] loop1: detected capacity change from 0 to 1024 [ 185.641027][ T5630] hfsplus: b-tree write err: -5, ino 4 [ 185.654333][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 185.724003][ T47] Bluetooth: Unexpected continuation frame (len 4) [ 185.738608][ T4743] bio_check_eod: 48914 callbacks suppressed [ 185.738622][ T4743] syz.4.55: attempt to access beyond end of device [ 185.738622][ T4743] loop4: rw=524288, sector=51456, nr_sectors = 8 limit=40427 [ 185.742525][ T4743] syz.4.55: attempt to access beyond end of device [ 185.742525][ T4743] loop4: rw=524288, sector=51464, nr_sectors = 8 limit=40427 [ 185.754568][ T4737] syz.2.54: attempt to access beyond end of device [ 185.754568][ T4737] loop2: rw=0, sector=51040, nr_sectors = 8 limit=40427 [ 185.764521][ T4743] syz.4.55: attempt to access beyond end of device [ 185.764521][ T4743] loop4: rw=524288, sector=51472, nr_sectors = 8 limit=40427 [ 185.767977][ T4743] syz.4.55: attempt to access beyond end of device [ 185.767977][ T4743] loop4: rw=524288, sector=51480, nr_sectors = 8 limit=40427 [ 185.771537][ T4743] syz.4.55: attempt to access beyond end of device [ 185.771537][ T4743] loop4: rw=524288, sector=51488, nr_sectors = 8 limit=40427 [ 185.774262][ T4743] syz.4.55: attempt to access beyond end of device [ 185.774262][ T4743] loop4: rw=524288, sector=51496, nr_sectors = 8 limit=40427 [ 185.790452][ T4737] syz.2.54: attempt to access beyond end of device [ 185.790452][ T4737] loop2: rw=0, sector=51048, nr_sectors = 8 limit=40427 [ 185.793405][ T4737] syz.2.54: attempt to access beyond end of device [ 185.793405][ T4737] loop2: rw=0, sector=51056, nr_sectors = 8 limit=40427 [ 185.817471][ T4737] syz.2.54: attempt to access beyond end of device [ 185.817471][ T4737] loop2: rw=0, sector=51064, nr_sectors = 8 limit=40427 [ 185.852992][ T7057] loop3: detected capacity change from 0 to 128 [ 185.950586][ T4303] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.955200][ T4303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.958005][ T4327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.961075][ T4327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.962978][ T4303] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.964816][ T4327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.073321][ T7057] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 186.753947][ T7076] FAULT_INJECTION: forcing a failure. [ 186.753947][ T7076] name failslab, interval 1, probability 0, space 0, times 0 [ 186.757159][ T7076] CPU: 1 PID: 7076 Comm: syz.1.588 Not tainted 6.1.113-syzkaller #0 [ 186.758901][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.761004][ T7076] Call trace: [ 186.761710][ T7076] dump_backtrace+0x1c8/0x1f4 [ 186.762676][ T7076] show_stack+0x2c/0x3c [ 186.763493][ T7076] dump_stack_lvl+0x108/0x170 [ 186.764475][ T7076] dump_stack+0x1c/0x5c [ 186.765430][ T7076] should_fail_ex+0x3c0/0x51c [ 186.766328][ T7076] __should_failslab+0xc8/0x128 [ 186.767306][ T7076] should_failslab+0x10/0x28 [ 186.768261][ T7076] __kmem_cache_alloc_node+0x80/0x388 [ 186.769368][ T7076] kmalloc_trace+0x48/0x94 [ 186.770261][ T7076] cgroup_show_path+0xb4/0x514 [ 186.771199][ T7076] kernfs_sop_show_path+0x104/0x144 [ 186.772137][ T7076] show_mountinfo+0x1e4/0x79c [ 186.773085][ T7076] m_show+0x6c/0x80 [ 186.773851][ T7076] seq_read_iter+0x894/0xc44 [ 186.774746][ T7076] generic_file_splice_read+0x1e0/0x508 [ 186.775918][ T7076] splice_direct_to_actor+0x30c/0x9b4 [ 186.777041][ T7076] do_splice_direct+0x20c/0x348 [ 186.778047][ T7076] do_sendfile+0x4c0/0xcb0 [ 186.778909][ T7076] __arm64_sys_sendfile64+0x160/0x3b4 [ 186.779910][ T7076] invoke_syscall+0x98/0x2c0 [ 186.780956][ T7076] el0_svc_common+0x138/0x258 [ 186.781922][ T7076] do_el0_svc+0x64/0x218 [ 186.782762][ T7076] el0_svc+0x58/0x168 [ 186.783610][ T7076] el0t_64_sync_handler+0x84/0xf0 [ 186.784593][ T7076] el0t_64_sync+0x18c/0x190 [ 187.031883][ T4568] EXT4-fs (loop3): unmounting filesystem. [ 187.170956][ T7071] loop0: detected capacity change from 0 to 32768 [ 187.226934][ T7085] openvswitch: netlink: Flow key attr not present in new flow. [ 187.269499][ T7061] chnl_net:caif_netlink_parms(): no params data found [ 187.371186][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.372558][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.651312][ T7061] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.656028][ T7061] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.658182][ T7061] device bridge_slave_0 entered promiscuous mode [ 187.674481][ T7096] loop0: detected capacity change from 0 to 256 [ 187.676713][ T7061] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.695549][ T7061] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.703608][ T7061] device bridge_slave_1 entered promiscuous mode [ 187.744854][ T7096] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 187.754826][ T7098] loop3: detected capacity change from 0 to 512 [ 187.818490][ T7061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.822215][ T7061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.873754][ T7079] loop1: detected capacity change from 0 to 32768 [ 187.931288][ T7061] team0: Port device team_slave_0 added [ 187.933292][ T6461] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.960635][ T7061] team0: Port device team_slave_1 added [ 188.005784][ T4327] Bluetooth: hci0: command tx timeout [ 188.245964][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.295047][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.646654][ T7061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.650187][ T7061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.651606][ T7061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.722470][ T7061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.988750][ T7061] device hsr_slave_0 entered promiscuous mode [ 189.007169][ T7061] device hsr_slave_1 entered promiscuous mode [ 189.445740][ T4325] Bluetooth: hci5: command 0x0406 tx timeout [ 189.447901][ T4325] Bluetooth: hci6: command 0x0406 tx timeout [ 189.600027][ T7131] loop3: detected capacity change from 0 to 512 [ 189.624345][ T7131] ext4: Unknown parameter 'euid' [ 189.759991][ T7061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.928338][ T4303] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 189.930805][ T4303] Bluetooth: hci5: Injecting HCI hardware error event [ 189.933987][ T47] Bluetooth: hci5: hardware error 0x00 [ 190.057477][ T7061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.084758][ T7115] loop0: detected capacity change from 0 to 32768 [ 190.086223][ T4303] Bluetooth: hci0: command tx timeout [ 190.106173][ T7115] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.108426][ T7115] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 190.110114][ T7115] BTRFS info (device loop0): enabling auto defrag [ 190.111414][ T7115] BTRFS info (device loop0): max_inline at 0 [ 190.112711][ T7115] BTRFS info (device loop0): enabling ssd optimizations [ 190.143819][ T7115] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 190.164003][ T7115] BTRFS info (device loop0): use lzo compression, level 0 [ 190.165515][ T7115] BTRFS info (device loop0): using free space tree [ 190.312827][ T7140] loop3: detected capacity change from 0 to 8192 [ 190.358090][ T7061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.608036][ T7140] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 190.610182][ T7140] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 190.612102][ T7140] loop3: unable to read partition table [ 190.613418][ T7140] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 190.646955][ T3912] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 190.649120][ T3912] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 190.650857][ T3912] loop3: unable to read partition table [ 190.755855][ T4737] bio_check_eod: 50723 callbacks suppressed [ 190.755868][ T4737] syz.2.54: attempt to access beyond end of device [ 190.755868][ T4737] loop2: rw=0, sector=51032, nr_sectors = 8 limit=40427 [ 190.762229][ T4743] syz.4.55: attempt to access beyond end of device [ 190.762229][ T4743] loop4: rw=524288, sector=49152, nr_sectors = 8 limit=40427 [ 190.782972][ T4743] syz.4.55: attempt to access beyond end of device [ 190.782972][ T4743] loop4: rw=524288, sector=49160, nr_sectors = 8 limit=40427 [ 190.788297][ T4737] syz.2.54: attempt to access beyond end of device [ 190.788297][ T4737] loop2: rw=0, sector=51040, nr_sectors = 8 limit=40427 [ 190.806888][ T4743] syz.4.55: attempt to access beyond end of device [ 190.806888][ T4743] loop4: rw=524288, sector=49168, nr_sectors = 8 limit=40427 [ 190.811961][ T4737] syz.2.54: attempt to access beyond end of device [ 190.811961][ T4737] loop2: rw=0, sector=51048, nr_sectors = 8 limit=40427 [ 190.826334][ T4743] syz.4.55: attempt to access beyond end of device [ 190.826334][ T4743] loop4: rw=524288, sector=49176, nr_sectors = 8 limit=40427 [ 190.831858][ T4737] syz.2.54: attempt to access beyond end of device [ 190.831858][ T4737] loop2: rw=0, sector=51056, nr_sectors = 8 limit=40427 [ 190.846212][ T5915] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 190.854501][ T4737] syz.2.54: attempt to access beyond end of device [ 190.854501][ T4737] loop2: rw=0, sector=51064, nr_sectors = 8 limit=40427 [ 190.857788][ T4743] syz.4.55: attempt to access beyond end of device [ 190.857788][ T4743] loop4: rw=524288, sector=49184, nr_sectors = 8 limit=40427 [ 190.890323][ T7139] loop1: detected capacity change from 0 to 40427 [ 191.028790][ T7061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.034918][ T7139] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.048338][ T7170] FAULT_INJECTION: forcing a failure. [ 191.048338][ T7170] name failslab, interval 1, probability 0, space 0, times 0 [ 191.050922][ T7170] CPU: 1 PID: 7170 Comm: syz.2.610 Not tainted 6.1.113-syzkaller #0 [ 191.052478][ T7170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.054528][ T7170] Call trace: [ 191.055243][ T7170] dump_backtrace+0x1c8/0x1f4 [ 191.056247][ T7170] show_stack+0x2c/0x3c [ 191.057134][ T7170] dump_stack_lvl+0x108/0x170 [ 191.058083][ T7170] dump_stack+0x1c/0x5c [ 191.058898][ T7170] should_fail_ex+0x3c0/0x51c [ 191.059921][ T7170] __should_failslab+0xc8/0x128 [ 191.060917][ T7170] should_failslab+0x10/0x28 [ 191.061893][ T7170] __kmem_cache_alloc_node+0x80/0x388 [ 191.063004][ T7170] kmalloc_trace+0x48/0x94 [ 191.063831][ T7170] rtnl_newlink+0xe8/0x1b74 [ 191.064760][ T7170] rtnetlink_rcv_msg+0x72c/0xd94 [ 191.065758][ T7170] netlink_rcv_skb+0x20c/0x3b8 [ 191.066728][ T7170] rtnetlink_rcv+0x28/0x38 [ 191.067643][ T7170] netlink_unicast+0x65c/0x898 [ 191.068630][ T7170] netlink_sendmsg+0x834/0xb18 [ 191.069686][ T7170] ____sys_sendmsg+0x55c/0x848 [ 191.070651][ T7170] __sys_sendmsg+0x26c/0x33c [ 191.071662][ T7170] __arm64_sys_sendmsg+0x80/0x94 [ 191.072686][ T7170] invoke_syscall+0x98/0x2c0 [ 191.073669][ T7170] el0_svc_common+0x138/0x258 [ 191.074614][ T7170] do_el0_svc+0x64/0x218 [ 191.075440][ T7170] el0_svc+0x58/0x168 [ 191.076300][ T7170] el0t_64_sync_handler+0x84/0xf0 [ 191.077320][ T7170] el0t_64_sync+0x18c/0x190 [ 191.113871][ T7173] FAULT_INJECTION: forcing a failure. [ 191.113871][ T7173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 191.116696][ T7173] CPU: 1 PID: 7173 Comm: syz.3.611 Not tainted 6.1.113-syzkaller #0 [ 191.118449][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.120416][ T7173] Call trace: [ 191.121138][ T7173] dump_backtrace+0x1c8/0x1f4 [ 191.122048][ T7173] show_stack+0x2c/0x3c [ 191.122938][ T7173] dump_stack_lvl+0x108/0x170 [ 191.123939][ T7173] dump_stack+0x1c/0x5c [ 191.124855][ T7173] should_fail_ex+0x3c0/0x51c [ 191.125784][ T7173] should_fail_alloc_page+0x74/0xb8 [ 191.126951][ T7173] prepare_alloc_pages+0x1c0/0x508 [ 191.128156][ T7173] __alloc_pages+0x150/0x730 [ 191.129087][ T7173] __folio_alloc+0x1c/0x48 [ 191.130036][ T7173] vma_alloc_folio+0x394/0x8d8 [ 191.130968][ T7173] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 191.132234][ T7173] handle_mm_fault+0x1d9c/0x3d38 [ 191.133260][ T7173] do_page_fault+0x330/0x890 [ 191.134189][ T7173] do_translation_fault+0x94/0xc8 [ 191.135192][ T7173] do_mem_abort+0x74/0x200 [ 191.136155][ T7173] el0_da+0x70/0x184 [ 191.136996][ T7173] el0t_64_sync_handler+0xcc/0xf0 [ 191.137975][ T7173] el0t_64_sync+0x18c/0x190 [ 191.146764][ T7139] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.162539][ T7173] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 191.265266][ T7173] loop3: detected capacity change from 0 to 4096 [ 191.280176][ T7173] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 191.285290][ T7174] tipc: Started in network mode [ 191.286504][ T7174] tipc: Node identity 7f000001, cluster identity 4711 [ 191.288864][ T7174] tipc: Enabled bearer , priority 10 [ 191.336508][ T7173] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 191.366473][ T7173] ntfs3: loop3: mft corrupted [ 191.367524][ T7173] ntfs3: loop3: Failed to load $Extend. [ 191.584622][ T7061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.647785][ T7061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.726300][ T7187] loop3: detected capacity change from 0 to 4096 [ 191.755188][ T7187] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 191.817941][ T7061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.820678][ T7186] loop0: detected capacity change from 0 to 2048 [ 191.877942][ T7061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.885045][ T7186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 191.892486][ T7186] VFS: Lookup of 'file0' in ext4 loop0 would have caused loop [ 192.128894][ T7187] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 192.144773][ T7187] ntfs3: loop3: mft corrupted [ 192.151565][ T7187] ntfs3: loop3: Failed to load $Extend. [ 192.182635][ T4327] Bluetooth: hci0: command tx timeout [ 192.245829][ T47] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 192.270101][ T7204] /dev/loop0: Can't open blockdev [ 192.374412][ T7061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.398949][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 192.402846][ T5915] EXT4-fs (loop0): unmounting filesystem. [ 192.407051][ T4532] tipc: Node number set to 2130706433 [ 192.422378][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 192.437168][ T7061] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.441435][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 192.451777][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 192.470829][ T4871] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.472369][ T4871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.480920][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 192.633789][ T7210] FAULT_INJECTION: forcing a failure. [ 192.633789][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 192.667381][ T7210] CPU: 0 PID: 7210 Comm: syz.0.620 Not tainted 6.1.113-syzkaller #0 [ 192.668938][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.671090][ T7210] Call trace: [ 192.671715][ T7210] dump_backtrace+0x1c8/0x1f4 [ 192.672816][ T7210] show_stack+0x2c/0x3c [ 192.673601][ T7210] dump_stack_lvl+0x108/0x170 [ 192.674661][ T7210] dump_stack+0x1c/0x5c [ 192.675527][ T7210] should_fail_ex+0x3c0/0x51c [ 192.676566][ T7210] __should_failslab+0xc8/0x128 [ 192.677445][ T7210] should_failslab+0x10/0x28 [ 192.678461][ T7210] __kmem_cache_alloc_node+0x80/0x388 [ 192.679564][ T7210] __kmalloc+0xc4/0x1c4 [ 192.680461][ T7210] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 192.681700][ T7210] genl_rcv_msg+0x664/0xc2c [ 192.682652][ T7210] netlink_rcv_skb+0x20c/0x3b8 [ 192.683625][ T7210] genl_rcv+0x38/0x50 [ 192.684419][ T7210] netlink_unicast+0x65c/0x898 [ 192.685479][ T7210] netlink_sendmsg+0x834/0xb18 [ 192.686406][ T7210] ____sys_sendmsg+0x55c/0x848 [ 192.687370][ T7210] __sys_sendmsg+0x26c/0x33c [ 192.688336][ T7210] __arm64_sys_sendmsg+0x80/0x94 [ 192.689383][ T7210] invoke_syscall+0x98/0x2c0 [ 192.690421][ T7210] el0_svc_common+0x138/0x258 [ 192.691396][ T7210] do_el0_svc+0x64/0x218 [ 192.692303][ T7210] el0_svc+0x58/0x168 [ 192.693116][ T7210] el0t_64_sync_handler+0x84/0xf0 [ 192.694168][ T7210] el0t_64_sync+0x18c/0x190 [ 192.704089][ T7061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.726706][ T7061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.923442][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 192.929842][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 192.931868][ T4932] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.933322][ T4932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.935125][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 192.948237][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 192.987126][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 193.041299][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 193.043675][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 193.089840][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.096848][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.137493][ T7215] fuse: Unknown parameter 'dont_appraise' [ 193.146721][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.149875][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.151997][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.154173][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.156551][ T4932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.304040][ T7221] loop1: detected capacity change from 0 to 64 [ 193.521746][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.523581][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.530240][ T7229] loop0: detected capacity change from 0 to 8 [ 193.545840][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.600817][ T7229] tipc: Enabled bearer , priority 10 [ 194.245787][ T47] Bluetooth: hci0: command tx timeout [ 194.323873][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 194.326430][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 194.343003][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.345069][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.348015][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.349976][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.375288][ T7061] device veth0_vlan entered promiscuous mode [ 194.402423][ T7250] FAULT_INJECTION: forcing a failure. [ 194.402423][ T7250] name failslab, interval 1, probability 0, space 0, times 0 [ 194.405017][ T7250] CPU: 0 PID: 7250 Comm: syz.1.632 Not tainted 6.1.113-syzkaller #0 [ 194.406637][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.408752][ T7250] Call trace: [ 194.409386][ T7250] dump_backtrace+0x1c8/0x1f4 [ 194.410422][ T7250] show_stack+0x2c/0x3c [ 194.411290][ T7250] dump_stack_lvl+0x108/0x170 [ 194.412239][ T7250] dump_stack+0x1c/0x5c [ 194.413038][ T7250] should_fail_ex+0x3c0/0x51c [ 194.414043][ T7250] __should_failslab+0xc8/0x128 [ 194.415093][ T7250] should_failslab+0x10/0x28 [ 194.416061][ T7250] __kmem_cache_alloc_node+0x80/0x388 [ 194.417103][ T7250] __kmalloc+0xc4/0x1c4 [ 194.417958][ T7250] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 194.419299][ T7250] genl_rcv_msg+0x664/0xc2c [ 194.420306][ T7250] netlink_rcv_skb+0x20c/0x3b8 [ 194.421314][ T7250] genl_rcv+0x38/0x50 [ 194.422100][ T7250] netlink_unicast+0x65c/0x898 [ 194.423070][ T7250] netlink_sendmsg+0x834/0xb18 [ 194.424081][ T7250] ____sys_sendmsg+0x55c/0x848 [ 194.425114][ T7250] __sys_sendmsg+0x26c/0x33c [ 194.426042][ T7250] __arm64_sys_sendmsg+0x80/0x94 [ 194.427102][ T7250] invoke_syscall+0x98/0x2c0 [ 194.428063][ T7250] el0_svc_common+0x138/0x258 [ 194.428944][ T7250] do_el0_svc+0x64/0x218 [ 194.429798][ T7250] el0_svc+0x58/0x168 [ 194.430602][ T7250] el0t_64_sync_handler+0x84/0xf0 [ 194.431597][ T7250] el0t_64_sync+0x18c/0x190 [ 194.648089][ T7253] binder: 7252:7253 tried to acquire reference to desc 0, got 1 instead [ 194.799786][ T7061] device veth1_vlan entered promiscuous mode [ 194.884143][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.900553][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.917217][ T7061] device veth0_macvtap entered promiscuous mode [ 194.920945][ T7061] device veth1_macvtap entered promiscuous mode [ 194.957579][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.959720][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.961726][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.963778][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.002005][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.004149][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.013025][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.015216][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.025739][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.027805][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.029851][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.031917][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.051721][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.059269][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 195.061522][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 195.063612][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 195.077179][ T4871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 195.090835][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.093122][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.094968][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.105808][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.122347][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.124457][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.128111][ T7265] loop3: detected capacity change from 0 to 512 [ 195.135850][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.147026][ T7265] EXT2-fs (loop3): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 195.152941][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.154866][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.159553][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.165986][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.168274][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.168287][ T7267] loop1: detected capacity change from 0 to 128 [ 195.170200][ T7061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.170217][ T7061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.189340][ T7265] EXT2-fs (loop3): error: fragsize log 6 != blocksize log 12 [ 195.213343][ T7061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.229678][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 195.238047][ T5630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 195.248464][ T7061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.250278][ T7061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.252001][ T7061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.253727][ T7061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.256638][ T7267] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 195.677394][ T7277] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 195.753588][ T7280] FAULT_INJECTION: forcing a failure. [ 195.753588][ T7280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.766991][ T4743] bio_check_eod: 49217 callbacks suppressed [ 195.767006][ T4743] syz.4.55: attempt to access beyond end of device [ 195.767006][ T4743] loop4: rw=524288, sector=51208, nr_sectors = 8 limit=40427 [ 195.774672][ T4737] syz.2.54: attempt to access beyond end of device [ 195.774672][ T4737] loop2: rw=0, sector=50704, nr_sectors = 8 limit=40427 [ 195.780745][ T5827] binder: send failed reply for transaction 31 to 7252:7253 [ 195.782549][ T5827] binder: undelivered TRANSACTION_COMPLETE [ 195.783689][ T5827] binder: undelivered TRANSACTION_ERROR: 29189 [ 195.789945][ T7280] CPU: 1 PID: 7280 Comm: syz.0.641 Not tainted 6.1.113-syzkaller #0 [ 195.791706][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 195.793767][ T7280] Call trace: [ 195.794449][ T7280] dump_backtrace+0x1c8/0x1f4 [ 195.795067][ T4743] syz.4.55: attempt to access beyond end of device [ 195.795067][ T4743] loop4: rw=524288, sector=51216, nr_sectors = 8 limit=40427 [ 195.795440][ T7280] show_stack+0x2c/0x3c [ 195.795454][ T7280] dump_stack_lvl+0x108/0x170 [ 195.795468][ T7280] dump_stack+0x1c/0x5c [ 195.795477][ T7280] should_fail_ex+0x3c0/0x51c [ 195.795491][ T7280] should_fail+0x14/0x24 [ 195.795501][ T7280] should_fail_usercopy+0x20/0x30 [ 195.795513][ T7280] copyin+0x2c/0x154 [ 195.795525][ T7280] _copy_from_iter+0x438/0xe4c [ 195.795537][ T7280] netlink_sendmsg+0x704/0xb18 [ 195.795550][ T7280] ____sys_sendmsg+0x55c/0x848 [ 195.795562][ T7280] __sys_sendmsg+0x26c/0x33c [ 195.795573][ T7280] __arm64_sys_sendmsg+0x80/0x94 [ 195.795584][ T7280] invoke_syscall+0x98/0x2c0 [ 195.795596][ T7280] el0_svc_common+0x138/0x258 [ 195.795612][ T7280] do_el0_svc+0x64/0x218 [ 195.795624][ T7280] el0_svc+0x58/0x168 [ 195.795634][ T7280] el0t_64_sync_handler+0x84/0xf0 [ 195.795645][ T7280] el0t_64_sync+0x18c/0x190 [ 195.795947][ T4737] syz.2.54: attempt to access beyond end of device [ 195.795947][ T4737] loop2: rw=0, sector=50712, nr_sectors = 8 limit=40427 [ 195.826915][ T7277] team0: Port device netdevsim0 added [ 195.838185][ T4743] syz.4.55: attempt to access beyond end of device [ 195.838185][ T4743] loop4: rw=524288, sector=51224, nr_sectors = 8 limit=40427 [ 195.841109][ T4743] syz.4.55: attempt to access beyond end of device [ 195.841109][ T4743] loop4: rw=524288, sector=51232, nr_sectors = 8 limit=40427 [ 195.843999][ T4743] syz.4.55: attempt to access beyond end of device [ 195.843999][ T4743] loop4: rw=524288, sector=51240, nr_sectors = 8 limit=40427 [ 195.857534][ T4743] syz.4.55: attempt to access beyond end of device [ 195.857534][ T4743] loop4: rw=524288, sector=51248, nr_sectors = 8 limit=40427 [ 195.860426][ T4743] syz.4.55: attempt to access beyond end of device [ 195.860426][ T4743] loop4: rw=524288, sector=51256, nr_sectors = 8 limit=40427 [ 195.863133][ T4743] syz.4.55: attempt to access beyond end of device [ 195.863133][ T4743] loop4: rw=524288, sector=51264, nr_sectors = 8 limit=40427 [ 195.879574][ T47] Bluetooth: Fragment is too long (len 22, expected 2) [ 195.885785][ T7279] netlink: 'syz.3.640': attribute type 10 has an invalid length. [ 195.965425][ T7279] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 196.016005][ T7279] team0: Failed to send options change via netlink (err -105) [ 196.017670][ T7279] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 196.020446][ T7279] team0: Port device netdevsim0 removed [ 196.035948][ T7279] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 196.322996][ T4931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.324832][ T4931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.335903][ T5079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.337873][ T5079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.346690][ T1686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 196.387123][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.587570][ T4655] EXT4-fs (loop1): unmounting filesystem. [ 196.822825][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.646'. [ 196.926710][ T7287] loop0: detected capacity change from 0 to 32768 [ 196.937039][ T7287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.643 (7287) [ 196.950484][ T7287] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.964174][ T7287] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 196.970454][ T7287] BTRFS info (device loop0): using free space tree [ 197.036194][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.647'. [ 197.151294][ T7287] BTRFS info (device loop0): enabling ssd optimizations [ 197.211531][ T7302] IPVS: set_ctl: invalid protocol: 46 172.20.20.187:0 [ 197.476894][ T7328] netlink: 32 bytes leftover after parsing attributes in process `syz.4.650'. [ 197.611155][ T28] INFO: task syz.4.55:4753 blocked for more than 143 seconds. [ 197.612745][ T28] Not tainted 6.1.113-syzkaller #0 [ 197.614057][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 197.628067][ T28] task:syz.4.55 state:D stack:0 pid:4753 ppid:4314 flags:0x00000001 [ 197.632342][ T28] Call trace: [ 197.633063][ T28] __switch_to+0x320/0x754 [ 197.637410][ T28] __schedule+0xef4/0x1d44 [ 197.638369][ T28] schedule+0xc4/0x170 [ 197.643767][ T28] rwsem_down_write_slowpath+0xc80/0x156c [ 197.651356][ T28] down_write+0x84/0x88 [ 197.652255][ T28] f2fs_issue_checkpoint+0x274/0x3b0 [ 197.659528][ T28] f2fs_sync_fs+0x1e4/0x580 [ 197.660489][ T28] f2fs_create+0x750/0x8b4 [ 197.669387][ T28] path_openat+0xeac/0x2548 [ 197.670340][ T28] do_filp_open+0x1bc/0x3cc [ 197.674664][ T28] do_sys_openat2+0x128/0x3e0 [ 197.680180][ T28] __arm64_sys_openat+0x1f0/0x240 [ 197.683608][ T28] invoke_syscall+0x98/0x2c0 [ 197.684523][ T28] el0_svc_common+0x138/0x258 [ 197.701090][ T28] do_el0_svc+0x64/0x218 [ 197.702010][ T28] el0_svc+0x58/0x168 [ 197.706621][ T28] el0t_64_sync_handler+0x84/0xf0 [ 197.711048][ T28] el0t_64_sync+0x18c/0x190 [ 197.715573][ T28] [ 197.715573][ T28] Showing all locks held in the system: [ 197.734796][ T28] 1 lock held by rcu_tasks_kthre/12: [ 197.743138][ T28] #0: ffff800015ba5bf0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 197.760693][ T28] 1 lock held by rcu_tasks_trace/13: [ 197.770750][ T28] #0: ffff800015ba63f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 197.784062][ T28] 1 lock held by khungtaskd/28: [ 197.795361][ T28] #0: ffff800015ba5a20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 197.804145][ T28] 3 locks held by kworker/1:2/3420: [ 197.808634][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.817607][ T28] #1: ffff800021de7c20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.829079][ T28] #2: ffff0000dae5c240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x270/0x32bc [ 197.837985][ T28] 2 locks held by getty/4065: [ 197.838948][ T28] #0: ffff0000d600b098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 197.843647][ T28] #1: ffff80001efe02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 197.846976][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 197.858783][ T28] 1 lock held by syz-executor/4290: [ 197.861108][ T28] #0: ffff0001b3d0c158 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x2c4/0x1d44 [ 197.866470][ T28] 4 locks held by kworker/u4:7/4593: [ 197.871045][ T28] #0: ffff0000c2e45938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.880231][ T28] #1: ffff800021d57c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.893003][ T28] #2: ffff0000ca6ac0e0 (&type->s_umount_key#64){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 197.900796][ T28] #3: ffff0000e5e551e8 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x418/0x618 [ 197.910810][ T28] 6 locks held by syz.2.54/4737: [ 197.914288][ T28] 6 locks held by syz.4.55/4743: [ 197.919561][ T28] 3 locks held by syz.4.55/4753: [ 197.924065][ T28] #0: ffff0000ca6ac460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 197.933562][ T28] #1: ffff0000df623690 (&type->i_mutex_dir_key#13){++++}-{3:3}, at: path_openat+0x5ec/0x2548 [ 197.945297][ T28] #2: ffff0000e5e551e8 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x274/0x3b0 [ 197.957552][ T28] 4 locks held by kworker/u4:9/4833: [ 197.963305][ T28] #0: ffff0000c2e45938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 197.973887][ T28] #1: ffff800021357c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 197.986698][ T28] #2: ffff0000dd1b20e0 (&type->s_umount_key#64){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 197.996526][ T28] #3: ffff0000d9d951e8 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x418/0x618 [ 198.007602][ T28] 2 locks held by kworker/u4:14/4945: [ 198.012298][ T28] 1 lock held by syz.4.526/6849: [ 198.016937][ T28] #0: ffff0000ca6ac0e0 (&type->s_umount_key#64){++++}-{3:3}, at: user_get_super+0xd8/0x240 [ 198.031533][ T28] 2 locks held by syz.0.643/7287: [ 198.036177][ T28] 1 lock held by syz.3.644/7292: [ 198.037173][ T28] 2 locks held by syz.2.649/7326: [ 198.048276][ T28] 1 lock held by syz.1.651/7334: [ 198.051688][ T28] [ 198.052324][ T28] ============================================= [ 198.052324][ T28] [ 198.062525][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 198.063908][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.113-syzkaller #0 [ 198.065584][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.067666][ T28] Call trace: [ 198.068399][ T28] dump_backtrace+0x1c8/0x1f4 [ 198.069343][ T28] show_stack+0x2c/0x3c [ 198.070212][ T28] dump_stack_lvl+0x108/0x170 [ 198.071103][ T28] dump_stack+0x1c/0x5c [ 198.071949][ T28] panic+0x300/0x804 [ 198.072808][ T28] hung_task_panic+0x0/0x2c [ 198.073769][ T28] kthread+0x250/0x2d8 [ 198.074618][ T28] ret_from_fork+0x10/0x20 [ 198.075579][ T28] SMP: stopping secondary CPUs [ 198.076604][ T28] Kernel Offset: disabled [ 198.077510][ T28] CPU features: 0x080000,02070084,26017203 [ 198.078717][ T28] Memory Limit: none [ 198.742735][ T28] Rebooting in 86400 seconds..