last executing test programs: 22.065907056s ago: executing program 3 (id=363): modify_ldt$write(0x1, &(0x7f0000000040)={0xd35, 0x1000, 0x4000}, 0x10) r0 = getpid() syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000100)={[{@norecovery}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x1d0f056b}}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") r1 = creat(&(0x7f0000000080)='./bus\x00', 0x58) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) r3 = syz_pidfd_open(r0, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 17.113473236s ago: executing program 3 (id=373): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) 15.598321027s ago: executing program 3 (id=375): syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) 11.378880539s ago: executing program 4 (id=383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000fe54000000000000fe97000000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000be8000/0x1000)=nil, 0x1000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000b01000/0x18000)=nil, 0x0, 0x0, 0x2d, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) 10.551300817s ago: executing program 3 (id=384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x64010102}], 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b0400000000000000000200000014000480100001800b00010064796e73657400000900010073797a30000000000900020073797a320000000005000740"], 0x70}}, 0x8004) r2 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x1a404bc, &(0x7f0000001100)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="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", @ANYBLOB="d18e04bec756cc13c21be17aa2beac6649ee59e5fe591bc30c36f5dbbc8bd180d3c51d59ff53c8c7d75cb50209a57476600f1de82c9643e7e6a07f96f399252a4beb5b82680e9d49011b2123945f75d4dd14406cecd8fbc0541cfc3a3fa4809fca7b98e3b8df0084a538a8616bb71be8277ca80f08eca09e92d29fee482eb08fa0b00eabca03b71cbc7e87bafc96141cf570cbdd62cea426a31de3d8fd9379f9300000000000", @ANYRES32=r2, @ANYRES16=r2, @ANYRESDEC=r3, @ANYRES8], 0xff, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x200d40, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x7, 0x0, 0x5cb, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/177, &(0x7f0000000200)=0xb1) ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x80, 0x10}, &(0x7f0000000080)=0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @broadcast}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000000c0), 0x4) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401040005"], 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r5, 0x1c, "3c5307b800b9f4b02e14f3ad5079d5a49a5daea6426077c7d9949317"}, &(0x7f0000000100)=0x24) r8 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, r9) ioprio_get$uid(0x0, r9) 9.836541432s ago: executing program 1 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0xf0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000240)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0xffffffffffffffcc, 0xfa00, {{0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e20, 0x4, @remote, 0x3}, r4, 0x7}}, 0x48) syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009740)='./file0\x00', 0x4000853, &(0x7f0000000180), 0xff, 0x983c, &(0x7f0000009780)="$eJzs3QW8pGXBuP+zyy4sHYpgAVJikhIG0qGIkqKEIC0pIAJKhxIqKAIKKKAgokh3d0h3d3d3/D8LC+J6gfj/va/wcl3Xxz1zZuY5c+65v3M/njnPYWap+Raba2BgvIFXe+30H5252y3LLT72QusdtcuQq/feceH7R1w86qsn488x4nTOEadzDQwMDBpxO4NevWzI7EceNXhgyMDw//2jsUYfY/BYAwNjjDg74nYGZnn1ZMwDXtvu5ZHigU42/Nvt8Oq/Vxp7+I0M/2SZ5V9ce2BgYNgbvn74uKb7lzsqbak555/vH1avuw0ecfWgf1z3yumQV/+Nud/AwJj7DLz542P4tkPf8LX/zYZ/z/GmGFjilnfge/+fa6k5519wJP/ha3GUEZfNMnyNj7wGjY38ON9xsTXuHTGFg0ZM3JA3rJd34nH//6ul5pxvoYE3X8cDC8+76T0vv7LfHDLPwMCQeQcGhsw3MDBk/nfao/5nekcffFVVVfWONOdcMw5/zj54pJ8Hhr32cy39XHjuC9PfMTAwZOFXnycOWf6154JVVVVVVVVV9e5szrlmnBue/4/3Vs//Jzthm/F7/l9VVVVVVVX1f6cF55xrxuHP9Ud6/j/xWz3/f+S+g/d/9W//55jl1a966Z29E1VVVVVVVVX1ls23ID7/n2zEfwOOz//PP3Kyi3r+X1VVVVVVVfV/p0Vffvnlzd/wOnsjLp7mtevp+f9Jd9+07Ds24Kqqqqqqqqr6j3vpweNP/sdrvk8yMNLrvb/SiN8LDDr01EsueccG+u5o0L/+PmSLd3pM/68Ndx520GQDA2sv8U4Ppd6B/s+8Vn39r5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7k+P/r7/+/0mHr/jae8F/fKoZrzn+H1/5ynv/D1l4wQe3fIeG/k70Xj3+P7D6oIGBEb7jrT4wMLDwnIsuPs3AwMDx18w41ZQDr1836/DrvjDBKK+8Qfxr/5nIvOPzDW8x+aunwx8oA+9//TYOfeX2F3x531EGjTSINzT+0fvvv9pST8808unUb34/Br/+2dhH3ffaf8syeKSNhr3JF792+6/dl5GdR4x9muFjn3aDtdaddv2NN/nM6mutsOrKq6689mwzzDz9TLPNNvPM066y+porT/fqxzebs8le+Tj325mzsUaeswfnfOOcjXzf3mzOJnvrOXvlFnc9b9iXX5uzIf/hnM391nM22eojvtH4cwwdWP6VuRk0MDD+PEMHNhp+ZvrRBgbGn3fEthMP3/aLEwweGNj5H3d0+Gejvf4YHLTF8G2Wmm+xuV7dTQ0M/OP0H73J+9mPOmLkc4w4nXPE6VyvfpvxBv7xUBwy+5FHDR4+F/80HWONPsbgsQYGxhhxdsTtDMz26skYJ7y23Zu8z/pIAx0uM2iHV/+90tgDAwNjDv9kkhVO2nb41P8X3qf9/9f///+L16yDXn88Dhrxb8Q2r3rNOf+C//her0zD8LkbZcRlsww3+R9+a/t/6l/GO9mwgcneYrxv8bo4r0SPrzWPn3Cr/6nXxaHxTvwW432L1/F90/Euecce9756U/9j4x1pX7fQKx/neDv7uoG33teNQjew8oUfHXlf99U3H+I/7S5fm6PRRtrozfZ1E+816RbDb3+Ot97XLTR87EP/aV83eGBg/Llf29cN3/HNN3Rg5+FnZhh+Zv6hAwcOPzPjK2dGHzh1+JnPrrjOmisNv2CBf30cTDPon/5AE9bZfCOts0FvuO+DRvr7ziGvno6532vv4fQm+81BI+7Wv91X0ON2vLcY71u8/xTO8/DLVjps2IT/U+8/ReMd9tbjfbP3y37T8e701Em3/A+P9/V1NvQN07XA21lnk/3zOht+F0d5w8p4uz+HrQTbv/r5xK/f2oab3ff6zxRDR7rdf/czxQJvvc7GW32kr9t+n4FBbzU387+dufnIv+yDtnzj3Lzdn7emmeLV60d5i7kZbbblpn5tbkb9D+dm/v90buYYGOWf52bIwLwDAwNTjtg/zPd25mbit56bt/u4GQO2f/XzlV+/aJ4dDzr7tbkZeS7+3dzM95/OzWSvP26mfOW6yQcPjDrqwEYrbLDBetO/+vG1szO8+vGt1+A8b2cux/ufmcsPDXmzufzHQ3WsOy7a79+swX/Zp792+/P8p3M58PpcDqw+8mKpd2v9/s9d/u7yd5e/u/zd5e8uf3Fvcvx/steO/+8+3hd2GfHLjaEXTTrRdu/0eN/h3tPH/0f4/tPx/+0mmvSiwQOvX/eWx2df3eZdeXx2lldPxjzgte1GPj7IA33z47P7zDbLNv+l47P/v3ptrb6N38O1/3eXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe5Pj/9O99ncAd0+/yGMjDoQOvX/rpRd5p8f7DveePv4/wvefjv8vsvTW9w8eeP26tzz+/+o2juP/tz0/307v5uP/r63Vjv/Xvyl/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3Jsf/53jt7wAOPniPTV77e4Arxt/h+Hd6vO9w79Xj/73/v7f2/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xI47/D4z09pbf6HGBwfH//9u9if8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL/zfwxi/9S+WMW/2/lj1n8v50/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/v5I9Z/JfPH7P4r5A/ZvH/bv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v+9/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/9/DGL/3r5Yxb/9fPHLP4b5I9Z/H+QP2bx3zB/zOL/w/wxi/9G+WMW/43zxyz+m+SPWfx/lD9m8f9x/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/5/kj1n8f5o/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+f5Y9Z/H+eP2bx/0X+mMV/5/wxi/8u+WMW/1/mj1n8f5U/ZvHfNX/M4v/r/DGL/275Yxb/3fPHLP575I9Z/H+TP2bx/23+mMV/z/wxi/9e+WMW/73zxyz+v8sfs/j/Pn/M4r9P/pjFf9/8MYv/fvljFv8/5I9Z/P+YP2bx3z9/zOJ/QP6Yxf9P+WMW/wPzxyz+f84fs/gflD9m8f9L/pjF/6/5Yxb/g/PHLP5/yx+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/9/zxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/TOI/aCB/zOI/KH/M4j84f8ziP0r+mMV/SP6YxX9o/pjFf9T8MYv/aPljFv9h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/N+XP2bxf3/+mMV/wvwxi/8H8scs/hPlj1n8J84fs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4j9J/pjFf9L8MYv/ZPljFv+P5Y9Z/Cd/zX/YOzSud2kW/yla/5jFf8r8MYv/VPljFv+p88cs/h/PH7P4T5M/ZvH/RP6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOI/U/6Yxf9z+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnz1/zOL/5fwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fyR+z+H81f8ziv1D+mMX/a/ljFv+F88cs/l/PH7P4fyN/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4fzN/zOK/VP6Yxf9b+WMW/2/nj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/O/ljFv/l88cs/ivkj1n8v5s/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/h/L3/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/h/P3/M4r9e/pjFf/38MYv/BvljFv8f5I9Z/DfMH7P4/zB/zOK/Uf6YxX/j/DGL/yb5Yxb/H+WPWfx/nD9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf8n+WMW/5/mj1n8t88fs/jvkD9m8d8xf8ziv1P+mMX/Z/ljFv+f549Z/H+RP2bx3zl/zOK/S/6Yxf+X+WMW/1/lj1n8d80fs/j/On/M4r9b/pjFf/f8MYv/HvljFv/f5I9Z/H+bP2bx3zN/zOK/V/6YxX/v/DGL/+/yxyz+v88fs/jvkz9m8d83f8ziv1/+mMX/D/ljFv8/5o9Z/PfPH7P4H5A/ZvH/0z/73/VfH9e7NIv/ga1/zOL/5/wxi/9B+WMW/7/kj1n8/5o/ZvE/OH/M4v+3/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH5P4v1L+/5rEf9AF+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82/1HpQov/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f0zi/8qn+f9rFv9B+WMW/8H5Yxb/UfLHLP5D8scs/kPzxyz+o+aPWfxHyx+z+A/LH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/778MYv/+/PHLP4T5o9Z/D+QP2bxnyh/zOI/cf6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/0nyxyz+k+aPWfwnyx+z+H8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfw/nj9m8Z8mf8zi/4n8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP7T5o9Z/KfLHxt05m5DBwYG3vP+0+ePWdb/DPljFv8Z88cs/jPlj1n8P5c/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv/Z88cs/l/OH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/5X8MYv/V/PHLP4L5Y9Z/L+WP2bxXzh/zOL/9fwxi/838scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8388cs/kvlj1n8v5U/ZvH/dv6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+TP2bxXz5/zOK/Qv6Yxf+7+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL//fyxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL//fzxyz+6+WPWfzXzx+z+G+QP2bx/0H+mMV/w/wxi/8P88cs/hvlj1n8N84fs/hvkj9m8f9R/pjF/8f5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8f5I/ZvH/af6YxX/7/DGL/w75Yxb/HfPHLP475Y9Z/H+WP2bx/3n+mMX/F/ljFv+d88cs/rvkj1n8f5k/ZvH/Vf6YxX/X/DGL/6/zxyz+u+WPWfx3zx+z+O+RP2bx/03+mMX/t/ljFv8988cs/nvlj1n8984fs/j/Ln/M4v/7/DGL/z75Yxb/ffPHLP775Y9Z/P+QP2bx/2P+mMV///wxi/8B+WMW/z/lj1n8D8wfs/j/OX/M4n9Q/pjF/y/5Yxb/v+aPWfwPzh+z+P8tf8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+f88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxif8oA/ljFv9B+WMW/8H5Yxb/UfLHLP5D8scs/kPzxyz+o+aPWfxHyx+z+A/LH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/778MYv/+/PHLP4T5o9Z/D+QP2bxnyh/zOI/cf6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6Yxf+j+WMW/0nyxyz+k+aPWfwnyx+z+H8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfw/nj9m8Z8mf8zi/4n8MYv/J/PHLP6fyh+z+H86f8zi/5n8MYv/Z/PHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjFf6b8MYv/5/LHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4j97/pjF/8v5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5I/ZvH/av6YxX+h/DGL/9fyxyz+C+ePWfy/nj9m8f9G/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8f9m/pjFf6n8MYv/t/LHLP7fzh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/3fyxyz+y+ePWfxXyB+z+H83f8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bx/17+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/37+mMV/vfwxi//6+WMW/w3yxyz+P8gfs/hvmD9m8f9h/pjFf6P8MYv/xvljFv9N8scs/j/KH7P4/zh/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/T/LHLP4/zR+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/8/yxyz+P88fs/j/In/M4r9z/pjFf5f8MYv/L/PHLP6/yh+z+O+aP2bx/3X+mMV/t/wxi//u+WMW/z3yxyz+v8kfs/j/Nn/M4r9n/pjFf6/8MYv/3vljFv/f5Y9Z/H+fP2bx3yd/zOK/b/6YxX+//DGL/x/yxyz+f8wfs/jvnz9m8T8gf8zi/6f8MYv/gfljFv8/549Z/A/KH7P4/yV/zOL/1/wxi//B+WMW/7/lj1n8D/H4j/6fbGzxP9Tj/x9l8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/7/ljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD8m8R8ykD9m8R/09vxH/V8b17s0i//g1j9m8R8lf8ziPyR/zOI/NH/M4j9q/pjFf7T8MYv/sPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP7vyx+z+L8/f8ziP2H+mMX/A/ljFv+J8scs/hPnj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvGfJH/M4j9p/pjFf7L8MYv/x/LHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4j91/pjF/+P5Yxb/afLHLP6fyB+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+H8uf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+s+ePWfy/nD9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf8r+WMW/6/mj1n8F8ofs/h/LX/M4r9w/pjF/+v5Yxb/b+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/b+aPWfyXyh+z+H8rf8zi/+38MYv/0vljFv9l8scs/svmj1n8l8sfs/h/J3/M4r98/pjFf4X8MYv/d/PHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv/v5Y9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/vG/2H/ftNLP7rGf3fRhb/9fPHLP4b5I9Z/H+QP2bx3zB/zOL/w/wxi/9G+WMW/43zxyz+m+SPWfx/lD9m8f9x/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/5/kj1n8f5o/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+f5Y9Z/H+eP2bx/0X+mMV/5/wxi/8u+WMW/1/mj1n8f5U/ZvHfNX/M4v/r/DGL/275Yxb/3fPHLP575I9Z/H+TP2bx/23+mMV/z/wxi/9e+WMW/73zxyz+v8sfs/j/Pn/M4r9P/pjFf9/8MYv/fvljFv8/5I9Z/P+YP2bx3z9/zOJ/QP6Yxf9P+WMW/wPzxyz+f84fs/gflD9m8f9L/pjF/6/5Yxb/g/PHLP5/yx+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/9/zxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/TOI/dCB/zOI/KH/M4j84f8ziP0r+mMV/SP6YxX9o/pjFf9T8MYv/aPljFv9h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/N+XP2bxf3/+mMV/wvwxi/8H8scs/hPlj1n8J84fs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4j9J/pjFf9L8MYv/ZPljFv+P5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/x/PHLP7T5I9Z/D+RP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bx/1z+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfxnzx+z+H85f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/1fyxyz+X80fs/gvlD9m8f9a/pjFf+H8MYv/1/PHLP7fcPkPebsbWvwXcfm/7Sz+i+aPWfwXyx+z+C+eP2bxXyJ/zOK/ZP6Yxf+b+WMW/6Xyxyz+38ofs/h/O3/M4r90/pjFf5n8MYv/svljFv/l8scs/t/JH7P4L58/ZvFfIX/M4v/d/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/3v5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF//v5Yxb/9fLHLP7r549Z/DfIH7P4/yB/zOK/Yf6Yxf+H+WMW/43yxyz+G+ePWfw3yR+z+P8of8zi/+P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+P8kfs/j/NH/M4r99/pjFf4f8MYv/jvljFv+d8scs/j/LH7P4/zx/zOL/i/wxi//O+WMW/13yxyz+v8wfs/j/Kn/M4r9r/pjF/9f5Yxb/3fLHLP67549Z/PfIH7P4/yZ/zOL/2/wxi/+e+WMW/73yxyz+e+ePWfx/lz9m8f99/pjFf5/8MYv/vvljFv/98scs/n/IH7P4/zF/zOK/f/6Yxf+A/DGL/5/yxyz+B+aPWfz/nD9m8T8of8zi/5f8MYv/X/PHLP4H549Z/P+WP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/v+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6YxH/Ugfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/6H5Yxb/UfPHLP6j5Y9Z/Iflj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxf1/+mMX//fljFv8J88cs/h/IH7P4T5Q/ZvGfOH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP4fzx+z+E+TP2bx/0T+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMX/c/ljFv+Z88cs/rPkj1n8Z80fG9l/6Ds9oP/X3sR/tvwxy/r/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfPX/M4v/l/DGL/xz/3n+0/9VxvUuz+M/Z+scs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X8kfs/h/NX/M4r9Q/pjF/2v5Yxb/hfPHLP5fzx+z+H8jf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+H8zf8ziv1T+mMX/W/ljFv9v549Z/JfOH3uP+g8ayXrUZfLH3qP+r/TG9b9s/pjFf7n8MYv/d/LHLP7L549Z/FfIH7P4fzd/zOK/Yv7YoDMHjZiZ97b/SvljlvW/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/L+XP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/L+fP2bxXy9/zOK/fv6YxX+D/DGL/w/yxyz+G+aPWfx/mD9m8d8of8ziv3H+mMV/k/wxi/+P8scs/j/OH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/5P8MYv/T/PHLP7b549Z/HfIH7P475g/ZvHfKX/M4v+z/DGL/8/zxyz+v8gfs/jvnD9m8d8lf8zi/8v8MYv/r/LHLP675o9Z/H+dP2bx3y1/zOK/e/6YxX+P/DGL/2/yxyz+v80fs/jvmT9m8d8rf8ziv3f+mMX/d/ljFv/f549Z/PfJH7P475s/ZvHfL3/M4v+H/DGL/x/zxyz+++ePWfwPyB+z+P8pf8zif2D+mMX/z/ljFv+D8scs/n/JH7P4/zV/zOJ/cP6Yxf9v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/3v+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/+dv0H/K/Na53aRb/K1r/mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP4Do8NlFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+T+I82kD9m8R+UP2bxH5w/ZvEfJX/M4j8kf8ziPzR/zOI/av6YxX+0/DGL/7D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+Y9o2D+ds/hPkD9m8X9f/pjF//35Yxb/CfPHLP4fyB+z+E+UP2bxnzh/zOL/wfwxi/+H8sfem/6vvtLZG/0/nD/23vR/tTf6fyR/zOL/0fwxi/8k+WMW/0nzxyz+k+WPWfw/lj9m8Z88f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+H88fs/hPkz9m8f9E/pjF/5P5Yxb/T+WPWfw/nT9m8f9M/pjF/7P5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4j9T/pjF/3P5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvGfPX/M4v/l/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/l/JH7P4fzV/zOK/UP6Yxf9r+WMW/4Xzxyz+X88fs/h/I3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/M3/M4r9U/pjF/1v5Yxb/b+ePWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf87+WMW/+Xzxyz+K+SPWfy/mz9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+H8vf8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H8/f8ziv17+mMV//fwxi/8G+WMW/x/kj1n8N8wfs/j/MH/M4r9R/pjFf+P8MYv/JvljFv8f5Y9Z/H+cP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfFv17RFj8t0sbs/j/JH/M4v/T/DGL//b5Yxb/HfLHLP47vur/4svv1LjepVn8d2r9Yxb/n+WPWfx/nj9m8f9F/pjFf+f8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOL/6/wxi/9u+WMW/93zxyz+e+SPWfx/kz9m8f9t/pjFf8/8MYv/XvljFv+988cs/r97W/5D//fG9S7N4v/71j9m8d8nf8ziv2/+mMV/v/wxi/8f8scs/n/MH7P4758/ZvE/IH/M4v+n/DGL/4H5Yxb/P+ePWfwPyh+z+P8lf8zi/9f8MYv/wfljFv+/5Y9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/+/5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/JvEfNpA/ZvEflD9m8R+cP2bxHyV/zOI/JH/M4j80f8ziP2r+mMV/tPwxi/+w/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/u/LH7P4vz9/zOI/Yf6Yxf8D+WMW/4nyxyz+E+ePWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8ziP2n+mMV/svwxi//H8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8ziP3X+mMX/4/ljFv9p8scs/p/IH7P4fzJ/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4fy5/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6fzx+z+H/hLf33+N8f17s0i/8XW/+Yxf9L+WMW/9nzxyz+X84fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/lfwxi/9X88cs/gvlj1n8v5Y/ZvFfOH/M4v/1/DGL/zfyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/zfzxyz+S+WPWfy/lT9m8f92/pjFf+n8MYv/MvljFv9l88cs/svlj1n8v5M/ZvFfPn/M4r9C/pjF/7v5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/9/LHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/9/PHLP7r5Y9Z/NfPH7P4b/AW/kP/G+N6l2bx/0HrH7P4b5g/ZvH/Yf6YxX+j/DGL/8b5Yxb/TfLHLP4/yh+z+P84f8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/0/yxyz+P80fs/hvnz9m8d8hf8ziv2P+mMV/p/wxi//P8scs/j/PH7P4/yJ/zOK/c/6YxX+X/DGL/y/zxyz+v8ofs/jvmj9m8f91/pjFf7f8MYv/7vljFv898scs/r/JH7P4/zZ/zOK/Z/6YxX+v/DGL/975Yxb/3+WPWfx/nz9m8d8nf8ziv2/+mMV/v/wxi/8f8scs/n/MH7P4758/ZvE/IH/M4v+n/DGL/4H5Yxb/P+ePWfwPyh+z+P8lf8zi/9f8MYv/wfljFv+/5Y9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/+/5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n/vW/mP818Y17s0i/99rX/M4n9//pjF/4H8MYv/g/ljBv9BQwaGPZQ/ZvAfvv4fzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fk/iPPpA/ZvEflD9m8R+cP2bxHyV/zOI/JH/M4j80f8ziP2r+mMV/tPwxi/+w/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/u/LH7P4vz9/zOI/Yf6Yxf8D+WMW/4nyxyz+E+ePWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8ziP2n+mMV/svwxi//H8scs/pPnj1n8p8gfs/hPmT9m8Z8qf8ziP3X+mMX/4/ljFv9p8scs/p/IH7P4fzJ/zOL/qfwxi/+nZf7Tv83tLP6fkfm/3Sz+n80fs/hPmz9m8Z9uYGDzd2pI7+Ys/tO3/jGL/wz5Yxb/GfPHLP4z5Y9Z/D+XP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/2fPHLP5fzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+V/DGL/1fzxyz+C+WPWfy/lj9m8V84f8zi//X8MYv/N/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/N/PHLP5L5Y9Z/L+VP2bx/3b+mMV/6fwxi/8y+WMW/2Xzxyz+y+WPWfy/kz9m8V8+f8ziv0L+mMX/u/ljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi//38scs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi//388cs/uvlj1n8188fs/hvkD9m8f9B/pjFf8P8MYv/D/PHLP4b5Y9Z/DfOH7P4b5I/ZvH/Uf6Yxf/H+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/H+SP2bx/2n+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx/lj9m8f95/pjF/xf5Yxb/nfPHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/+v88cs/rvlj1n8d88fs/jvkT9m8f9N/pjF/7f5Yxb/PfPHLP575Y9Z/PfOH7P4/y5/zOL/+/wxi/8++WMW/33zxyz+++WPWfz/kD9m8f9j/pjFf//8MYv/AfljFv8/5Y9Z/A/MH7P4/zl/zOJ/UP6Yxf8v+WMW/7/mj1n8D84fs/j/LX/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPvXf99zzvDZeOfmL+2HvX/5/X/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zi//f8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fk/iPMZA/ZvEflD9m8R+cP2bxHyV/zOI/JH/M4j80f8ziP2r+mMV/NJX/6G97S4v/MJX/28/iP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL//vyxyz+788fs/hPmD9m8f9A/pjFf6L8MYv/xPljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/CfJH7P4T5o/ZvGfLH/M4v+x/DGL/+T5Yxb/KfLHLP5T5o+9l/3f0BhT5Y+9l/3fuP6nzh+z+H88f8ziP03+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMX/M/ljFv/P5o9Z/KfNH7P4T5c/ZvGfPn/M4j9D/pjFf8b8MYv/TPljFv/P5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf/b8MYv/l/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/JX/M4v/V/DGL/0L5Yxb/r+WPWfwXzh+z+H89f8zi/438MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/838MYv/UvljFv9v5Y9Z/L+dP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/7+SPWfyXzx+z+K+QP2bx/27+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/vfwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL//fwxi/96+WMW//Xzxyz+G+SPWfx/kD9m8d8wf8zi/8P8MYv/RvljFv+N88cs/pvkj1n8f5Q/ZvH/cf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv+f5I9Z/H+aP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/n+WPWfx/nj9m8f9F/pjFf+f8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOL/6/wxi/9u+WMW/93zxyz+e+SPWfx/kz9m8f9t/pjFf8/8MYv/XvljFv+988cs/r/LH7P4/z5/zOK/T/6YxX/f/DGL/375Yxb/P+SPWfz/mD9m8d8/f8zif0D+mMX/T/ljFv8D88cs/n/OH7P4H5Q/ZvH/S/6Yxf+v+WMW/4Pzxyz+f8sfs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/4/DGL/wlv8B/8TozrXZrF/8TWP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8/54/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J8T+o/+Nrax+D8v9H87WfxfyB+z+L+YP2bxfyl/zOL/cv6YxH/Mgfwxi/+g/DGL/+D8MYv/KPljFv8h+WMW/6H5Yxb/UfPHLP6j5Y9Z/Iflj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxf1/+mMX//fljFv8J88cs/h/IH7P4T5Q/ZvGfOH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/yT5Yxb/SfPHLP6T5Y9Z/D+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP4fzx+z+E+TP2bx/0T+mMX/k/ljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8ziP1P+mMX/c/ljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8f98/pjFf55h+VMW/y+2/jGL/5fyxyz+s+ePWfy/nD9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf8r+WMW/6/mj1n8F8ofs/h/LX/M4r9w/pjF/+v5Yxb/b+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/b+aPWfyXyh+z+H8rf8zi/+38MYv/0vljFv9l8scs/svmj1n8l8sfs/h/J3/M4r98/pjFf4X8MYv/d/PHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv/v5Y9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/v549Z/NfLH7P4r58/ZvHfIH/M4v+D/DGL/4b5Yxb/H+aPWfw3yh+z+G+cP2bx3yR/zOL/o/wxi/+P88cs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P8kf8zi/9P8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/LH/M4v/z/DGL/y/yx95z/m9AfqP/zvlj7zn/N1n/u+SPWfx/mT9m8f9V/pjFf9f8MYv/r/PHLP675Y9Z/HfPH7P475E/ZvH/Tf6Yxf+3+WMW/z3zxyz+e+WPWfz3zh+z+P8uf8zi//v8MYv/PvljFv9988cs/vvlj1n8/5A/ZvH/Y/6YxX///DGL/wH5Yxb/P+WPWfwPzB+z+P85f8zif1D+mMX/L/ljFv+/5o9Z/A/OH7P4/y1/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj73mPzBsYOC97H9i/phl/Z+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/n/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cc/sm/WQ7/gTHv71GAWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMR/rIH8MYv/oPwxi/9gq/+Kb321xX8Uq/+/yeI/JH/M4j80f8ziP2r+mMV/tPwxi/+w/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/u/LH7P4vz9/zOI/Yf6Yxf8D+WMW/4nyxyz+E+ePWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfw/mj9m8Z8kf8ziP2n+mMV/svwxi//H8scs/pPnj1n8p8gfG+E/+uD3uP+U+WOW9T9V/pjFf+r8MYv/x/PHLP7T5I9Z/D+RP2bx/2T+mMX/U/ljFv9P549Z/D+TP2bx/2z+mMV/2vwxi/90+WMW/+nzxyz+M+SPWfxnzB+z+M+UP2bx/1z+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfxnzx+z+H85f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/1fyxyz+X80fs/gvlD9m8f9a/pjFf+H8MYv/1/PHLP7fyB+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP7fzB+z+C+VP2bx/1b+mMX/2/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9O/pjFf/n8MYv/CvljFv/v5o9Z/FfMH7P4r2T0fxt32OK/stH/bWTxXyV/zOK/av6YxX+1/DGL/+r5Yxb/7+WPWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/7+ePWfzXyx+z+K+fP2bx3yB/zOL/g/wxi/+G+WMW/x/mj1n8N8ofs/hvnD9m8d8kf8zi/6P8MYv/j/PHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/j/JH/M4v/T/DGL//b5Yxb/HfLHLP475o9Z/HfKH7P4/yx/zOL/8/wxi/8v8scs/jvnj1n8d8kfs/j/Mn/M4v+r/DGL/675Yxb/X+ePWfx3yx+z+O+eP2bx3yN/zOL/m/wxi/9v88cs/nvmj1n898ofs/jvnT9m8f9d/pjF//f5Yxb/ffLHLP775o9Z/PfLH7P4/yF/zOL/x/wxi//++WMW/wPyxyz+f8ofs/gfmD9m8f9z/pjF/6D8MYv/X/LHLP5/zR+z+B+cP2bx/1v+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfz/nj9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n8j+I/33xzXu7T3tv8tr1061k2tf+y97f96Y92cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH3uP+k810qVj3Z0/9h71f6U3rv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljEv+xB/LHLP6D8scs/oPzxyz+o+SPWfyH5I9Z/Ifmj1n8R80fs/iPlj9m8R+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjF/335Yxb/9+ePWfwnzB+z+H8gf8ziP1H+mMV/4vwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/pPkj1n8J80fs/hPlj9m8f9Y/pjFf/L8MYv/FPljFv8p8x+4Ey6z+E+VP2bxnzp/zOL/8fwxi/80+WMW/0/kj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8P5c/ZvGfOX/M4j9L/pjFf9b8sX/yH3HZeO/wmP6fehP/2fLHLOv/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/9vwxi/+X88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H8lf8zi/9X8MYv/QvljFv+v5Y9Z/BfOH7P4fz1/zOL/jfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOL/zfwxi/9S+WMW/2/lj1n8v50/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/v5I9Z/JfPH7P4r5A/ZvH/bv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4v+9/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/9/DGL/3r5Yxb/9fPHLP4b5I9Z/H+QP2bx3zB/zOL/w/wxi/9G+WMW/43zxyz+m+SPWfx/lD9m8f9x/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/5/kj1n8f5o/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+f5Y9Z/H+eP2bx/0X+mMV/5/wxi/8u+WPvVf9hI/n/Mn/sveo/MJL/r/LHLP675o9Z/H+dP2bx3y1/zOK/e/6YxX+P/DGL/2/yxyz+v80fs/jvmT9m8d8rf8ziv3f+mMX/d/ljFv/f549Z/PfJH7P475s/ZvHfL3/M4v+H/DGL/x/zxyz+++ePWfwPyB+z+P8pf8zif2D+mMX/z/ljFv+D8scs/n/JH7P4/zV/zOJ/cP6Yxf9v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/3v+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d4/sv8V/eVzv0iz+97T+MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjEf5yB/DGL/6D8MYv/4Pwxi/8o+WMW/yH5Yxb/ofljFv9R88cs/qPlj1n8h+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvF/X/6Yxf/9+WMW/wnzxyz+H8gfs/hPlD9m8Z84f8zi/8H8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/JPljFv9J88cs/pPlj1n8P5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/h/PH7P4T5M/ZvH/RP6Yxf+T+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOI/U/6Yxf9z+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnz1/zOL/ZbX/8mO+2TUW/znU/m+exX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/V/LHLP5fzR+z+C+UP2bx/1r+mMV/4fwxi//X88cs/t/IH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/t/MH7P4L5U/ZvH/Vv6Yxf/b+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/07+mMV/+fwxi/8K+WMW/+/mj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+38sfs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+388fs/ivlz9m8V8/f8ziv0H+mMX/B/ljFv8N88cs/j/MH7P4b5Q/ZvHfOH/M4r9J/pjF/0f5DwwMjP4vl1j8f5w/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8t84fs/hvkz9m8d82f8ziv13+mMX/J/ljFv+f5o9Z/LfPH7P475A/ZvHfMX/M4r9T/pjF/2f5Yxb/n+ePWfx/kT9m8d85f8ziv0v+mMX/l/ljFv9f5Y9Z/HfNH7P4/zp/zOK/W/6YxX/3/DGL/x75Yxb/3+SPWfx/mz9m8d8zf8ziv1f+mMV/7/wxi//v8scs/r/PH7P475M/ZvHfN3/M4r9f/pjF/w/5Yxb/P+aPWfz3zx+z+B+QP2bx/1P+mMX/wPwxi/+f88cs/gflj1n8/5I/ZvH/a/6Yxf/g/DGL/9/yxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOL/9/wxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+T+I87kD9m8R+UP2bxH5w/ZvEfJX/M4j8kf8ziPzR/zOI/av6YxX+0/DGL/7D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vP+PnfsP17qu7zh+85ssZx/b1KUNh8Zcm5HIaNRCVBSPP06ZaOZv1COQIPJDAkyBjVbq2HSpmwWbWDjmbNUSh5vr14qGZc3WiK1VTnEtjDEHi8wZuw6cQ3D29lw7X/b9uno/Hn9wzn0f33fK83p5315cV/qHsvQv+oey9D9Y/1CW/q/QP5Sl/0/rH8rS/2f0D2Xpf4j+oSz9D9U/lKX/YfqHsvT/Wf1DWfq/Uv9Qlv6H6x/K0v8I/UNZ+r9K/1CW/j+nfyhL/2H6h7L0P1L/UJb+P69/KEv/4fqHsvQ/Sv9Qlv5H6x/K0v/V+oey9B+hfyhL/1/QP5Sl/zH6h7L0/0X9Q1n6v0b/UJb+v6R/KEv/X9Y/lKX/sfqHsvR/rf6hLP1H6h/K0v91+oey9D9O/1CW/qP0D2Xpf7z+oSz9R+sfytL/V/QPZek/Rv9Qlv6v1z+Upf+v6h/K0n+s/qEs/d+gfyhL/zfqH8rS/9f0D2Xp/yb9Q1n6j9M/lKX/CfqHsvQfr38oS/8T9Q9l6X+S/qEs/U/WP5Sl/wT9Q1n6n6J/KEv/U/UPZek/Uf9Qlv6n6R/K0r9N/1CW/qfrH8rS/wz9Q1n6n6l/KEv/s/QPZenfrn8oS/836x/K0v8t+oey9D9b/1CW/m/VP5Sl/zn6h7L0n6R/KEv/c/UPZel/nv6hLP3fpn8oS//z9Q9l6f92/UNZ+l+gfyhL/wv1D2Xpf5H+oSz9L9Y/lKX/JfqHsvS/VP9Qlv6X6R/K0n+y/qEs/S/XP5Sl/xX6h7L0v1L/UJb+HfqHsvS/Sv9Qlv5T9A9l6T9V/1CW/tP0D2Xp/w79Q1n6X61/KEv/6fqHsvSfoX8oS/9r9A9l6T9T/1CW/tfqH8rSf5b+oSz9Z+sfytJ/jv6hLP3n6h/K0v86/UNZ+s/TP5Sl/zv1D2XpP1//UJb+C/QPZem/UP9Qlv7X6x/K0v9d+oey9L9B/1CW/jfqH8rSf5H+oSz9F+sfytJ/if6hLP1/Xf9Qlv6/oX8oS/+l+oey9H+3/qEs/X9T/1CW/u/RP5Sl/3v1D2Xpf5P+oSz9b9Y/lKX/LfqHsvT/Lf1DWfov0z+Upf9v6x/K0v939A9l6X+r/qEs/W/TP5Sl/+/qH8rS/336h7L0v13/UJb+d+gfytL/Tv1DWfr/nv6hLP1/X/9Qlv536R/K0v/9+oey9P+A/qEs/ZfrH8rSf4X+oSz9/0D/UJb+f6h/KEv/u/UPZem/Uv9Qlv736B/K0v+D+oey9P+Q/qEs/VfpH8rS/179Q1n6/5H+oSz9V+sfytL/j/UPZel/n/6hLP3/RP9Qlv736x/K0v/D+oey9P9T/UNZ+n9E/1CW/h/VP5Sl/8f0D2Xp/2f6h7L0/7j+oSz9H9A/lKX/Gv1DWfo/qH8oS/8/1z+Upf9a/UNZ+j+kfyhL/7/QP5Sl/1/qH8rS/2H9Q1n6/5X+oSz9P6F/KEv/T+ofytL/U/qHsvT/tP6hLP0/o38oS/+/1j+Upf9n9Q9l6f85/UNZ+q/TP5Sl/+f1D2Xp/zf6h7L0X69/KEv/R/QPZen/Bf1DWfp/Uf9Qlv6P6h/K0v9L+oey9P+y/qEs/f9W/1CW/o/pH8rS/yv6h7L0/zv9Q1n6f1X/UJb+f69/KEv/DfqHsvT/mv6hLP036h/K0v8f9A9l6f+P+oey9P+6/qEs/f9J/1CW/t/QP5Sl/zf1D2Xp/y39Q1n6P65/KEv/f9Y/lKX/E/qHsvR/Uv9Qlv6b9A9l6f+U/qEs/f9F/1CW/t/WP5Sl/7/qH8rS/zv6h7L036x/KEv/p/UPZen/Xf1DWfpv0T+Upf+/6R/K0n+r/qEs/f9d/1CW/s/oH8rS/z/0D2Xpv03/UJb+2/UPZen/n/qHsvT/nv6hLP136B/K0v/7+oey9H9W/1CW/j/QP5Sl/3P6h7L0/y/9Q1n6P69/KEv/H+ofytJ/p/6hJP1f3tI/lKV/P/1DWfr31z+Upf8A/UNZ+g/UP5Sl/yD9Q1n6D9Y/lKX/EP1DWfoP1T+Upf9L9A9l6X+A/qEs/V+qfyhL/5fpH8rS/0D9Q1n6/5T+oSz9D9I/9BPXHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P+bOQsWXj15+vSO2b7xjW98s+ebF/vfTAAAwP+1H33of7H/TgAAAAAAAAAAAAAAAAAAACCvJv7vxF7sf0YAAAAAAAAAAAAAAPhx19Z+4pYB/fZ5asDeD171aMeur6N3nD911aoHS/fXrh+fEbxk/70f7Ny5c+eKZ8ZN6Ho4pNVqdf6vvbzr8dCex52vv3jY8sN2PyrjP3vn45dMOvDM2WtuG/i1Fbe0Pz1o17ODWpddNW16x+v6t1rl5EGt+Z0PjuvXapVTB7Vu7XwwqvPBxEGt1Z0Pjt/14CWtT3U+eO0VM6df2fnEaZV/z+AnRVv74taAfRbb2uffBnvvf/GwJ6Z2f+3lJbtfbWCra//D13zh0B4/6/YC++9+/XJiz/33+R8QeEF92/+zG7u/9vKS/+P9/4PrdyyMfvbC++9+/XKS/UN9gs//+2y05+f+Hp//jwxecs/9CUPX3965/7Zz7zui66mB/5vP/z96/XJyz/333+fzf+fn+Andn/+HtFrllP387YBU2tqXbOnt/b/3/Q98ZY+bfnvv/54vbXpZ5/7vfa61tOupQX3c/4Te3v9v6vH3CvRNW/vKnT3e//uw/9aI4CX37H/zmgN3ff7fdP8Vh+z1s77s/5Se+x85d8a1I+csWHjstBmTp3RM6bhm7Kgxx40eO3bMmJG7PhHs/nU/f1Mgif17/28d0OOmX6vVsed+3X23TOjc/9aHln6o66mhfdz/qb2+/x/p/R9Cw/u3Bg9uzZ88d+7s43b/2v1w1O5fd/9lwf778N//Rx3T9Zd1/5lhv1brsD33Iy4ZO6Rz/9fPKmu7nhrcx/1P7HX/4/f9s0qgb/bz/f/KHjf77P+EzTfO69z/0d87eFPXU3397//Tet3/3d7/YX+0tbdqfRPt3P/xQ5acXu26tPnzP6hPE/sftu3W7dWuy+n2D/VpYv+Tlr3x8mrX5Qz7h/o0sf8HZ1y6rNp1OdP+oT5N7P/5V2w/vNp1Ocv+oT5N7P+xbz+1qtp1abd/qE8T+3//Xe3HV7sub7Z/qE8T+z/2uu+Pq3Zd3mL/UJ8m9n/VS89ZXe26nG3/UJ8m9n/6zpMOqXZd3mr/UJ8m9t9vyXcWV7su59g/1KeJ/T85ednMatdlkv1DfZrY/+phI56tdl3OtX+oTxP7X/r06ydWuy7n2T/Up4n9f/mO5Y9Vuy5vs3+oTxP7/9hFBy+vdl3Ot3+oTxP7/8Hwhw6odl3ebv9Qnyb2v2HD6geqXZcL7B/q08T+V6weMLzadbnQ/qE+Tex/0WlTHq12XS6yf6hPE/sfPeaLF1a7LhfbP9Snif0f9plvPFXtulxi/1CfJvZ/zsPz5lS7LpfaP9Snif3PO/yjP6x2XS6zf6hPE/t/U8fhU6tdl8n2D/VpYv/ltgM2VLsul9s/1KeJ/V+wdeX4atflCvuH+jSx/7UHfe4j1a7LlfYP9Wli/9tmXTO22nXpsH+oTxP7/9a7F72n2nW5yv6hPk3s//bnvlqqXZcp9g/1aWL/m0ddcFG16zLV/qE+Tex/5ZnPPFLtukyzf6hPE/tftvbxudWuyzvsH+rTxP7XrTvjiWrX5Wr7h/o0sf+jR4w8sNp1mW7/UJ8m9j/z/KUfqHZdZtg/1KeJ/Z98/x2vrnZdrrF/qE8T+x/6lXEfr3ZdZto/1KeJ/X9y3Hs/Ue26XGv/UJ8m9r99/FHHVLsus+wf6tPE/jc+MOrOatdltv1DfZrY//seuavidZlj/1CfJvY/6zXPb612XebaP9Snif2/YdJ5C6pdl+vsH+rTxP4PuXvi56tdl3n2D/VpYv8Xf/O7Z1e7Lu+0f6hPE/s/6tDLj6h2XebbP9Snif1Pnbb+5mrXZYH9Q32a2P+EFRtHV7suC+0f6tPE/g96cs491a7L9fYP9Wli/1sGHHpWtevyLvuH+jSx/3tvePjr1a7LDfYP9Wli/zff9OGOatflRvuH+jSx/0/vGLyt2nVZZP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8NztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOoncDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKAAD//3fW6TU=") 9.501691246s ago: executing program 2 (id=386): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0xfffb) 9.022588894s ago: executing program 4 (id=387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r2, 0x107, 0x6, 0x0, &(0x7f0000006f40)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0xa3, 0x200000) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x9ab7) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) 8.181529143s ago: executing program 2 (id=389): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x5, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000002050000000000000800000085100000fd"], 0x0, 0x40001, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000540), 0x2100, 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000740)=r0) (async) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) 7.990405888s ago: executing program 4 (id=390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000140)={0x0, 0xc, 0x1, 'n'}, 0x0, 0x0}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) listen(r0, 0x0) ioctl$KVM_GET_SREGS2(0xffffffffffffffff, 0x8140aecc, &(0x7f0000000ac0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000ecec6ee2f0325bd7000fcffffff1500000010001d800c000e0000000000000000009808867dfbd610b96573ba165313dfdc7aaef88fe3925aef8f43eff966673b6653f63932dd486216677fe3fccf78d8b7fe9744685daa67e6352667519120ac22491952ab64e5bfd622266a3c2b9869bf46a2570b2659a32c438701c9c7d9c2faec75fa49b0a3dbdb7a28d2b0b3099511d9704973a8514ba5bce03bce40febef25c319de0645c15797b08dc75803b17acd96e564bf3e83bfe7510389b200d7e7d511106599d4fa6834b0373d2a3a3de8a6cb2d6b055cb85e64d96d23ceaeaf88ed9a962c3"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000ee0f000304040000000000000000000003ae151fe707974785cbeb3de3fd01d2b16bda9c0fc016eae9a9880c35abb6335e2121b47c6119d2107fdd16dc1543c2e2a048089dad862a074bc5be6065b86e176716b1d963b9d66846e9", @ANYRES32=0x0, @ANYBLOB="4101030000000000240012800b0001006970766c616e0000140002800600020001000000060001000200000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x54}, 0x1, 0xba01, 0x0, 0x4000041}, 0x810) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000001e00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf2501000000100007800c00018008000100", @ANYRES32=r9, @ANYBLOB="0c0005004fc31bfd000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x5, 0x6, 0x6, 0xbb}, {0x4, 0x8, 0x3, 0x7fff}]}, 0x10) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r10 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f00000000c0)='+', 0x1}], 0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000000100)={0x48}) r11 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r11, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x8000000004) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r12) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r12, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r13, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500030000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c081000418e00000004fcff", 0x58}], 0x1) getsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000400), &(0x7f0000000440)=0x4) 7.279228848s ago: executing program 2 (id=391): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$FIOCLEX(r0, 0x5451) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_int(r1, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0xb22, &(0x7f00000017c0)="$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") read$char_usb(r0, &(0x7f0000000280)=""/181, 0xb5) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x409, "8facd291119ca94c633775c1ae03a5fa07558139ede600"}) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000080)=0xfffffffc) setxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v2={0x2000000, [{0x2, 0xffffffff}, {0x9, 0x8}]}, 0x14, 0x2) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7ffc, 0xb, &(0x7f0000000240)) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xaf344a158821b917, 0x1d0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000200)=0x20) 7.151521731s ago: executing program 0 (id=392): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40601, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xfffffffe}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1}, 0x48) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007910a800000040001d0a"], 0x0, 0x5}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040040}, 0xc000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r2, @ANYBLOB="e0ffad8d4253d40dc76700000e4a0efbbd7a7338264d83196308dab4486208bd8512d86602e7dd242931a6646135e173039f9338c28ff200ba0f7121bae77891c1ef6dc11b6cd359e85cbc0f1a0e0ee1dd70d514beadc7532e1bbd4c8358b9a47fc115432591fa39a48169d668daa3753aa45e293219a2dcf8c485dba5dc7554ccb44e89cd6741817cd3d0290d9e0732ca9ff02ed467499cc83ec6815c2bf69452519b402d", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r7, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x8, 0x0, 0x0}}, 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 7.096738557s ago: executing program 3 (id=393): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x5, 0x4) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x9620}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x4, 0x3, 0x2, @vifc_lcl_addr=@rand_addr=0x64010100, @local}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x44800) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x1f, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) pwrite64(0xffffffffffffffff, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071142b000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa5}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f00000004c0)=ANY=[], 0x1, 0x152d, &(0x7f0000001f80)="$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") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x4a) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x6}, {0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0xffffffffffffffff, 0x2}}, 0x48) ftruncate(r8, 0x201f) pwrite64(r7, &(0x7f0000000140), 0x0, 0xfecc) fallocate(r6, 0x2a, 0x4000, 0x4000) 4.736175091s ago: executing program 2 (id=394): set_mempolicy(0x4003, &(0x7f00000000c0)=0x9, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @func_proto={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x58}, 0x4, 0x700000000000000}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000040)='./file1\x00', 0x8b86010000000000, &(0x7f0000000000)=ANY=[], 0x1, 0x5ee, &(0x7f0000000540)="$eJzs3V1v29YZwPGHfpllDciKbSiCLE1Pkw5wgEyhpEaB0CuWOpK5UKRAUoV9syJo5MKw3ADpBsy+aX2xbsM27GKfYLe72cXuh90N2Hcpht1tQDEVfLNlWW/1m4zg/zMSHpGH5zyHJPiEsUgKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQw26YZtkQ1/G6W2oyuxH47SnL8/YenppM6VfEiP9IoSC301m3f3iy+M34r/tyN/10VwrxpCCH333zjfd/sLKUrz8loKuyLnLS7WcHh3vP+/3eq0m1l64rrMVo6WcS+k7bamnlhL6q12rm481mqJqOq8PtMNJtZQfaivxAbdgPVblerypd2va7XqthuTqf+fQnFdOsqV8V0/3tPf5pKbQ3Hdd1vFZSJ14c13kaH4jPnEhF2mortbPb71UnBXeU7ae4Unlo/qk9mIsrVWYNt2JWKuVypVKuPak/eWqaK2dmmCPkTI2FHLS4QS7z9A1cyFKW/8UVRzzpypaosT+2NCQQX9oTlmfy/P/jx3pSl/85SKfH+T/P8rdP6tyRJP/fSz/dm5T/J8TyrX/W4uaz8v8Hg8Ec69z6URrbgRzKnjyXvvSlJ68uK6KhnzcuuH7u8iNT0hItnjgSii+OtMVK5qhsjpK61KQmpnwkm9KUUJQ0xRFXtISyLaFEopMjypZAtFjyO/ElECUbYstDUVKWutSlKkq0lGRbfOmKJy1piJW0siO7yXavTht/Xqk8T6XKlEoz8v86+R+zDZ0Kv774CRy4gEGe/wEAAAAAwGvLSP73Pb7+X5W3klLTcbW56LAAAAAAAMAlSn7zfzeerMalt8SY4/p/8L3rCQ4AAAAAAFwKI7nHzhCRorydlvI7ofgSAAAAAAAAr4nk9//34kny7LW3xZjr+n/12gIEAAAAAAAX9ptJz9j/RzLXMCTsrBl//7cEwapx1Nl619i34gXW/nK63vJoi1HzjnEraySZ1FayT7a+a2RPvzx+COZX2WRnKA5j3LN+jZEAfpa3MCaAP+bFkQDk9/JOuuCdF+n0Rb4k7aXYdFxdsn33/bJYVhzHVvSLT3d/Kcnwf+u1V7KGP37ZXzvp8Wg/e4DimecoJhvDkDEbQ36ePG8huedi7NONV5MbMbJ+i4bs7PZ75vAOWEpXX5p/B8iXcj+tcz970n7x9PgLcZ/lUjL6W0uRHhl9GkU88HeN/aN4jRkjnxTFg7TOg40H6WRMFJXpUdTzTZ9ugnNtizmiqM7YFr1qskeO0qPgHFEAwKLszMhCxtnEn53e1kebmnKW25n1Jp/R7D7rnxdfZJ/iXgr5oi9lIy1s3ElOrCvrcvaMbh6f0eMBjDmjpzk2aedc2e0vZ96BNCnHxv3+4bjfctLvn+O4ZWK/oVsxpJBuxPyXMM8/6X3S+7RSqdbM90zzSUVWk2Fkk6j5p7+SewAAI2a/Y2dmDeO95Ko6Xjj+qvr7x18pKMnH8lL68kIeJXcbJN84KCyPabU49DWERzOuWotDb3h5NOOqrjj0opd56xpfVK9pbwAAcD3uD+VhOWf+fzR63X1nUs6Nc/n0q+PhXA4AAK6GDr4yitGvjSBwOh+V6/WyFW1qFfj2MxU4jZZWjhfpwN60vJZWncCPfNt348KHTkOHKux2On4QqaYfqI4fOlvJm99V9ur3ULctL3LssONqK9TK9r3IsiPVcEJbdbofuE64qYNk5bCjbafp2Fbk+J5a9ruBrUtKhVoPVXQa2oucphMXPdUJnLYVbKsPfbfb1qqhQztwOpGfNpj35XhNP2gnzZYWvbEBALghPjs43Hve7/deXWFh0WMEAACnfYssvXYtAQEAAAAAAAAAAAAAAAAAAAAAgDPmu5Pv68El3Ai4JiNzXl7lTYfjC3/751xDXrv2wBZX+O8gdVPiOTjc+1xEsjmDz2X4sFmSf30QH7ZX1vvy1Dr/G9yI7TN34TsHh3vrc6/l3hI5mbPoMxOAq/ZNAAAA//+DE0bp") sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000cc0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040080) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82400, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000b00)={0x0, 0xa, 0x0, &(0x7f00000004c0), 0xfffffffffffffdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r4}, 0x18) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x806, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x160) mkdir(&(0x7f0000000080)='./file/file0/../\x00', 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000408209, 0x0) mount(&(0x7f0000000d40)=@sr0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000000, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) 4.62877542s ago: executing program 1 (id=395): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000) 4.346826613s ago: executing program 4 (id=396): r0 = socket(0x10, 0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x58, 0x5ba, 0x1, @remote, @private0, 0x8, 0x7807, 0x4, 0x6}}) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000002140)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], 0x44, 0x6fc, &(0x7f00000023c0)="$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") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x2a1071a, &(0x7f0000000180)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}], [{@dont_hash}, {@uid_lt={'uid<', r2}}, {@subj_role={'subj_role', 0x3d, ':'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}, 0x82, 0x486, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x109000, 0x41) 4.156470259s ago: executing program 0 (id=397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000001b40)={'bond0\x00', {0x2, 0x4e20, @empty}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000fe54000000000000fe97000000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000be8000/0x1000)=nil, 0x1000, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000b01000/0x18000)=nil, 0x0, 0x0, 0x2d, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1401, 0x0) 4.014334097s ago: executing program 3 (id=398): r0 = socket$inet(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x1, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffe40}}]}, 0x34}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000200)={0x0, 0xfff7, 0x0, 0x0, 0x0, "e1aa535c8d201159"}) write$UHID_INPUT(r4, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="ea1d0ab6388fa8ce1af35a738ad790f37639f61a3e6fd74ab3a8fdb85a1b36efc40b9d997a10b8e7a81f2f4968496142e25c6e7f0dd1c8a3f78982a67aae8764cd2d4135d2d77f22fec0c4ace6a029050bb5e3de158083316cb479f1e32779382d556433660941d66fdd35b70124128fd9ec137f5c7ea97813108a00aef1b0d055a3903f671ee28819", 0x89, r5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='[\x00', 0xfffffffffffffffb) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, 0x0, 0x1000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) pipe2(&(0x7f0000000040), 0x0) keyctl$describe(0x6, r5, &(0x7f0000000140)=""/86, 0x56) 3.747691234s ago: executing program 1 (id=399): socket$kcm(0x21, 0x2, 0x2) pipe2$9p(&(0x7f0000000180), 0x4800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x18b742, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0x2}, {&(0x7f0000000180)=""/172, 0x2000022c}], 0x3) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) pread64(r1, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 3.292707348s ago: executing program 0 (id=400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x1000) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r3, 0x2004, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) 2.891834885s ago: executing program 2 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000002850000001b000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000900000085000000060000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) 2.676162659s ago: executing program 4 (id=402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x4000007}]}) 2.555052242s ago: executing program 1 (id=403): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000ec0)={&(0x7f0000000680)=@phonet={0x23, 0x2, 0x9, 0x6}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000700)="ac5d6cb8", 0x4}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="c8000000000000000b01000009000000e4fda58bc2a67167783cd776975a89d724c96be63f041fdd456b499e86e516c509a1ea27eb5bd178c4c6271cf456b3c647c2765ab065bafad3ca3f9606d62bdf46b59608db0b47c883c4a667479f5dc148a054b090085350c61723b740bad08286038af8c0cf606f285d54fa73683a3a614278d650b2cf5bbea6b8e902e41d9604e3b8abf50767e0052e4a9c1afd23f89d96513c91a8c20df7757abd3bb5aacbbc59a361299d5e43276d8c3c9a564663d20000000000000098"], 0x160}, 0x40c0090) 2.227220648s ago: executing program 2 (id=404): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept4$packet(r0, 0x0, 0x0, 0x800) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x420}, 0x1, 0x0, 0x0, 0x4040000}, 0x814) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file1', [{0x20, './binderfs2/custom1\x00'}], 0xa, "2673bd6ae5a8544a66d0546fc24ea675bd45ccf6ba02051f1d7d5c56703856723c2f69cb47909a588fb3b05f4420ba5e0346f1b378fadbf0aad5f7db47bb52f05100177f66eeb3b1f0ea24e2c4d0acc9130973d5ca37f96cd742d87cbdf86bb2417ca714e1aeb9040000000000000028923f16a25c7f0bd628f003b4225d3c5203cb5b7a4910cac599550b677e6708feebf4566cf0446ca525b5f3b9ee7511f563b3"}, 0xfffffd9e) madvise(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x16) getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000140)={0x1, r6}) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) ptrace$getregs(0xc, r1, 0x5, &(0x7f0000000200)=""/232) munmap(&(0x7f0000da0000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000000)="de547e22bade7607003b79e9546a58de45a574455633030000000000000042478a7b69462fc2d196137252587ab17948adf2dcc5a03d2f3e276400"/79}) 2.032225327s ago: executing program 0 (id=405): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getpeername(r0, 0x0, 0x0) 2.015300774s ago: executing program 1 (id=406): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000340)={0x40, 0x23, 0x62, {0x62, 0xc, "904cb58b7f12165402e1ea1343d1e6ba648f8b6e82c2fd6792c44359bec63122128b640131396b48a764d07d071648a5ece28ec2a8a4a611129faf40959393431dd31bcd71ca37e08a724350dcf133b8b93cdf9a2be22540341052c1615fc80f"}}, 0x0}, 0x0) 1.571870426s ago: executing program 4 (id=407): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 715.134237ms ago: executing program 0 (id=408): mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x12, 0xffffffffffffffff, 0xaeb82000) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000008900)={0x27, 0x4c21, 0x1, @local, 0x7}, 0x5) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xbf0e, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000000340)) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000140)) 169.892385ms ago: executing program 1 (id=409): r0 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x5, 0x1, 'm'}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) 0s ago: executing program 0 (id=410): r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000240)={0x14, r0, 0x309, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmmsg(r1, &(0x7f0000006e40)=[{{&(0x7f0000000240)=@xdp={0x2c, 0x8, r3, 0xe}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000400)="0ca4f685bba930fe2e48229f3ca5c8a9df98420f", 0x14}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): ved nobh option [ 239.073363][ T1660] gp8psk_fe: Frontend attached [ 239.087435][ T1660] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 239.098359][ T1660] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 239.116030][ T6160] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.152077][ T1660] gp8psk: usb in 138 operation failed. [ 239.157764][ T1660] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 239.167753][ T1660] gp8psk: found Genpix USB device pID = 203 (hex) [ 239.212768][ T1660] usb 2-1: USB disconnect, device number 3 [ 239.235426][ T6160] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.226127][ T6174] loop2: detected capacity change from 0 to 8 [ 240.352757][ T6175] netlink: 'syz.4.58': attribute type 21 has an invalid length. [ 240.360883][ T6175] netlink: 132 bytes leftover after parsing attributes in process `syz.4.58'. [ 240.415744][ T6179] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 240.428597][ T1660] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 240.493927][ T6006] udevd[6006]: setting mode of /dev/bus/usb/002/003 to 020664 failed: No such file or directory [ 240.589955][ T6006] udevd[6006]: setting owner of /dev/bus/usb/002/003 to uid=0, gid=0 failed: No such file or directory [ 240.740637][ T6182] loop3: detected capacity change from 0 to 512 [ 240.905817][ T6182] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 240.915929][ T6182] EXT4-fs (loop3): failed to open journal device unknown-block(128,0) -6 [ 241.512558][ T5858] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 241.736200][ T5858] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 241.747344][ T5858] usb 3-1: config 201 has no interface number 0 [ 241.758803][ T5858] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 241.773862][ T5858] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 241.785540][ T5858] usb 3-1: config 201 interface 249 has no altsetting 0 [ 241.931359][ T6192] loop4: detected capacity change from 0 to 1024 [ 241.962126][ T5858] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 241.972555][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.980797][ T5858] usb 3-1: Product: syz [ 241.985475][ T5858] usb 3-1: Manufacturer: syz [ 241.990258][ T5858] usb 3-1: SerialNumber: syz [ 242.010288][ T6192] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 242.177602][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.350171][ T5858] ath6kl: Failed to submit usb control message: -71 [ 242.361081][ T5858] ath6kl: unable to send the bmi data to the device: -71 [ 242.369583][ T5858] ath6kl: Unable to send get target info: -71 [ 242.388612][ T30] audit: type=1800 audit(1760366100.560:3): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.63" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 242.415923][ T5858] ath6kl: Failed to init ath6kl core: -71 [ 242.434311][ T5858] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 242.460979][ T5858] usb 3-1: USB disconnect, device number 3 [ 242.649950][ T6192] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.63: missing EA_INODE flag [ 242.727368][ T6192] EXT4-fs (loop4): Remounting filesystem read-only [ 242.734673][ T6192] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.108749][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.284496][ T5858] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 243.388075][ T6204] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 243.477234][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 243.748868][ T6206] loop0: detected capacity change from 0 to 256 [ 243.756815][ T1660] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 244.021465][ T1660] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.043393][ T5857] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 244.061923][ T5858] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.063147][ T1660] usb 3-1: not running at top speed; connect to a high speed hub [ 244.070232][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.088704][ T5858] usb 4-1: config 0 has no interface number 0 [ 244.097885][ T5858] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 244.108150][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.148854][ T1660] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.160030][ T1660] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 244.169433][ T1660] usb 3-1: config 1 has no interface number 1 [ 244.175923][ T1660] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 244.185563][ T5858] usb 4-1: config 0 descriptor?? [ 244.189115][ T1660] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 114, changing to 4 [ 244.210932][ T1660] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 36348, setting to 1023 [ 244.272713][ T6206] FAT-fs (loop0): Directory bread(block 64) failed [ 244.279773][ T6206] FAT-fs (loop0): Directory bread(block 65) failed [ 244.287294][ T6206] FAT-fs (loop0): Directory bread(block 66) failed [ 244.294705][ T6206] FAT-fs (loop0): Directory bread(block 67) failed [ 244.305050][ T6206] FAT-fs (loop0): Directory bread(block 68) failed [ 244.315848][ T6206] FAT-fs (loop0): Directory bread(block 69) failed [ 244.324034][ T6206] FAT-fs (loop0): Directory bread(block 70) failed [ 244.330884][ T6206] FAT-fs (loop0): Directory bread(block 71) failed [ 244.338248][ T6206] FAT-fs (loop0): Directory bread(block 72) failed [ 244.345255][ T6206] FAT-fs (loop0): Directory bread(block 73) failed [ 244.452034][ T5858] usb 4-1: USB disconnect, device number 5 [ 244.478786][ T5857] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 244.489230][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 244.497920][ T5857] usb 5-1: Product: syz [ 244.502453][ T5857] usb 5-1: Manufacturer: syz [ 244.512936][ T5857] usb 5-1: SerialNumber: syz [ 244.538902][ T1660] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.548812][ T1660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.557356][ T1660] usb 3-1: Product: syz [ 244.561832][ T1660] usb 3-1: Manufacturer: syz [ 244.566617][ T1660] usb 3-1: SerialNumber: syz [ 244.599121][ T5857] usb 5-1: config 0 descriptor?? [ 244.634387][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.684066][ T5857] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 244.693934][ T5857] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 244.753637][ T6206] netlink: 48 bytes leftover after parsing attributes in process `syz.0.66'. [ 244.998047][ T6207] loop4: detected capacity change from 0 to 64 [ 245.053865][ T6207] minix: Unknown parameter 'U' [ 245.247660][ T1660] hub 3-1:1.0: Invalid hub with more than one config or interface [ 245.255862][ T1660] hub 3-1:1.0: probe with driver hub failed with error -22 [ 245.436289][ T1660] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 245.604258][ T6213] loop2: detected capacity change from 0 to 64 [ 245.623760][ T1660] usb 3-1: USB disconnect, device number 4 [ 245.863704][ T5805] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.096513][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.404598][ T6212] loop3: detected capacity change from 0 to 4096 [ 246.687322][ T6223] FAULT_INJECTION: forcing a failure. [ 246.687322][ T6223] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 246.701099][ T6223] CPU: 1 UID: 0 PID: 6223 Comm: syz.0.73 Not tainted syzkaller #0 PREEMPT(none) [ 246.701241][ T6223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.701337][ T6223] Call Trace: [ 246.701401][ T6223] [ 246.701456][ T6223] __dump_stack+0x26/0x30 [ 246.701634][ T6223] dump_stack_lvl+0x1df/0x270 [ 246.701812][ T6223] dump_stack+0x1e/0x25 [ 246.701960][ T6223] should_fail_ex+0x7dc/0x8a0 [ 246.702139][ T6223] should_fail+0x2a/0x40 [ 246.702292][ T6223] should_fail_usercopy+0x2e/0x40 [ 246.702448][ T6223] _copy_from_user+0x33/0x100 [ 246.702621][ T6223] __sys_bpf+0x2c8/0xeb0 [ 246.702805][ T6223] __x64_sys_bpf+0xa4/0xf0 [ 246.703032][ T6223] x64_sys_call+0x3550/0x3e30 [ 246.703220][ T6223] do_syscall_64+0xd9/0xfa0 [ 246.703416][ T6223] ? irqentry_exit+0x16/0x60 [ 246.703590][ T6223] ? clear_bhb_loop+0x40/0x90 [ 246.703739][ T6223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.703899][ T6223] RIP: 0033:0x7f89cdf8eec9 [ 246.704024][ T6223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.704142][ T6223] RSP: 002b:00007f89cedd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.704272][ T6223] RAX: ffffffffffffffda RBX: 00007f89ce1e5fa0 RCX: 00007f89cdf8eec9 [ 246.704380][ T6223] RDX: 0000000000000082 RSI: 0000200000000600 RDI: 000000000000000a [ 246.704464][ T6223] RBP: 00007f89cedd7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.704544][ T6223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.704619][ T6223] R13: 00007f89ce1e6038 R14: 00007f89ce1e5fa0 R15: 00007ffc88fe5f58 [ 246.704748][ T6223] [ 246.990986][ T6224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 247.153128][ T5858] usb 5-1: USB disconnect, device number 3 [ 247.256522][ T6224] bond1: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 247.312395][ T6219] loop1: detected capacity change from 0 to 32768 [ 247.388280][ T6219] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.71 (6219) [ 247.416159][ T6224] bond1 (unregistering): Released all slaves [ 247.420312][ T6219] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 247.433341][ T6219] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 247.652561][ T6219] BTRFS info (device loop1): rebuilding free space tree [ 247.719989][ T6219] BTRFS info (device loop1): enabling ssd optimizations [ 247.727672][ T6219] BTRFS info (device loop1): enabling free space tree [ 247.734824][ T6219] BTRFS info (device loop1): force clearing of disk cache [ 248.254975][ T5805] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 248.576453][ T1660] IPVS: starting estimator thread 0... [ 248.677519][ T6251] loop4: detected capacity change from 0 to 1024 [ 248.702880][ T6254] IPVS: using max 240 ests per chain, 12000 per kthread [ 249.060561][ T6251] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 249.327525][ T6251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.610487][ T6250] loop2: detected capacity change from 0 to 40427 [ 249.632886][ T30] audit: type=1800 audit(1760366107.850:4): pid=6251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.75" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 249.659346][ T6250] F2FS-fs (loop2): build fault injection rate: 14 [ 249.666233][ T6250] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 249.707248][ T6250] F2FS-fs (loop2): invalid crc value [ 249.779369][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 249.820791][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 250.048890][ T6251] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.75: missing EA_INODE flag [ 250.127853][ T6250] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.144312][ T6250] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 250.162548][ T6251] EXT4-fs (loop4): Remounting filesystem read-only [ 250.169893][ T6250] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 250.181235][ T6268] netlink: 'syz.3.80': attribute type 12 has an invalid length. [ 250.196796][ T6250] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 250.227058][ T6250] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0x90/0x13e0 [ 250.470137][ T5808] syz-executor: attempt to access beyond end of device [ 250.470137][ T5808] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 250.484794][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 250.484926][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 250.484999][ T5808] Call Trace: [ 250.485045][ T5808] [ 250.485091][ T5808] __dump_stack+0x26/0x30 [ 250.485289][ T5808] dump_stack_lvl+0x1df/0x270 [ 250.485441][ T5808] dump_stack+0x1e/0x25 [ 250.485615][ T5808] f2fs_handle_critical_error+0xa6f/0xc20 [ 250.485866][ T5808] f2fs_stop_checkpoint+0x65/0x80 [ 250.486000][ T5808] f2fs_write_end_io+0x101c/0x1bc0 [ 250.486179][ T5808] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 250.486321][ T5808] bio_endio+0xeb4/0x1010 [ 250.486467][ T5808] submit_bio_noacct+0x2009/0x2930 [ 250.486661][ T5808] submit_bio+0x57c/0x630 [ 250.486812][ T5808] f2fs_submit_write_bio+0x92/0x250 [ 250.487004][ T5808] __submit_merged_bio+0x16f/0x6a0 [ 250.487189][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.487355][ T5808] __submit_merged_write_cond+0x458/0x9a0 [ 250.487562][ T5808] f2fs_write_data_pages+0x4bb2/0x5480 [ 250.487820][ T5808] ? kmsan_get_metadata+0xfb/0x160 [ 250.487968][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.488114][ T5808] ? lru_cache_disable+0x11/0x40 [ 250.488266][ T5808] ? filter_irq_stacks+0x49/0x190 [ 250.488467][ T5808] ? stack_depot_save_flags+0x35/0x7b0 [ 250.488637][ T5808] ? lru_gen_add_folio+0xd66/0x1190 [ 250.488814][ T5808] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.489042][ T5808] ? kmsan_get_metadata+0xfb/0x160 [ 250.489207][ T5808] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.489355][ T5808] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.489500][ T5808] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 250.489642][ T5808] do_writepages+0x3f2/0x860 [ 250.489828][ T5808] ? _raw_spin_unlock+0x30/0x50 [ 250.489989][ T5808] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 250.490163][ T5808] filemap_fdatawrite+0x207/0x260 [ 250.490450][ T5808] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 250.490642][ T5808] f2fs_write_checkpoint+0x10a4/0x3730 [ 250.490936][ T5808] kill_f2fs_super+0x31b/0x990 [ 250.491136][ T5808] ? __pfx_kill_f2fs_super+0x10/0x10 [ 250.491304][ T5808] deactivate_locked_super+0xcb/0x3c0 [ 250.491505][ T5808] deactivate_super+0x12f/0x140 [ 250.491689][ T5808] cleanup_mnt+0x6fb/0x780 [ 250.491818][ T5808] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.492017][ T5808] ? __pfx___cleanup_mnt+0x10/0x10 [ 250.492144][ T5808] __cleanup_mnt+0x22/0x30 [ 250.492268][ T5808] task_work_run+0x209/0x2b0 [ 250.492426][ T5808] exit_to_user_mode_loop+0x2d1/0x370 [ 250.492572][ T5808] do_syscall_64+0x1e3/0xfa0 [ 250.492734][ T5808] ? irqentry_exit+0x16/0x60 [ 250.492917][ T5808] ? clear_bhb_loop+0x40/0x90 [ 250.493061][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.493205][ T5808] RIP: 0033:0x7f0e8e3901f7 [ 250.493300][ T5808] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 250.493408][ T5808] RSP: 002b:00007ffd0b2781f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 250.493526][ T5808] RAX: 0000000000000000 RBX: 00007f0e8e411d7d RCX: 00007f0e8e3901f7 [ 250.493613][ T5808] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0b2782b0 [ 250.493693][ T5808] RBP: 00007ffd0b2782b0 R08: 0000000000000000 R09: 0000000000000000 [ 250.493776][ T5808] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0b279340 [ 250.493871][ T5808] R13: 00007f0e8e411d7d R14: 000000000003d1a8 R15: 00007ffd0b279380 [ 250.493981][ T5808] [ 250.845583][ T5808] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 251.116523][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.309867][ T6272] netlink: 72 bytes leftover after parsing attributes in process `syz.0.81'. [ 251.514148][ T6275] input: syz1 as /devices/virtual/input/input7 [ 251.700896][ T6273] loop0: detected capacity change from 0 to 2048 [ 251.772892][ T6273] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 251.851995][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 251.901271][ T6282] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 252.033030][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.044641][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.055056][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.068579][ T5858] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.078055][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.091242][ T42] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 252.271211][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.281912][ T42] usb 5-1: config 0 has no interfaces? [ 252.290081][ T42] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.300268][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.334718][ T5858] usb 2-1: config 0 descriptor?? [ 252.443195][ T42] usb 5-1: config 0 descriptor?? [ 252.663114][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 252.672358][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 252.719480][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 252.722672][ T3849] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.728719][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 252.749913][ T6278] Zero length message leads to an empty skb [ 252.867024][ T3849] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.932749][ T5858] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 252.986027][ T3849] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.010737][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 253.059563][ T3849] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.140693][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 253.158056][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.391430][ T6287] bridge_slave_1 (unregistering): left allmulticast mode [ 253.399124][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.529386][ T6275] loop1: detected capacity change from 0 to 2048 [ 253.659903][ T6275] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 253.790634][ T6275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.990957][ T5858] usb 2-1: USB disconnect, device number 4 [ 254.505555][ T6297] loop2: detected capacity change from 0 to 1024 [ 254.539794][ T6298] loop3: detected capacity change from 0 to 256 [ 255.007450][ T6298] FAT-fs (loop3): Directory bread(block 64) failed [ 255.014374][ T6298] FAT-fs (loop3): Directory bread(block 65) failed [ 255.021228][ T6298] FAT-fs (loop3): Directory bread(block 66) failed [ 255.028255][ T6298] FAT-fs (loop3): Directory bread(block 67) failed [ 255.035474][ T6298] FAT-fs (loop3): Directory bread(block 68) failed [ 255.042353][ T6298] FAT-fs (loop3): Directory bread(block 69) failed [ 255.049198][ T6298] FAT-fs (loop3): Directory bread(block 70) failed [ 255.059009][ T6298] FAT-fs (loop3): Directory bread(block 71) failed [ 255.067287][ T6298] FAT-fs (loop3): Directory bread(block 72) failed [ 255.074211][ T6298] FAT-fs (loop3): Directory bread(block 73) failed [ 255.129495][ T5858] usb 5-1: USB disconnect, device number 4 [ 255.321035][ T30] audit: type=1800 audit(1760366113.520:5): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 255.403990][ T4158] hfsplus: b-tree write err: -5, ino 4 [ 256.329108][ T6306] loop4: detected capacity change from 0 to 4096 [ 256.357803][ T6305] loop1: detected capacity change from 0 to 4096 [ 256.438323][ T6311] loop3: detected capacity change from 0 to 1024 [ 256.542304][ T6311] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 256.558446][ T6314] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.724543][ T6311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.825778][ T6309] loop2: detected capacity change from 0 to 4096 [ 256.954460][ T30] audit: type=1800 audit(1760366115.160:6): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.94" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.083667][ T6321] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.94: missing EA_INODE flag [ 257.130684][ T6320] mmap: syz.0.96 (6320): VmData 37478400 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 257.163358][ T6321] EXT4-fs (loop3): Remounting filesystem read-only [ 257.254931][ T6305] ntfs3(loop1): failed to convert "0000" to iso8859-6 [ 257.323314][ T6305] ntfs3(loop1): failed to convert "0030" to iso8859-6 [ 257.343147][ T6305] ntfs3(loop1): failed to convert name for inode 1e. [ 257.350146][ T6305] ntfs3(loop1): failed to convert "0032" to iso8859-6 [ 257.433333][ T6305] ntfs3(loop1): ino=1f, mi_enum_attr [ 257.438897][ T6305] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 257.766582][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.267469][ T6327] loop3: detected capacity change from 0 to 256 [ 258.293894][ T6327] exfat: Deprecated parameter 'utf8' [ 258.387398][ T6327] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 258.483830][ T5858] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 258.573397][ T6327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.98'. [ 258.699210][ T5858] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 258.707910][ T5858] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 258.718725][ T5858] usb 2-1: config 8 has no interface number 0 [ 258.725202][ T5858] usb 2-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 258.741296][ T5858] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 258.752214][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.901061][ T6331] loop0: detected capacity change from 0 to 256 [ 258.912035][ T1660] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 258.964907][ T5858] usb 2-1: NFC: intf ffff88804e361400 id ffffffff921b4420 [ 258.995973][ T6331] exfat: Deprecated parameter 'utf8' [ 259.143567][ T6331] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 259.168904][ T1660] usb 4-1: Using ep0 maxpacket: 32 [ 259.177076][ T6333] loop2: detected capacity change from 0 to 64 [ 259.213748][ T1660] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 259.222224][ T1660] usb 4-1: config 0 has no interface number 0 [ 259.228683][ T1660] usb 4-1: config 0 interface 12 has no altsetting 0 [ 259.329806][ T1660] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 259.339404][ T1660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.347943][ T1660] usb 4-1: Product: syz [ 259.352729][ T1660] usb 4-1: Manufacturer: syz [ 259.357535][ T1660] usb 4-1: SerialNumber: syz [ 259.378078][ T6331] input: syz1 as /devices/virtual/input/input9 [ 259.401785][ T6335] loop4: detected capacity change from 0 to 512 [ 259.428918][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'. [ 259.435464][ T1660] usb 4-1: config 0 descriptor?? [ 259.634379][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.648011][ T6335] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.678563][ T5857] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 259.911930][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.923924][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.934068][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 259.947783][ T5857] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 259.957485][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.061946][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 260.110141][ T5857] usb 1-1: config 0 descriptor?? [ 260.222304][ T9] usb 5-1: device descriptor read/64, error -71 [ 260.439400][ T1660] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 260.448403][ T1660] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 260.457966][ T1660] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 260.466228][ T1660] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 260.488062][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 260.542642][ T1660] usb 4-1: USB disconnect, device number 6 [ 260.611163][ T5974] udevd[5974]: setting mode of /dev/bus/usb/004/006 to 020664 failed: No such file or directory [ 260.642091][ T9] usb 5-1: device descriptor read/64, error -71 [ 260.665158][ T5974] udevd[5974]: setting owner of /dev/bus/usb/004/006 to uid=0, gid=0 failed: No such file or directory [ 260.703085][ T5857] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 260.762981][ T9] usb usb5-port1: attempt power cycle [ 261.143021][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 261.206719][ T9] usb 5-1: device descriptor read/8, error -71 [ 261.274135][ T1660] usb 1-1: USB disconnect, device number 6 [ 261.314098][ T6348] loop2: detected capacity change from 0 to 64 [ 261.492415][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 261.549842][ T9] usb 5-1: device descriptor read/8, error -71 [ 261.657125][ T5858] usb 2-1: USB disconnect, device number 5 [ 261.778887][ T9] usb usb5-port1: unable to enumerate USB device [ 262.433490][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.612265][ T6356] loop0: detected capacity change from 0 to 128 [ 262.758896][ T6360] loop3: detected capacity change from 0 to 1024 [ 262.799758][ T6360] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 262.847508][ T6356] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.879965][ T6356] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 262.965093][ T6360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.135727][ T30] audit: type=1800 audit(1760366121.310:7): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.108" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 263.316753][ T6370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.108: missing EA_INODE flag [ 263.386843][ T6370] EXT4-fs (loop3): Remounting filesystem read-only [ 263.793792][ T6374] netlink: 64 bytes leftover after parsing attributes in process `syz.1.113'. [ 263.813852][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.872326][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 263.993867][ T6369] loop4: detected capacity change from 0 to 32768 [ 264.062489][ T5858] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 264.073268][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 264.159687][ T9] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 264.175164][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.185344][ T9] usb 3-1: Product: syz [ 264.189714][ T9] usb 3-1: Manufacturer: syz [ 264.194698][ T9] usb 3-1: SerialNumber: syz [ 264.276582][ T5858] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 264.286118][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.333819][ T9] usb 3-1: config 0 descriptor?? [ 264.394922][ T5858] usb 1-1: config 0 descriptor?? [ 264.642665][ T5858] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 264.717710][ T6387] netlink: 56 bytes leftover after parsing attributes in process `syz.4.110'. [ 264.838805][ T9] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 264.926185][ T9] usb 3-1: USB disconnect, device number 5 [ 265.471000][ T6356] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 265.646298][ T6378] loop3: detected capacity change from 0 to 4096 [ 265.733866][ T6378] ntfs3: Unknown parameter 'tmpfs' [ 266.700763][ T6394] loop1: detected capacity change from 0 to 40427 [ 266.717344][ T6397] loop2: detected capacity change from 0 to 1024 [ 266.743456][ T6394] F2FS-fs (loop1): invalid crc value [ 266.921147][ T6401] loop3: detected capacity change from 0 to 256 [ 266.988360][ T6401] exfat: Deprecated parameter 'utf8' [ 267.065714][ T6394] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.076940][ T6394] F2FS-fs (loop1): Start checkpoint disabled! [ 267.098408][ T6394] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 267.113110][ T6394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 267.316559][ T6401] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 267.483720][ T6397] hfsplus: bad catalog entry type [ 267.654714][ T6401] input: syz1 as /devices/virtual/input/input12 [ 267.725948][ T5858] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 267.736441][ T5858] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 267.747856][ T5858] asix 1-1:0.0: probe with driver asix failed with error -71 [ 267.943469][ T5796] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.033577][ T5858] usb 1-1: USB disconnect, device number 7 [ 268.082878][ T42] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.128134][ T3560] kworker/u8:10: attempt to access beyond end of device [ 268.128134][ T3560] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.142656][ T3560] CPU: 0 UID: 0 PID: 3560 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(none) [ 268.142808][ T3560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.142943][ T3560] Workqueue: writeback wb_workfn (flush-7:1) [ 268.143147][ T3560] Call Trace: [ 268.143192][ T3560] [ 268.143236][ T3560] __dump_stack+0x26/0x30 [ 268.143378][ T3560] dump_stack_lvl+0x1df/0x270 [ 268.143554][ T3560] dump_stack+0x1e/0x25 [ 268.143693][ T3560] f2fs_handle_critical_error+0xa6f/0xc20 [ 268.143939][ T3560] f2fs_stop_checkpoint+0x65/0x80 [ 268.144093][ T3560] f2fs_write_end_io+0x101c/0x1bc0 [ 268.144275][ T3560] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 268.144428][ T3560] bio_endio+0xeb4/0x1010 [ 268.144583][ T3560] submit_bio_noacct+0x2009/0x2930 [ 268.144804][ T3560] submit_bio+0x57c/0x630 [ 268.144981][ T3560] f2fs_submit_write_bio+0x92/0x250 [ 268.145170][ T3560] __submit_merged_bio+0x16f/0x6a0 [ 268.145349][ T3560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.145511][ T3560] __submit_merged_write_cond+0x458/0x9a0 [ 268.145718][ T3560] f2fs_write_data_pages+0x4bb2/0x5480 [ 268.146001][ T3560] ? f2fs_balance_fs_bg+0x11e7/0x1240 [ 268.146188][ T3560] ? stack_depot_save_flags+0x35/0x7b0 [ 268.146330][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.146470][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.146612][ T3560] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 268.146813][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.146954][ T3560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.147114][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.147257][ T3560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.147438][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.147589][ T3560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.147735][ T3560] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 268.147872][ T3560] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 268.148007][ T3560] do_writepages+0x3f2/0x860 [ 268.148169][ T3560] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.148323][ T3560] ? __pfx_writeback_sb_inodes+0x1/0x10 [ 268.148486][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.148644][ T3560] __writeback_single_inode+0x101/0x1190 [ 268.148818][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.148965][ T3560] writeback_sb_inodes+0xac1/0x1cb0 [ 268.149213][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.149393][ T3560] wb_writeback+0x4ce/0xc00 [ 268.149570][ T3560] ? queue_io+0x491/0x790 [ 268.149736][ T3560] wb_workfn+0x397/0x1910 [ 268.149881][ T3560] ? kmsan_get_metadata+0xfb/0x160 [ 268.150032][ T3560] ? __pfx_wb_workfn+0x10/0x10 [ 268.150154][ T3560] process_scheduled_works+0xb91/0x1d80 [ 268.150357][ T3560] worker_thread+0xedf/0x1590 [ 268.150565][ T3560] kthread+0xd5c/0xf00 [ 268.150671][ T3560] ? __pfx_worker_thread+0x10/0x10 [ 268.150860][ T3560] ? __pfx_kthread+0x10/0x10 [ 268.150972][ T3560] ret_from_fork+0x1f5/0x4c0 [ 268.151129][ T3560] ? __pfx_kthread+0x10/0x10 [ 268.151256][ T3560] ret_from_fork_asm+0x1a/0x30 [ 268.151435][ T3560] [ 268.445695][ T155] hfsplus: b-tree write err: -5, ino 4 [ 268.448383][ T3560] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 268.779079][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.790681][ T42] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.800825][ T42] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 268.814133][ T42] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 268.823470][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.837287][ T42] usb 4-1: config 0 descriptor?? [ 269.307620][ T6410] binder: BINDER_SET_CONTEXT_MGR already set [ 269.313974][ T6410] binder: 6409:6410 ioctl 4018620d 200000004a80 returned -16 [ 269.533717][ T6413] loop2: detected capacity change from 0 to 512 [ 269.555618][ T6413] ext4: Unknown parameter 'rootcontext' [ 269.605492][ T6408] loop4: detected capacity change from 0 to 2048 [ 269.642087][ T42] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 269.781336][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.794309][ T6408] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.962330][ T1660] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 270.081205][ T6408] overlayfs: failed to resolve './bus': -2 [ 270.172288][ T1660] usb 3-1: Using ep0 maxpacket: 16 [ 270.223480][ T1660] usb 3-1: config 0 has an invalid interface number: 227 but max is 0 [ 270.232241][ T1660] usb 3-1: config 0 has no interface number 0 [ 270.238545][ T1660] usb 3-1: config 0 interface 227 has no altsetting 0 [ 270.404190][ T9] usb 4-1: USB disconnect, device number 7 [ 270.456305][ T1660] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 270.465804][ T1660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.474767][ T1660] usb 3-1: Product: syz [ 270.479129][ T1660] usb 3-1: Manufacturer: syz [ 270.483986][ T1660] usb 3-1: SerialNumber: syz [ 270.685281][ T1660] usb 3-1: config 0 descriptor?? [ 270.743082][ T1660] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.227/input/input14 [ 270.817834][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.838052][ T6421] fido_id[6421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 271.582458][ T6423] loop0: detected capacity change from 0 to 1024 [ 271.676622][ T6413] loop2: detected capacity change from 0 to 32768 [ 271.763951][ T6423] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 271.990411][ T6423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.999543][ T6413] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 272.040198][ T30] audit: type=1800 audit(1760366130.240:8): pid=6413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.122" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 272.200137][ T5138] bcm5974 3-1:0.227: could not read from device [ 272.283900][ T30] audit: type=1800 audit(1760366130.380:9): pid=6423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 272.337440][ T5138] bcm5974 3-1:0.227: could not read from device [ 272.347595][ T6433] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.124: missing EA_INODE flag [ 272.419552][ T5138] bcm5974 3-1:0.227: could not read from device [ 272.445406][ T1660] usb 3-1: USB disconnect, device number 6 [ 272.477509][ T5138] bcm5974 3-1:0.227: could not read from device [ 272.538858][ T6433] EXT4-fs (loop0): Remounting filesystem read-only [ 273.238477][ T5808] ocfs2: Unmounting device (7,2) on (node local) [ 274.154299][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.364704][ T6437] loop3: detected capacity change from 0 to 256 [ 274.568179][ T6441] vivid-000: disconnect [ 274.653834][ T6441] vivid-000: reconnect [ 274.734546][ T6437] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 275.126445][ T6445] loop0: detected capacity change from 0 to 512 [ 275.273277][ T6445] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 275.334468][ T6445] EXT4-fs (loop0): invalid journal inode [ 275.486261][ T6444] loop1: detected capacity change from 0 to 2048 [ 275.522890][ T6449] netlink: 'syz.4.130': attribute type 4 has an invalid length. [ 275.648989][ T6450] lo speed is unknown, defaulting to 1000 [ 275.655129][ T6450] lo speed is unknown, defaulting to 1000 [ 275.662560][ T6450] lo speed is unknown, defaulting to 1000 [ 275.684979][ T6450] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 275.723315][ T6450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.845322][ T6450] lo speed is unknown, defaulting to 1000 [ 275.855037][ T6450] lo speed is unknown, defaulting to 1000 [ 275.862932][ T6450] lo speed is unknown, defaulting to 1000 [ 275.870530][ T6450] lo speed is unknown, defaulting to 1000 [ 275.878214][ T6450] lo speed is unknown, defaulting to 1000 [ 275.926783][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 277.039609][ T6463] loop3: detected capacity change from 0 to 256 [ 277.150323][ T6463] exfat: Deprecated parameter 'utf8' [ 277.613362][ T6463] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 277.831261][ T6467] loop0: detected capacity change from 0 to 1024 [ 277.864638][ T6463] input: syz1 as /devices/virtual/input/input15 [ 277.962504][ T6467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.969481][ T6467] EXT4-fs: inline encryption not supported [ 277.975802][ T6467] EXT4-fs: Ignoring removed i_version option [ 278.169333][ T6464] loop2: detected capacity change from 0 to 4096 [ 278.379460][ T6459] loop4: detected capacity change from 0 to 65536 [ 278.389321][ T6459] xfs: Unknown parameter 'dont_hash' [ 278.426670][ T1660] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 278.472469][ T6467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.654878][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.728556][ T1660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.740792][ T1660] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.750966][ T1660] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.764255][ T1660] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.773672][ T1660] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.816132][ T30] audit: type=1800 audit(1760366137.010:10): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.137" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 278.972051][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 279.063974][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.188292][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.199133][ T9] usb 2-1: config 0 has no interfaces? [ 279.348061][ T1660] usb 4-1: config 0 descriptor?? [ 279.402631][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 279.412173][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.420369][ T9] usb 2-1: Product: syz [ 279.430258][ T9] usb 2-1: Manufacturer: syz [ 279.437503][ T9] usb 2-1: SerialNumber: syz [ 279.657792][ T9] usb 2-1: config 0 descriptor?? [ 279.816471][ T6475] loop4: detected capacity change from 0 to 128 [ 279.862239][ T1660] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 280.068908][ T6475] EXT4-fs error (device loop4): __ext4_fill_super:5512: inode #2: comm syz.4.138: iget: checksum invalid [ 280.237773][ T6475] EXT4-fs (loop4): get root inode failed [ 280.246526][ T6475] EXT4-fs (loop4): mount failed [ 280.268934][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.672155][ T1660] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 280.795707][ T42] usb 4-1: USB disconnect, device number 8 [ 280.829851][ T9] usb 2-1: USB disconnect, device number 6 [ 280.917322][ T1660] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.927908][ T1660] usb 5-1: config 0 has no interfaces? [ 281.037358][ T1660] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 281.047109][ T1660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.055689][ T1660] usb 5-1: Product: syz [ 281.060133][ T1660] usb 5-1: Manufacturer: syz [ 281.070535][ T1660] usb 5-1: SerialNumber: syz [ 281.147620][ T6484] loop0: detected capacity change from 0 to 128 [ 281.160341][ T6484] vfat: Unknown parameter '00000000000000000004' [ 281.202418][ T1660] usb 5-1: config 0 descriptor?? [ 281.483021][ T5858] usb 5-1: USB disconnect, device number 9 [ 281.600984][ T6486] loop2: detected capacity change from 0 to 256 [ 281.702303][ T6486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 282.001839][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.142'. [ 282.844178][ T6488] loop1: detected capacity change from 0 to 32768 [ 282.899776][ T6490] loop3: detected capacity change from 0 to 1024 [ 282.965406][ T6488] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.992634][ T6490] hfsplus: Unknown parameter '' [ 283.002106][ T6493] loop0: detected capacity change from 0 to 256 [ 283.207678][ T6505] loop2: detected capacity change from 0 to 22 [ 283.237071][ T6506] xt_connbytes: Forcing CT accounting to be enabled [ 283.304657][ T6488] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x252/0x21a0, inode 0x1802 dinode [ 283.319413][ T6488] XFS (loop1): Unmount and run xfs_repair [ 283.327000][ T6488] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 283.334610][ T6488] 00000000: 49 4e 80 00 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 283.343756][ T6488] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 283.352906][ T6488] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7f c1 86 28 ..e.....4.Xh...( [ 283.362025][ T6488] 00000030: 34 f7 58 68 7f c1 86 28 00 00 00 00 00 00 00 00 4.Xh...(........ [ 283.362893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 283.371021][ T6488] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 283.388348][ T6488] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 283.397429][ T6488] 00000060: ff ff ff ff bc 69 0f 52 00 00 00 00 00 00 00 02 .....i.R........ [ 283.406517][ T6488] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 ................ [ 283.415709][ T6488] XFS (loop1): metadata inode 0x1802 type 6 is corrupt [ 283.425872][ T6488] XFS (loop1): failed to read RT inodes [ 283.431958][ T6488] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 283.492880][ T6505] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 283.637368][ T6509] lo speed is unknown, defaulting to 1000 [ 283.647022][ T6509] lo speed is unknown, defaulting to 1000 [ 283.654171][ T6509] lo speed is unknown, defaulting to 1000 [ 283.702528][ T6509] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 283.778162][ T6509] lo speed is unknown, defaulting to 1000 [ 283.786897][ T6509] lo speed is unknown, defaulting to 1000 [ 283.795608][ T6509] lo speed is unknown, defaulting to 1000 [ 283.804274][ T6509] lo speed is unknown, defaulting to 1000 [ 283.812877][ T6509] lo speed is unknown, defaulting to 1000 [ 283.865935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 284.093599][ T6493] FAT-fs (loop0): Directory bread(block 64) failed [ 284.100527][ T6493] FAT-fs (loop0): Directory bread(block 65) failed [ 284.107857][ T6493] FAT-fs (loop0): Directory bread(block 66) failed [ 284.114750][ T6493] FAT-fs (loop0): Directory bread(block 67) failed [ 284.121828][ T6493] FAT-fs (loop0): Directory bread(block 68) failed [ 284.128589][ T6493] FAT-fs (loop0): Directory bread(block 69) failed [ 284.143386][ T6493] FAT-fs (loop0): Directory bread(block 70) failed [ 284.152484][ T6493] FAT-fs (loop0): Directory bread(block 71) failed [ 284.159392][ T6493] FAT-fs (loop0): Directory bread(block 72) failed [ 284.166327][ T6493] FAT-fs (loop0): Directory bread(block 73) failed [ 284.320780][ T30] audit: type=1800 audit(1760366142.530:11): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.144" name="file1" dev="loop0" ino=1048619 res=0 errno=0 [ 284.731797][ T1660] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 284.899800][ T6515] loop3: detected capacity change from 0 to 8 [ 284.941977][ T1660] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.018768][ T1660] usb 2-1: config 1 interface 0 has no altsetting 0 [ 285.107201][ T1660] usb 2-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 285.117499][ T1660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.126047][ T1660] usb 2-1: Product: syz [ 285.130442][ T1660] usb 2-1: Manufacturer: 򚈘 [ 285.135480][ T1660] usb 2-1: SerialNumber: syz [ 285.380893][ T6516] loop4: detected capacity change from 0 to 4096 [ 285.476967][ T6519] FAULT_INJECTION: forcing a failure. [ 285.476967][ T6519] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 285.491119][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.0.150 Not tainted syzkaller #0 PREEMPT(none) [ 285.491272][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 285.491356][ T6519] Call Trace: [ 285.491407][ T6519] [ 285.491460][ T6519] __dump_stack+0x26/0x30 [ 285.491650][ T6519] dump_stack_lvl+0x1df/0x270 [ 285.491828][ T6519] dump_stack+0x1e/0x25 [ 285.491984][ T6519] should_fail_ex+0x7dc/0x8a0 [ 285.492150][ T6519] should_fail_alloc_page+0x222/0x240 [ 285.492316][ T6519] __alloc_frozen_pages_noprof+0x30f/0xf00 [ 285.492537][ T6519] alloc_pages_mpol+0x328/0x860 [ 285.492691][ T6519] vma_alloc_folio_noprof+0x382/0x870 [ 285.492864][ T6519] do_wp_page+0x16bb/0x83f0 [ 285.493041][ T6519] ? handle_mm_fault+0x4781/0xded0 [ 285.493219][ T6519] ? filter_irq_stacks+0x49/0x190 [ 285.493419][ T6519] ? kmsan_get_metadata+0x31/0x160 [ 285.493590][ T6519] handle_mm_fault+0x4971/0xded0 [ 285.493825][ T6519] ? kmsan_get_metadata+0x30/0x160 [ 285.494002][ T6519] do_user_addr_fault+0xfe1/0x2550 [ 285.494248][ T6519] exc_page_fault+0x74/0xc0 [ 285.494419][ T6519] asm_exc_page_fault+0x2b/0x30 [ 285.494547][ T6519] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 285.494705][ T6519] Code: 4b 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 285.494811][ T6519] RSP: 0018:ffff88804e37bc40 EFLAGS: 00050206 [ 285.494921][ T6519] RAX: 00000000ffffffff RBX: 000000000000b161 RCX: 00000000000058a1 [ 285.494999][ T6519] RDX: 0000000058beb000 RSI: ffff888058be58c0 RDI: 0000200000007000 [ 285.495105][ T6519] RBP: ffff88804e37bc78 R08: 000000000000b161 R09: 0000000000000000 [ 285.495195][ T6519] R10: ffff888237c91028 R11: ffffd100082fa130 R12: 0000200000001740 [ 285.495289][ T6519] R13: 000020000000c8a1 R14: ffff888115852ca0 R15: ffff888058be0000 [ 285.495440][ T6519] ? _copy_to_user+0xdd/0x120 [ 285.495658][ T6519] map_lookup_and_delete_elem+0xe67/0x10a0 [ 285.495860][ T6519] __sys_bpf+0x9e6/0xeb0 [ 285.496055][ T6519] __x64_sys_bpf+0xa4/0xf0 [ 285.496270][ T6519] x64_sys_call+0x3550/0x3e30 [ 285.496469][ T6519] do_syscall_64+0xd9/0xfa0 [ 285.496651][ T6519] ? irqentry_exit+0x16/0x60 [ 285.496820][ T6519] ? clear_bhb_loop+0x40/0x90 [ 285.496962][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.497098][ T6519] RIP: 0033:0x7f89cdf8eec9 [ 285.497199][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.497308][ T6519] RSP: 002b:00007f89cedd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.497437][ T6519] RAX: ffffffffffffffda RBX: 00007f89ce1e5fa0 RCX: 00007f89cdf8eec9 [ 285.497528][ T6519] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 285.497611][ T6519] RBP: 00007f89cedd7090 R08: 0000000000000000 R09: 0000000000000000 [ 285.497694][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.497773][ T6519] R13: 00007f89ce1e6038 R14: 00007f89ce1e5fa0 R15: 00007ffc88fe5f58 [ 285.497902][ T6519] [ 285.535888][ T6512] syz_tun: entered allmulticast mode [ 285.537323][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.811362][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.052924][ T6511] syz_tun: left allmulticast mode [ 286.224732][ T1660] usbhid 2-1:1.0: can't add hid device: -71 [ 286.231491][ T1660] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 286.267445][ T6516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.338343][ T1660] usb 2-1: USB disconnect, device number 7 [ 286.476000][ T6516] fs-verity (loop4, inode 16): fs-verity keyring is empty, rejecting signed file! [ 286.802435][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.374969][ T30] audit: type=1326 audit(1760366145.580:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.397969][ T30] audit: type=1326 audit(1760366145.580:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.429271][ T6534] loop1: detected capacity change from 0 to 512 [ 287.476494][ T6534] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 287.512373][ T5858] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 287.526270][ T30] audit: type=1326 audit(1760366145.690:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.549246][ T30] audit: type=1326 audit(1760366145.690:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.572258][ T30] audit: type=1326 audit(1760366145.690:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.594835][ T30] audit: type=1326 audit(1760366145.730:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.620787][ T30] audit: type=1326 audit(1760366145.740:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.644366][ T30] audit: type=1326 audit(1760366145.740:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.667169][ T30] audit: type=1326 audit(1760366145.740:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0798eec9 code=0x7ffc0000 [ 287.860004][ T5858] usb 4-1: config 0 has an invalid interface number: 82 but max is 0 [ 287.868650][ T5858] usb 4-1: config 0 has no interface number 0 [ 287.875093][ T5858] usb 4-1: config 0 interface 82 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 287.887031][ T5858] usb 4-1: New USB device found, idVendor=2955, idProduct=1003, bcdDevice=c4.ec [ 287.896499][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.097879][ T5858] usb 4-1: config 0 descriptor?? [ 288.137193][ T6538] loop0: detected capacity change from 0 to 4096 [ 288.156498][ T6538] ntfs3: Unknown parameter '' [ 288.320367][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.332010][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.477643][ T6547] siw: device registration error -23 [ 288.503943][ T6545] loop4: detected capacity change from 0 to 256 [ 288.533306][ T6538] loop0: detected capacity change from 0 to 256 [ 288.590337][ T6538] exfat: Deprecated parameter 'namecase' [ 288.596688][ T6538] exfat: Bad value for 'uid' [ 288.601958][ T6538] exfat: Bad value for 'uid' [ 288.758503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 288.768966][ T5858] usb 4-1: USB disconnect, device number 9 [ 288.800246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 288.935146][ T6545] FAT-fs (loop4): Directory bread(block 64) failed [ 288.942038][ T6545] FAT-fs (loop4): Directory bread(block 65) failed [ 288.952016][ T6545] FAT-fs (loop4): Directory bread(block 66) failed [ 288.952880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 288.958723][ T6545] FAT-fs (loop4): Directory bread(block 67) failed [ 288.976176][ T6545] FAT-fs (loop4): Directory bread(block 68) failed [ 288.983197][ T6545] FAT-fs (loop4): Directory bread(block 69) failed [ 288.990034][ T6545] FAT-fs (loop4): Directory bread(block 70) failed [ 288.997042][ T6545] FAT-fs (loop4): Directory bread(block 71) failed [ 289.004356][ T6545] FAT-fs (loop4): Directory bread(block 72) failed [ 289.011076][ T6545] FAT-fs (loop4): Directory bread(block 73) failed [ 289.260133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 289.776702][ T6555] loop1: detected capacity change from 0 to 256 [ 289.816870][ T6556] netlink: 'syz.0.163': attribute type 10 has an invalid length. [ 289.826391][ T6556] veth1_vlan: entered allmulticast mode [ 289.849731][ T6556] team0: Device veth1_vlan failed to register rx_handler [ 289.877568][ T6555] exfat: Deprecated parameter 'namecase' [ 289.884287][ T6555] exfat: Deprecated parameter 'utf8' [ 290.135241][ T6555] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 290.582628][ T1660] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 290.849669][ T1660] usb 4-1: unable to get BOS descriptor or descriptor too short [ 290.887820][ T6571] loop4: detected capacity change from 0 to 256 [ 290.920512][ T1660] usb 4-1: config 1 interface 0 has no altsetting 0 [ 290.951402][ T1660] usb 4-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 290.961923][ T1660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.970147][ T1660] usb 4-1: Product: syz [ 290.975044][ T1660] usb 4-1: Manufacturer: 򚈘 [ 290.979947][ T1660] usb 4-1: SerialNumber: syz [ 291.058413][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.068167][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.072859][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 291.272749][ T9] usb 1-1: device descriptor read/64, error -71 [ 291.330662][ T6571] FAT-fs (loop4): Directory bread(block 64) failed [ 291.337799][ T6571] FAT-fs (loop4): Directory bread(block 65) failed [ 291.345145][ T6571] FAT-fs (loop4): Directory bread(block 66) failed [ 291.352256][ T6571] FAT-fs (loop4): Directory bread(block 67) failed [ 291.359393][ T6571] FAT-fs (loop4): Directory bread(block 68) failed [ 291.366355][ T6571] FAT-fs (loop4): Directory bread(block 69) failed [ 291.373489][ T6571] FAT-fs (loop4): Directory bread(block 70) failed [ 291.380337][ T6571] FAT-fs (loop4): Directory bread(block 71) failed [ 291.387583][ T6571] FAT-fs (loop4): Directory bread(block 72) failed [ 291.394635][ T6571] FAT-fs (loop4): Directory bread(block 73) failed [ 291.454301][ T6563] syz_tun: entered allmulticast mode [ 291.495722][ T6561] syz_tun: left allmulticast mode [ 291.606504][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 291.661103][ T1660] usbhid 4-1:1.0: can't add hid device: -71 [ 291.668574][ T1660] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 291.809808][ T1660] usb 4-1: USB disconnect, device number 10 [ 291.861950][ T9] usb 1-1: device descriptor read/64, error -71 [ 291.981111][ T9] usb usb1-port1: attempt power cycle [ 292.381977][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 292.449325][ T9] usb 1-1: device descriptor read/8, error -71 [ 292.523292][ T5858] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 292.743318][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 292.826580][ T9] usb 1-1: device descriptor read/8, error -71 [ 293.068914][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 293.068991][ T30] audit: type=1800 audit(1760366151.280:30): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.168" name="file1" dev="loop4" ino=1048622 res=0 errno=0 [ 293.111803][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 293.121949][ T6581] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.155111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 293.210850][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 293.222228][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.232738][ T5858] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.245775][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 293.260874][ T5858] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 293.274485][ T5858] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 293.283876][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.302712][ T9] usb usb1-port1: unable to enumerate USB device [ 293.333773][ T5858] usb 2-1: config 0 descriptor?? [ 293.342480][ T6575] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 293.366364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 293.394226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 293.395940][ T6582] siw: device registration error -23 [ 293.404455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 293.977049][ T5802] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 293.985704][ T5858] usb 2-1: USB disconnect, device number 8 [ 294.368057][ T6589] loop3: detected capacity change from 0 to 64 [ 294.405544][ T6587] loop4: detected capacity change from 0 to 256 [ 294.495605][ T6591] loop2: detected capacity change from 0 to 1024 [ 294.514801][ T6593] netlink: 'syz.0.178': attribute type 5 has an invalid length. [ 294.522772][ T6593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'. [ 294.561967][ T6591] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 294.662789][ T6587] FAT-fs (loop4): Directory bread(block 64) failed [ 294.669652][ T6587] FAT-fs (loop4): Directory bread(block 65) failed [ 294.677015][ T6587] FAT-fs (loop4): Directory bread(block 66) failed [ 294.690366][ T6587] FAT-fs (loop4): Directory bread(block 67) failed [ 294.699471][ T6587] FAT-fs (loop4): Directory bread(block 68) failed [ 294.706652][ T6587] FAT-fs (loop4): Directory bread(block 69) failed [ 294.713733][ T6587] FAT-fs (loop4): Directory bread(block 70) failed [ 294.720460][ T6587] FAT-fs (loop4): Directory bread(block 71) failed [ 294.727425][ T6587] FAT-fs (loop4): Directory bread(block 72) failed [ 294.734285][ T6587] FAT-fs (loop4): Directory bread(block 73) failed [ 294.855780][ T30] audit: type=1800 audit(1760366153.040:31): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.174" name="file1" dev="loop4" ino=1048623 res=0 errno=0 [ 294.923411][ T6591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.116603][ T30] audit: type=1800 audit(1760366153.330:32): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.177" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 295.220483][ T6591] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.177: missing EA_INODE flag [ 295.342252][ T6591] EXT4-fs (loop2): Remounting filesystem read-only [ 295.813163][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.543103][ T5858] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 296.562151][ T6606] loop0: detected capacity change from 0 to 32768 [ 296.657010][ T6606] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 296.788644][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 296.965303][ T5858] usb 5-1: config 1 interface 0 has no altsetting 0 [ 297.011206][ T6615] siw: device registration error -23 [ 297.020261][ T5858] usb 5-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 297.030133][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.040794][ T5858] usb 5-1: Product: syz [ 297.046364][ T5858] usb 5-1: Manufacturer: 򚈘 [ 297.051257][ T5858] usb 5-1: SerialNumber: syz [ 297.188451][ T5796] ocfs2: Unmounting device (7,0) on (node local) [ 297.297458][ T6619] lo speed is unknown, defaulting to 1000 [ 297.303701][ T6619] lo speed is unknown, defaulting to 1000 [ 297.310733][ T6619] lo speed is unknown, defaulting to 1000 [ 297.368607][ T6619] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 297.432915][ T6608] syz_tun: entered allmulticast mode [ 297.459877][ T6620] loop2: detected capacity change from 0 to 512 [ 297.593058][ T6619] lo speed is unknown, defaulting to 1000 [ 297.602069][ T6619] lo speed is unknown, defaulting to 1000 [ 297.602398][ T6607] syz_tun: left allmulticast mode [ 297.706886][ T5858] usbhid 5-1:1.0: can't add hid device: -71 [ 297.718974][ T5858] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 297.738743][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.742740][ T6619] lo speed is unknown, defaulting to 1000 [ 297.752003][ T6620] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.765367][ T6619] lo speed is unknown, defaulting to 1000 [ 297.794611][ T5858] usb 5-1: USB disconnect, device number 10 [ 297.885021][ T6619] lo speed is unknown, defaulting to 1000 [ 298.231094][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.647536][ T6625] loop0: detected capacity change from 0 to 4096 [ 299.504097][ T6631] loop3: detected capacity change from 0 to 32768 [ 299.925693][ T6629] loop1: detected capacity change from 0 to 65536 [ 300.015746][ T6629] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 300.304638][ T6629] XFS (loop1): Ending clean mount [ 300.348795][ T6643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 300.355545][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 300.364127][ T6643] vhci_hcd vhci_hcd.0: Device attached [ 300.427630][ T3583] tipc: Subscription rejected, illegal request [ 300.566525][ T5805] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 300.632351][ T5858] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 300.683960][ T9] usb 42-1: SetAddress Request (2) to port 0 [ 300.690395][ T9] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 300.874779][ T6650] loop2: detected capacity change from 0 to 64 [ 300.899153][ T5858] usb 5-1: config 0 has no interfaces? [ 300.905233][ T5858] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 300.914783][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.997315][ T6652] loop0: detected capacity change from 0 to 1024 [ 301.016317][ T5858] usb 5-1: config 0 descriptor?? [ 301.080581][ T6652] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 301.255715][ T6652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.273856][ T6644] vhci_hcd: cannot find the pending unlink 8 [ 301.503856][ T30] audit: type=1800 audit(1760366159.680:33): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 301.559385][ T6652] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.194: missing EA_INODE flag [ 301.642188][ T6652] EXT4-fs (loop0): Remounting filesystem read-only [ 302.117261][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.652537][ T6670] siw: device registration error -23 [ 303.293825][ T6669] loop0: detected capacity change from 0 to 4096 [ 303.579428][ T6673] loop2: detected capacity change from 0 to 8 [ 303.664091][ T6673] SQUASHFS error: lzo decompression failed, data probably corrupt [ 303.672733][ T6673] SQUASHFS error: Failed to read block 0x91: -5 [ 303.679152][ T6673] SQUASHFS error: Unable to read metadata cache entry [8f] [ 303.686844][ T6673] SQUASHFS error: Unable to read inode 0x11f [ 304.578889][ T6681] fuse: Bad value for 'fd' [ 304.635596][ T1660] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 304.761205][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.4.200'. [ 304.839313][ T1660] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.839999][ T6678] loop0: detected capacity change from 0 to 2048 [ 304.884914][ T1660] usb 4-1: config 1 interface 0 has no altsetting 0 [ 304.909870][ T1660] usb 4-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 304.917009][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 304.919675][ T1660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.944419][ T1660] usb 4-1: Product: syz [ 304.948800][ T1660] usb 4-1: Manufacturer: 򚈘 [ 304.953829][ T1660] usb 4-1: SerialNumber: syz [ 305.022376][ T6678] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.180211][ T30] audit: type=1800 audit(1760366163.380:34): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.202" name="file2" dev="loop0" ino=1347 res=0 errno=0 [ 305.255865][ T6678] overlayfs: failed to resolve '/Her/be"s I S$ARlK=(r"R40"i] PFPr [ 305.255865][ T6678] [qI6-e}>6ݝ}oyYЛ': -2 [ 305.268391][ T6675] syz_tun: entered allmulticast mode [ 305.322429][ T6674] syz_tun: left allmulticast mode [ 305.359765][ T1660] usbhid 4-1:1.0: can't add hid device: -71 [ 305.360349][ T1660] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 305.408493][ T1660] usb 4-1: USB disconnect, device number 11 [ 305.555169][ T30] audit: type=1326 audit(1760366163.770:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6686 comm="syz.2.204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e38eec9 code=0x0 [ 305.678221][ T6689] loop2: detected capacity change from 0 to 8 [ 305.786875][ T6689] SQUASHFS error: xz decompression failed, data probably corrupt [ 305.787020][ T6689] SQUASHFS error: Failed to read block 0x108: -5 [ 305.787098][ T6689] SQUASHFS error: Unable to read metadata cache entry [106] [ 305.787175][ T6689] SQUASHFS error: Unable to read inode 0x0 [ 306.736218][ T6700] loop3: detected capacity change from 0 to 1024 [ 306.809484][ T6700] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 306.873419][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.009620][ T30] audit: type=1800 audit(1760366165.190:36): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.207" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 307.168252][ T6700] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.207: missing EA_INODE flag [ 307.189723][ T6700] EXT4-fs (loop3): Remounting filesystem read-only [ 307.605314][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.203763][ T6728] fuse: Bad value for 'rootmode' [ 309.234283][ T6728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.215'. [ 309.436611][ T6725] loop0: detected capacity change from 0 to 2048 [ 309.666358][ T6732] tmpfs: Bad value for 'mpol' [ 309.845651][ T6725] hpfs: filesystem error: improperly stopped; already mounted read-only [ 309.845788][ T6725] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 309.845906][ T6725] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4 [ 309.892654][ T6732] loop2: detected capacity change from 0 to 1024 [ 309.934067][ T6732] EXT4-fs: Ignoring removed i_version option [ 309.934492][ T6732] EXT4-fs: inline encryption not supported [ 309.978624][ T6732] EXT4-fs (loop2): Test dummy encryption mode enabled [ 309.978989][ T6732] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 309.979131][ T6732] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 310.190291][ T6729] loop4: detected capacity change from 0 to 64 [ 310.342695][ T5858] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 310.458023][ T5857] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 310.491998][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 310.498395][ T5858] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 310.498535][ T5858] usb 1-1: config 0 has no interface number 0 [ 310.498668][ T5858] usb 1-1: config 0 interface 184 has no altsetting 0 [ 310.513679][ T5858] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 310.513833][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.513961][ T5858] usb 1-1: Product: syz [ 310.514155][ T5858] usb 1-1: Manufacturer: syz [ 310.514259][ T5858] usb 1-1: SerialNumber: syz [ 310.529031][ T5858] usb 1-1: config 0 descriptor?? [ 310.537638][ T5858] smsc75xx v1.0.0 [ 310.682081][ T5857] usb 4-1: unable to get BOS descriptor or descriptor too short [ 310.691936][ T5857] usb 4-1: config 1 interface 0 has no altsetting 0 [ 310.713522][ T5857] usb 4-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 310.713676][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.713811][ T5857] usb 4-1: Product: syz [ 310.713914][ T5857] usb 4-1: Manufacturer: 򚈘 [ 310.714018][ T5857] usb 4-1: SerialNumber: syz [ 310.937763][ T6734] syz_tun: entered allmulticast mode [ 310.966649][ T5858] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 310.966806][ T5858] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 310.966933][ T5858] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 310.967880][ T5858] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 311.003218][ T6733] syz_tun: left allmulticast mode [ 311.054920][ T5857] usbhid 4-1:1.0: can't add hid device: -71 [ 311.055490][ T5857] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 311.078624][ T5857] usb 4-1: USB disconnect, device number 12 [ 311.471366][ T6739] loop4: detected capacity change from 0 to 512 [ 311.496125][ T6739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 311.496215][ T6739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 311.541141][ T6739] EXT4-fs (loop4): 1 truncate cleaned up [ 311.543651][ T6739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.581017][ T6739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.583140][ T6739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.375774][ T5857] usb 1-1: USB disconnect, device number 12 [ 313.261117][ T6750] IPVS: fo: FWM 3 0x00000003 - no destination available [ 313.268748][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 313.358600][ T5857] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 313.595495][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.649137][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.660650][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.671001][ T5857] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.684485][ T5857] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.693861][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.766711][ T5857] usb 3-1: config 0 descriptor?? [ 314.340561][ T5857] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description [ 314.367009][ T5857] plantronics 0003:047F:FFFF.0006: parse failed [ 314.375257][ T5857] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22 [ 315.090175][ T6763] fuse: Bad value for 'rootmode' [ 315.155223][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.227'. [ 315.212271][ T6751] loop2: detected capacity change from 0 to 4096 [ 315.286667][ T6751] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 315.632557][ T6768] loop3: detected capacity change from 0 to 256 [ 315.693724][ T6751] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 315.734683][ T6751] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 315.827909][ T6751] ntfs3(loop2): ino=1b, mi_enum_attr [ 315.959685][ T6768] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 316.144682][ T5857] usb 3-1: USB disconnect, device number 7 [ 316.154194][ T30] audit: type=1800 audit(1760366174.360:37): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.228" name="file1" dev="loop3" ino=1048624 res=0 errno=0 [ 316.524393][ T1660] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 316.636725][ T6766] loop4: detected capacity change from 0 to 256 [ 316.760848][ T1660] usb 1-1: unable to get BOS descriptor or descriptor too short [ 316.781145][ T6766] exfat: Deprecated parameter 'namecase' [ 316.787341][ T6766] exfat: Deprecated parameter 'namecase' [ 316.840423][ T1660] usb 1-1: config 1 interface 0 has no altsetting 0 [ 316.897275][ T1660] usb 1-1: New USB device found, idVendor=062a, idProduct=7100, bcdDevice= 0.40 [ 316.913047][ T1660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.921288][ T1660] usb 1-1: Product: syz [ 316.927838][ T1660] usb 1-1: Manufacturer: 򚈘 [ 316.932856][ T1660] usb 1-1: SerialNumber: syz [ 317.287231][ T6777] syz_tun: entered allmulticast mode [ 317.379985][ T6775] syz_tun: left allmulticast mode [ 317.400145][ T5858] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 317.455785][ T1660] usbhid 1-1:1.0: can't add hid device: -71 [ 317.462715][ T1660] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 317.493410][ T6766] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 317.547839][ T1660] usb 1-1: USB disconnect, device number 13 [ 317.572146][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 317.637025][ T5858] usb 3-1: unable to get BOS descriptor or descriptor too short [ 317.660708][ T5858] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 317.669702][ T5858] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 317.680607][ T5858] usb 3-1: config 63 has no interface number 0 [ 317.687157][ T5858] usb 3-1: config 63 interface 66 has no altsetting 0 [ 317.772022][ T42] usb 2-1: device descriptor read/64, error -71 [ 317.783925][ T5858] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 317.793650][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.802141][ T5858] usb 3-1: Product: syz [ 317.806515][ T5858] usb 3-1: Manufacturer: syz [ 317.811321][ T5858] usb 3-1: SerialNumber: syz [ 317.863283][ T6791] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 318.022591][ T42] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 318.217889][ T42] usb 2-1: device descriptor read/64, error -71 [ 318.340527][ T42] usb usb2-port1: attempt power cycle [ 318.718403][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 318.755902][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 318.769172][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 318.778615][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 318.789730][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 318.833744][ T42] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 318.932534][ T6786] loop2: detected capacity change from 0 to 2048 [ 318.963913][ T42] usb 2-1: device descriptor read/8, error -71 [ 318.992662][ T6791] loop3: detected capacity change from 0 to 40427 [ 319.036650][ T6791] F2FS-fs (loop3): build fault injection rate: 14 [ 319.043424][ T6791] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 319.067854][ T6791] F2FS-fs (loop3): invalid crc value [ 319.100886][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 319.143576][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb4/0x1010 [ 319.232270][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 319.372455][ T42] usb 2-1: device descriptor read/8, error -71 [ 319.446940][ T6791] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 319.456248][ T6791] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 319.503601][ T42] usb usb2-port1: unable to enumerate USB device [ 319.558023][ T6791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 319.603193][ T6791] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 319.623321][ T6791] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x945/0x1e20 [ 319.636625][ T6791] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0 [ 319.651105][ T6791] F2FS-fs (loop3): inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x1072/0x1360 [ 319.662634][ T30] audit: type=1800 audit(1760366177.860:38): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.234" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 319.692848][ T6791] CPU: 0 UID: 0 PID: 6791 Comm: syz.3.234 Not tainted syzkaller #0 PREEMPT(none) [ 319.692992][ T6791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.693083][ T6791] Call Trace: [ 319.693145][ T6791] [ 319.693193][ T6791] __dump_stack+0x26/0x30 [ 319.693362][ T6791] dump_stack_lvl+0x1df/0x270 [ 319.693539][ T6791] dump_stack+0x1e/0x25 [ 319.693690][ T6791] f2fs_handle_critical_error+0xa6f/0xc20 [ 319.693946][ T6791] f2fs_stop_checkpoint+0x65/0x80 [ 319.694094][ T6791] f2fs_balance_fs+0x6f9/0x940 [ 319.694300][ T6791] ? f2fs_convert_inline_inode+0x1072/0x1360 [ 319.694520][ T6791] ? kmsan_get_metadata+0xfb/0x160 [ 319.694702][ T6791] f2fs_convert_inline_inode+0x1072/0x1360 [ 319.694939][ T6791] ? f2fs_setattr+0x18ad/0x2820 [ 319.695138][ T6791] f2fs_setattr+0x18ad/0x2820 [ 319.695304][ T6791] ? evm_inode_setattr+0x21a/0x800 [ 319.695519][ T6791] ? __pfx_f2fs_setattr+0x10/0x10 [ 319.695685][ T6791] notify_change+0x1ada/0x1bf0 [ 319.695918][ T6791] do_truncate+0x28f/0x310 [ 319.696049][ T6791] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 319.696288][ T6791] do_ftruncate+0x698/0x730 [ 319.696459][ T6791] __x64_sys_ftruncate+0x11b/0x250 [ 319.696623][ T6791] x64_sys_call+0x39b0/0x3e30 [ 319.696806][ T6791] do_syscall_64+0xd9/0xfa0 [ 319.697002][ T6791] ? irqentry_exit+0x16/0x60 [ 319.697179][ T6791] ? clear_bhb_loop+0x40/0x90 [ 319.697350][ T6791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.697525][ T6791] RIP: 0033:0x7f3d0b78eec9 [ 319.697632][ T6791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.697752][ T6791] RSP: 002b:00007f3d0c6d8038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 319.697883][ T6791] RAX: ffffffffffffffda RBX: 00007f3d0b9e5fa0 RCX: 00007f3d0b78eec9 [ 319.697990][ T6791] RDX: 0000000000000000 RSI: 0000000002007ffa RDI: 0000000000000006 [ 319.698080][ T6791] RBP: 00007f3d0b811f91 R08: 0000000000000000 R09: 0000000000000000 [ 319.698170][ T6791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.698256][ T6791] R13: 00007f3d0b9e6038 R14: 00007f3d0b9e5fa0 R15: 00007ffda146a988 [ 319.698399][ T6791] [ 319.698455][ T6791] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 319.796598][ T6798] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 320.162732][ T6786] iocharset Bp855 not found [ 321.506220][ T5858] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8a31) [ 321.524506][ T5858] uvcvideo 3-1:63.66: No valid video chain found. [ 321.703673][ T5858] usb 3-1: USB disconnect, device number 8 [ 322.058004][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.059432][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.593471][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 323.191052][ T6806] loop4: detected capacity change from 0 to 40427 [ 323.248484][ T6806] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 323.248615][ T6806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 323.285060][ T6806] F2FS-fs (loop4): invalid crc value [ 323.521125][ T6823] comedi comedi0: comedi_config --init_data is deprecated [ 323.574768][ T6822] netlink: 'syz.2.243': attribute type 3 has an invalid length. [ 323.574876][ T6822] netlink: 132 bytes leftover after parsing attributes in process `syz.2.243'. [ 323.686574][ T6806] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 323.759327][ T6806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 323.759450][ T6806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 324.358784][ T6828] loop2: detected capacity change from 0 to 256 [ 324.362263][ T6828] exfat: Deprecated parameter 'utf8' [ 324.681979][ T6828] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 324.900351][ T6828] input: syz1 as /devices/virtual/input/input17 [ 325.221889][ T1660] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 325.499379][ T1660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.519136][ T1660] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.529487][ T1660] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 325.542758][ T1660] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 325.552170][ T1660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.883236][ T1660] usb 3-1: config 0 descriptor?? [ 325.900696][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 325.910649][ T6835] nbd: must specify a size in bytes for the device [ 326.264582][ T6837] loop0: detected capacity change from 0 to 256 [ 326.444859][ T6837] exfat: Deprecated parameter 'namecase' [ 326.450861][ T6837] exfat: Deprecated parameter 'namecase' [ 326.466682][ T1660] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 326.703615][ T6837] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 327.260138][ T1660] usb 3-1: USB disconnect, device number 9 [ 327.776732][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.249'. [ 328.042896][ T6850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.053111][ T6850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.708899][ T6852] loop0: detected capacity change from 0 to 4096 [ 328.813390][ T50] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 330.301220][ T6864] loop2: detected capacity change from 0 to 32768 [ 330.455019][ T6864] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 330.759488][ T5808] ocfs2: Unmounting device (7,2) on (node local) [ 331.887290][ T6882] loop1: detected capacity change from 0 to 512 [ 331.972705][ T6882] EXT4-fs: quotafile must be on filesystem root [ 333.686804][ T6897] loop4: detected capacity change from 0 to 256 [ 334.069379][ T6897] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x3d066cc7, utbl_chksum : 0xe619d30d) [ 334.753830][ T42] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 334.930419][ T42] usb 3-1: config 0 has an invalid interface number: 42 but max is 0 [ 334.939285][ T42] usb 3-1: config 0 has no interface number 0 [ 334.945955][ T42] usb 3-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.ae [ 334.955958][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.202649][ T42] usb 3-1: config 0 descriptor?? [ 335.215934][ T42] usb-storage 3-1:0.42: USB Mass Storage device detected [ 335.284548][ T42] usb-storage 3-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 335.292619][ T42] usb-storage 3-1:0.42: This device (04cb,0100,00ae S 04 P e0) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 335.292619][ T42] Please send a copy of this message to and [ 335.441142][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.270'. [ 335.761861][ T42] usb 3-1: USB disconnect, device number 10 [ 335.985230][ T6897] exFAT-fs (loop4): error, data size is invalid(150994954) [ 335.993938][ T6897] exFAT-fs (loop4): Filesystem has been set read-only [ 336.088719][ T6915] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.553518][ T6923] loop3: detected capacity change from 0 to 4096 [ 337.621899][ T6923] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 337.758622][ T6928] loop2: detected capacity change from 0 to 4096 [ 337.811987][ T6928] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 338.084927][ T6928] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 338.092449][ T6928] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 338.102456][ T6928] ntfs3(loop2): Failed to load $Bitmap (-22). [ 338.191970][ T6928] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 338.382861][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 338.651296][ T6928] netlink: 'syz.2.276': attribute type 29 has an invalid length. [ 338.686133][ T6928] input: syz1 as /devices/virtual/input/input19 [ 339.901336][ T6935] loop4: detected capacity change from 0 to 32768 [ 339.955741][ T6935] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.098420][ C1] hrtimer: interrupt took 199971 ns [ 340.497828][ T6935] XFS (loop4): Ending clean mount [ 340.520537][ T6962] loop3: detected capacity change from 0 to 64 [ 340.859233][ T5804] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 340.947095][ T6965] loop2: detected capacity change from 0 to 256 [ 341.014344][ T6965] exfat: Deprecated parameter 'namecase' [ 341.020343][ T6965] exfat: Deprecated parameter 'namecase' [ 341.166241][ T6965] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 341.438568][ T6968] sctp: [Deprecated]: syz.0.286 (pid 6968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.438568][ T6968] Use struct sctp_sack_info instead [ 341.778274][ T6972] loop1: detected capacity change from 0 to 1024 [ 342.253783][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.270831][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.547099][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.557973][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.564951][ T5857] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 342.793814][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 342.841248][ T5857] usb 2-1: config 0 has no interfaces? [ 342.886289][ T5857] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.896004][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 342.904651][ T5857] usb 2-1: SerialNumber: syz [ 343.054437][ T5857] usb 2-1: config 0 descriptor?? [ 343.490657][ T42] usb 2-1: USB disconnect, device number 13 [ 344.529475][ T143] hfsplus: b-tree write err: -5, ino 4 [ 344.784698][ T6992] loop0: detected capacity change from 0 to 32768 [ 344.833601][ T6992] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 345.119384][ T6992] XFS (loop0): Ending clean mount [ 345.232659][ T5796] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 347.307096][ T30] audit: type=1326 audit(1760366205.520:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e8e38eec9 code=0x7ffc0000 [ 347.346595][ T7023] loop2: detected capacity change from 0 to 8 [ 347.381725][ T30] audit: type=1326 audit(1760366205.550:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0e8e38eec9 code=0x7ffc0000 [ 347.404704][ T30] audit: type=1326 audit(1760366205.550:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e8e38ef03 code=0x7ffc0000 [ 347.429528][ T30] audit: type=1326 audit(1760366205.550:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0e8e38d97f code=0x7ffc0000 [ 347.432692][ T5857] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 347.453582][ T30] audit: type=1326 audit(1760366205.550:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0e8e38ef57 code=0x7ffc0000 [ 347.482772][ T30] audit: type=1326 audit(1760366205.550:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e8e38d710 code=0x7ffc0000 [ 347.505476][ T30] audit: type=1326 audit(1760366205.560:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e8e38eacb code=0x7ffc0000 [ 347.531289][ T30] audit: type=1326 audit(1760366205.710:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0e8e38db2a code=0x7ffc0000 [ 347.555080][ T30] audit: type=1326 audit(1760366205.710:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0e8e38db2a code=0x7ffc0000 [ 347.577522][ T30] audit: type=1326 audit(1760366205.710:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0e8e38d617 code=0x7ffc0000 [ 347.607345][ T7016] loop0: detected capacity change from 0 to 128 [ 347.718115][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 347.743217][ T5857] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 347.838523][ T5857] usb 4-1: config 0 has no interfaces? [ 347.845131][ T5857] usb 4-1: config 0 has no interfaces? [ 348.094313][ T7013] loop4: detected capacity change from 0 to 4096 [ 348.101101][ T5857] usb 4-1: config 0 has no interfaces? [ 348.111613][ T5857] usb 4-1: config 0 has no interfaces? [ 348.121853][ T7013] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 348.126038][ T5857] usb 4-1: config 0 has no interfaces? [ 348.356969][ T5857] usb 4-1: config 0 has no interfaces? [ 348.379638][ T5857] usb 4-1: config 0 has no interfaces? [ 348.384227][ T5857] usb 4-1: config 0 has no interfaces? [ 348.453437][ T5857] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 348.453615][ T5857] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 348.453750][ T5857] usb 4-1: Product: syz [ 348.453853][ T5857] usb 4-1: Manufacturer: syz [ 348.453960][ T5857] usb 4-1: SerialNumber: syz [ 348.497280][ T5857] usb 4-1: config 0 descriptor?? [ 348.539092][ T7013] ntfs3(loop4): Failed to read $UpCase (-4). [ 349.256184][ T7017] loop3: detected capacity change from 0 to 1024 [ 349.923869][ T42] usb 4-1: USB disconnect, device number 13 [ 350.448206][ T7040] netlink: 128 bytes leftover after parsing attributes in process `syz.1.309'. [ 350.457909][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.1.309'. [ 350.794996][ T7042] loop2: detected capacity change from 0 to 512 [ 351.077952][ T7042] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.308: bad orphan inode 15 [ 351.137277][ T7040] loop1: detected capacity change from 0 to 4096 [ 351.159989][ T7042] ext4_test_bit(bit=14, block=18) = 1 [ 351.166826][ T7042] is_bad_inode(inode)=0 [ 351.171730][ T7042] NEXT_ORPHAN(inode)=1023 [ 351.176226][ T7042] max_ino=32 [ 351.179594][ T7042] i_nlink=0 [ 351.212700][ T7040] ntfs3: Unknown parameter '/dev/kvm' [ 351.321098][ T7042] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #15: comm syz.2.308: corrupted xattr block 19: invalid header [ 351.422130][ T7042] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 351.434183][ T7042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 351.541889][ T7042] ext4 filesystem being mounted at /77/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 351.731063][ T7044] loop0: detected capacity change from 0 to 32768 [ 351.834105][ T7044] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 352.095020][ T7042] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0009-000000000000 ro. [ 352.106223][ T7044] XFS (loop0): Ending clean mount [ 352.192093][ T5796] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 352.242268][ T7042] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0009-000000000000. [ 352.497905][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.505468][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.160965][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 354.508683][ T7079] loop3: detected capacity change from 0 to 256 [ 354.540585][ T7079] exfat: Deprecated parameter 'namecase' [ 354.546824][ T7079] exfat: Deprecated parameter 'utf8' [ 354.552792][ T7079] exfat: Deprecated parameter 'namecase' [ 354.558701][ T7079] exfat: Deprecated parameter 'utf8' [ 354.648957][ T7082] FAULT_INJECTION: forcing a failure. [ 354.648957][ T7082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.662992][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.0.314 Not tainted syzkaller #0 PREEMPT(none) [ 354.663138][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.663225][ T7082] Call Trace: [ 354.663281][ T7082] [ 354.663332][ T7082] __dump_stack+0x26/0x30 [ 354.663511][ T7082] dump_stack_lvl+0x1df/0x270 [ 354.663700][ T7082] dump_stack+0x1e/0x25 [ 354.663859][ T7082] should_fail_ex+0x7dc/0x8a0 [ 354.664045][ T7082] should_fail+0x2a/0x40 [ 354.664189][ T7082] should_fail_usercopy+0x2e/0x40 [ 354.664350][ T7082] _copy_to_user+0x35/0x120 [ 354.664521][ T7082] simple_read_from_buffer+0x1b2/0x340 [ 354.664748][ T7082] proc_fail_nth_read+0x1e0/0x2d0 [ 354.664954][ T7082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.665142][ T7082] vfs_read+0x27c/0xf90 [ 354.665325][ T7082] ? stack_depot_save_flags+0x35/0x7b0 [ 354.665479][ T7082] ? kmsan_get_metadata+0xfb/0x160 [ 354.665644][ T7082] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 354.665876][ T7082] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 354.666044][ T7082] __x64_sys_read+0x1fb/0x4d0 [ 354.666281][ T7082] x64_sys_call+0x2f9c/0x3e30 [ 354.666471][ T7082] do_syscall_64+0xd9/0xfa0 [ 354.666672][ T7082] ? irqentry_exit+0x16/0x60 [ 354.666855][ T7082] ? clear_bhb_loop+0x40/0x90 [ 354.667016][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.667175][ T7082] RIP: 0033:0x7f89cdf8d8dc [ 354.667287][ T7082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.667418][ T7082] RSP: 002b:00007f89cedd7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.667557][ T7082] RAX: ffffffffffffffda RBX: 00007f89ce1e5fa0 RCX: 00007f89cdf8d8dc [ 354.667671][ T7082] RDX: 000000000000000f RSI: 00007f89cedd70a0 RDI: 0000000000000006 [ 354.667764][ T7082] RBP: 00007f89cedd7090 R08: 0000000000000000 R09: 0000000000000000 [ 354.667858][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.667944][ T7082] R13: 00007f89ce1e6038 R14: 00007f89ce1e5fa0 R15: 00007ffc88fe5f58 [ 354.668089][ T7082] [ 354.683712][ T7072] loop2: detected capacity change from 0 to 4096 [ 354.725830][ T7079] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 357.136224][ T7098] loop2: detected capacity change from 0 to 32768 [ 357.193559][ T7098] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 357.438548][ T7115] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 357.486360][ T7098] XFS (loop2): Ending clean mount [ 357.568598][ T5808] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 357.685379][ T5857] kernel read not supported for file / (pid: 5857 comm: kworker/0:5) [ 358.650973][ T7118] loop4: detected capacity change from 0 to 32768 [ 358.807047][ T7120] loop3: detected capacity change from 0 to 32768 [ 358.838923][ T7120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.330 (7120) [ 358.859690][ T7120] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.870433][ T7120] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 358.937281][ T7118] OCFS2: ERROR (device loop4): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #72: signature = INODE0 [ 358.952924][ T7118] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 358.963193][ T7118] OCFS2: Returning error to the calling process. [ 358.969702][ T7118] (syz.4.329,7118,1):ocfs2_read_locked_inode:597 ERROR: status = -5 [ 358.978303][ T7118] (syz.4.329,7118,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 358.992531][ T7118] (syz.4.329,7118,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=0 [ 359.003734][ T7118] (syz.4.329,7118,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22 [ 359.012796][ T7118] (syz.4.329,7118,1):ocfs2_mount_volume:1758 ERROR: status = -22 [ 359.054940][ T7118] (syz.4.329,7118,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 359.262377][ T7125] capability: warning: `syz.2.331' uses deprecated v2 capabilities in a way that may be insecure [ 359.306449][ T7120] BTRFS info (device loop3): enabling ssd optimizations [ 359.314210][ T7120] BTRFS info (device loop3): enabling free space tree [ 360.088635][ T7142] loop0: detected capacity change from 0 to 1024 [ 360.178271][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 360.178356][ T30] audit: type=1800 audit(1760366218.370:55): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.330" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 360.952115][ T5857] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 361.182049][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 361.289858][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 361.325201][ T5857] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.338514][ T5857] usb 3-1: config 1 interface 0 has no altsetting 0 [ 361.387928][ T7154] loop1: detected capacity change from 0 to 512 [ 361.496254][ T7154] EXT4-fs: Ignoring removed i_version option [ 361.509333][ T5857] usb 3-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40 [ 361.519958][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.528323][ T5857] usb 3-1: Product: syz [ 361.532875][ T5857] usb 3-1: Manufacturer: syz [ 361.537675][ T5857] usb 3-1: SerialNumber: syz [ 361.575565][ T7154] EXT4-fs (loop1): can't mount with both data=journal and dax [ 362.075960][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input20 [ 362.104169][ T5138] bcm5974 3-1:1.0: could not read from device [ 362.155503][ T5138] bcm5974 3-1:1.0: could not read from device [ 362.237882][ T5138] bcm5974 3-1:1.0: could not read from device [ 362.322285][ T5138] bcm5974 3-1:1.0: could not read from device [ 362.323432][ T5857] usb 3-1: USB disconnect, device number 11 [ 363.888686][ T5799] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 363.926523][ T7158] loop4: detected capacity change from 0 to 4096 [ 364.243311][ T7158] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 365.153498][ T7158] ntfs3(loop4): Failed to load $UpCase (-22). [ 365.230480][ T42] usb 5-1: USB disconnect, device number 11 [ 365.297051][ T6644] vhci_hcd: connection reset by peer [ 365.308407][ T4158] vhci_hcd: stop threads [ 365.313928][ T4158] vhci_hcd: release socket [ 365.318726][ T4158] vhci_hcd: disconnect device [ 365.325200][ T9] usb 42-1: device descriptor read/8, error -110 [ 365.460456][ T7174] loop1: detected capacity change from 0 to 1024 [ 365.532023][ T5857] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 365.619237][ T7158] loop4: detected capacity change from 0 to 512 [ 365.770479][ T7174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 365.783503][ T7174] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.817407][ T5857] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 365.827036][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.838219][ T9] usb usb42-port1: attempt power cycle [ 365.909800][ T5857] usb 4-1: config 0 descriptor?? [ 366.187848][ T5857] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 366.273389][ T7158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.286984][ T7158] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.420560][ T3542] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 366.556516][ T9] usb usb42-port1: unable to enumerate USB device [ 366.603650][ T3542] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 366.617369][ T3542] EXT4-fs (loop1): This should not happen!! Data will be lost [ 366.617369][ T3542] [ 366.643068][ T5805] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 367.258723][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.282062][ T5857] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 367.304076][ T5857] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 367.404326][ T5857] asix 4-1:0.0: probe with driver asix failed with error -71 [ 367.442519][ T5857] usb 4-1: USB disconnect, device number 14 [ 368.317283][ T7195] loop2: detected capacity change from 0 to 256 [ 368.416656][ T7195] vfat: Unknown parameter 'shor/U0tname' [ 368.495715][ T7193] loop4: detected capacity change from 0 to 1024 [ 368.749944][ T7193] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 369.506371][ T7202] 9pnet_fd: Insufficient options for proto=fd [ 369.774209][ T7193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.242627][ T30] audit: type=1800 audit(1760366228.430:56): pid=7193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.349" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 370.802844][ T7193] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.349: missing EA_INODE flag [ 371.269325][ T7193] EXT4-fs (loop4): Remounting filesystem read-only [ 372.167437][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.337089][ T7208] loop0: detected capacity change from 0 to 4096 [ 373.042934][ T7216] mmap: syz.3.356 (7216) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 376.382120][ T7226] loop0: detected capacity change from 0 to 4096 [ 377.092635][ T7234] loop3: detected capacity change from 0 to 512 [ 377.199433][ T7234] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 377.392530][ T7234] EXT4-fs (loop3): invalid journal inode [ 377.398738][ T7234] EXT4-fs (loop3): can't get journal size [ 378.216819][ T7234] EXT4-fs (loop3): 1 truncate cleaned up [ 378.231279][ T7234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.347059][ T7226] ntfs3(loop0): Failed to read $UpCase (-4). [ 378.768680][ T7232] loop1: detected capacity change from 0 to 8192 [ 378.831376][ T7191] Set syz1 is full, maxelem 65536 reached [ 379.246148][ T7234] lo speed is unknown, defaulting to 1000 [ 379.255142][ T7234] lo speed is unknown, defaulting to 1000 [ 379.843468][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 379.898387][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.366'. [ 380.369726][ T7248] netlink: 144 bytes leftover after parsing attributes in process `syz.1.367'. [ 381.554830][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.628695][ T7252] loop2: detected capacity change from 0 to 4096 [ 382.333605][ T7257] loop1: detected capacity change from 0 to 4096 [ 382.494323][ T7261] loop0: detected capacity change from 0 to 4096 [ 382.860117][ T7252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.374784][ T7252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.783442][ T7271] loop1: detected capacity change from 0 to 8 [ 383.834488][ T7252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.346088][ T7271] SQUASHFS error: xz decompression failed, data probably corrupt [ 384.354480][ T7271] SQUASHFS error: Failed to read block 0x108: -5 [ 384.361003][ T7271] SQUASHFS error: Unable to read metadata cache entry [106] [ 384.368726][ T7271] SQUASHFS error: Unable to read inode 0x11f [ 384.562377][ T7252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.047476][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 385.243900][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.377'. [ 385.277638][ T3542] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.313138][ T3604] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.339690][ T3604] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.359347][ T3604] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.372434][ T9] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 385.383149][ T9] usb 5-1: config 5 has no interfaces? [ 385.388867][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.398235][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.514922][ T7279] warning: `syz.1.376' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 386.695350][ T50] Bluetooth: hci4: unexpected event for opcode 0x0c38 [ 387.170874][ T9] usb 5-1: string descriptor 0 read error: -71 [ 387.185663][ T9] usb 5-1: USB disconnect, device number 12 [ 387.532340][ T7287] loop1: detected capacity change from 0 to 4096 [ 388.144159][ T7293] loop0: detected capacity change from 0 to 32768 [ 388.154026][ T7293] BTRFS warning: excessive commit interval 2147483648, use with care [ 388.167292][ T7293] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.381 (7293) [ 388.246616][ T7293] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.257491][ T7293] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 388.316159][ T4206] wlan1: Trigger new scan to find an IBSS to join [ 388.389000][ T3604] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 388.403356][ T7293] BTRFS error (device loop0): failed to load root extent [ 388.411058][ T7293] BTRFS warning (device loop0): try to load backup roots slot 1 [ 388.423860][ T3849] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 388.438399][ T7293] BTRFS warning (device loop0): couldn't read tree root [ 388.445847][ T7293] BTRFS warning (device loop0): try to load backup roots slot 2 [ 388.516640][ T3849] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 388.528118][ T7293] BTRFS warning (device loop0): couldn't read tree root [ 388.535569][ T7293] BTRFS warning (device loop0): try to load backup roots slot 3 [ 388.624677][ T7293] BTRFS info (device loop0): checking UUID tree [ 388.639939][ T7313] loop3: detected capacity change from 0 to 128 [ 388.655490][ T7293] BTRFS info (device loop0): setting nodatasum [ 388.662343][ T7293] BTRFS info (device loop0): setting nodatacow [ 388.668838][ T7293] BTRFS info (device loop0): enabling ssd optimizations [ 388.676144][ T7293] BTRFS info (device loop0): turning on flush-on-commit [ 388.683375][ T7293] BTRFS info (device loop0): turning on async discard [ 388.695395][ T7293] BTRFS info (device loop0): enabling free space tree [ 388.700093][ T7313] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 388.703880][ T7293] BTRFS info (device loop0): enabling auto defrag [ 388.722862][ T7293] BTRFS info (device loop0): trying to use backup root at mount time [ 388.842436][ T7313] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.184869][ T7313] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 389.195564][ T30] audit: type=1800 audit(1760366247.389:57): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.384" name="file1" dev="loop3" ino=1048631 res=0 errno=0 [ 389.224056][ T9] lo speed is unknown, defaulting to 1000 [ 389.230020][ T9] syz0: Port: 1 Link DOWN [ 389.318188][ T7320] netlink: zone id is out of range [ 389.329845][ T7321] netlink: 'syz.3.384': attribute type 4 has an invalid length. [ 389.354575][ T9] lo speed is unknown, defaulting to 1000 [ 389.360522][ T9] syz0: Port: 1 Link ACTIVE [ 389.658649][ T7324] loop2: detected capacity change from 0 to 512 [ 389.733571][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 389.906509][ T7324] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.386: casefold flag without casefold feature [ 390.008928][ T7324] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.386: couldn't read orphan inode 15 (err -117) [ 390.065754][ T7324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.141169][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 390.256245][ T9] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 390.264879][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.275456][ T9] usb 4-1: config 0 has no interface number 0 [ 390.361378][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 390.370972][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.379793][ T9] usb 4-1: Product: syz [ 390.384409][ T9] usb 4-1: Manufacturer: syz [ 390.389211][ T9] usb 4-1: SerialNumber: syz [ 390.505357][ T9] usb 4-1: config 0 descriptor?? [ 390.575555][ T9] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 390.672705][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.705597][ T5796] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.760365][ T9] usb 4-1: USB disconnect, device number 15 [ 391.242388][ T5857] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 391.462526][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 391.523775][ T5857] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 391.533282][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.606029][ T3542] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.607963][ T5857] usb 5-1: config 0 descriptor?? [ 391.680762][ T5857] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 391.748887][ T7340] random: crng reseeded on system resumption [ 391.864838][ T5857] usb 5-1: Detected FT232B [ 392.244734][ T7341] loop2: detected capacity change from 0 to 2048 [ 392.309849][ T7332] netlink: 96 bytes leftover after parsing attributes in process `syz.4.390'. [ 392.323337][ T3604] wlan1: Trigger new scan to find an IBSS to join [ 392.387129][ T7344] loop3: detected capacity change from 0 to 1024 [ 392.408652][ T7347] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.465356][ T7344] EXT4-fs: Ignoring removed oldalloc option [ 392.471829][ T7344] EXT4-fs: Ignoring removed bh option [ 392.552815][ T7341] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 392.715209][ T7344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.752799][ T7341] Remounting filesystem read-only [ 392.954369][ T7352] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 393.111258][ T7354] pimreg: entered allmulticast mode [ 393.129744][ T7350] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 393.238082][ T7341] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 393.428250][ T7355] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 393.470080][ T3721] wlan1: Creating new IBSS network, BSSID 96:5e:f3:b7:4f:cc [ 393.527041][ T7354] netlink: 128 bytes leftover after parsing attributes in process `syz.3.393'. [ 393.536803][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 393.546211][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 394.123772][ T50] block nbd0: Receive control failed (result -32) [ 394.132777][ T5857] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 394.152904][ T5857] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 394.176715][ T5857] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 394.267307][ T5857] usb 5-1: USB disconnect, device number 13 [ 394.314173][ T5857] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 394.339330][ T5857] ftdi_sio 5-1:0.0: device disconnected [ 394.702918][ T5799] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.740490][ T7361] loop2: detected capacity change from 0 to 164 [ 394.820903][ T7362] loop4: detected capacity change from 0 to 1024 [ 394.904878][ T7361] loop2: detected capacity change from 0 to 16 [ 394.962754][ T7361] erofs (device loop2): mounted with root inode @ nid 36. [ 394.990375][ T7361] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 395.019424][ T50] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 395.052006][ T7361] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 395.072416][ T7361] erofs (device loop2): read error -117 @ 1 of nid 89 [ 395.122928][ T30] audit: type=1800 audit(1760366253.299:58): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.394" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 395.168391][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 395.656442][ T7373] syz_tun: entered allmulticast mode [ 395.696564][ T7371] syz_tun: left allmulticast mode [ 396.093953][ T4158] hfsplus: b-tree write err: -5, ino 4 [ 396.283090][ T5153] udevd[5153]: worker [6006] terminated by signal 33 (Unknown signal 33) [ 396.283306][ T5153] udevd[5153]: worker [6006] failed while handling '/devices/virtual/block/loop4' [ 397.151972][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 397.302187][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 397.315770][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.315949][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.316152][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 397.316309][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.326358][ T9] usb 2-1: config 0 descriptor?? [ 397.340466][ T9] hub 2-1:0.0: USB hub found [ 397.542225][ T9] hub 2-1:0.0: 1 port detected [ 397.622579][ T42] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 397.768973][ T9] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 397.769100][ T9] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 397.809734][ T42] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.809873][ T42] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.815892][ T42] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 397.831372][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 397.832189][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 397.840680][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 397.840820][ T42] usb 5-1: SerialNumber: syz [ 397.929845][ T9] usb 2-1: USB disconnect, device number 14 [ 398.282564][ T42] usb 5-1: 0:2 : does not exist [ 398.392367][ T42] usb 5-1: USB disconnect, device number 14 [ 398.829979][ T6217] udevd[6217]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.892087][ T7403] ===================================================== [ 398.892347][ T7403] BUG: KMSAN: uninit-value in __skb_flow_dissect+0x426a/0x9ed0 [ 398.892484][ T7403] __skb_flow_dissect+0x426a/0x9ed0 [ 398.892601][ T7403] packet_parse_headers+0xc9e/0xed0 [ 398.892715][ T7403] packet_sendmsg+0x8aed/0xa2a0 [ 398.892868][ T7403] __sock_sendmsg+0x333/0x3d0 [ 398.893018][ T7403] ____sys_sendmsg+0x893/0xd80 [ 398.893140][ T7403] ___sys_sendmsg+0x271/0x3b0 [ 398.893265][ T7403] __sys_sendmmsg+0x2d9/0x7c0 [ 398.893391][ T7403] __x64_sys_sendmmsg+0xc6/0x150 [ 398.893524][ T7403] x64_sys_call+0x21de/0x3e30 [ 398.893677][ T7403] do_syscall_64+0xd9/0xfa0 [ 398.893831][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.893957][ T7403] [ 398.893984][ T7403] Uninit was created at: [ 398.894166][ T7403] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 398.894305][ T7403] kmalloc_reserve+0x13c/0x4b0 [ 398.894410][ T7403] __alloc_skb+0x347/0x7d0 [ 398.894511][ T7403] alloc_skb_with_frags+0xc5/0xa60 [ 398.894629][ T7403] sock_alloc_send_pskb+0xacc/0xc60 [ 398.894765][ T7403] packet_sendmsg+0x743d/0xa2a0 [ 398.894910][ T7403] __sock_sendmsg+0x333/0x3d0 [ 398.895107][ T7403] ____sys_sendmsg+0x893/0xd80 [ 398.895237][ T7403] ___sys_sendmsg+0x271/0x3b0 [ 398.895364][ T7403] __sys_sendmmsg+0x2d9/0x7c0 [ 398.895498][ T7403] __x64_sys_sendmmsg+0xc6/0x150 [ 398.895636][ T7403] x64_sys_call+0x21de/0x3e30 [ 398.895791][ T7403] do_syscall_64+0xd9/0xfa0 [ 398.895947][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.896079][ T7403] [ 398.896127][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.0.410 Not tainted syzkaller #0 PREEMPT(none) [ 398.896257][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.896330][ T7403] ===================================================== [ 398.896384][ T7403] Disabling lock debugging due to kernel taint [ 398.896446][ T7403] Kernel panic - not syncing: kmsan.panic set ... [ 398.896530][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.0.410 Tainted: G B syzkaller #0 PREEMPT(none) [ 398.896673][ T7403] Tainted: [B]=BAD_PAGE [ 398.896717][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 398.896783][ T7403] Call Trace: [ 398.896825][ T7403] [ 398.896866][ T7403] __dump_stack+0x26/0x30 [ 398.897005][ T7403] dump_stack_lvl+0x53/0x270 [ 398.897142][ T7403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.897290][ T7403] dump_stack+0x1e/0x25 [ 398.897434][ T7403] vpanic+0x435/0xd30 [ 398.897605][ T7403] panic+0x15d/0x160 [ 398.897798][ T7403] kmsan_report+0x31c/0x320 [ 398.897925][ T7403] ? kmalloc_reserve+0x13c/0x4b0 [ 398.898039][ T7403] ? __msan_warning+0x1b/0x30 [ 398.898146][ T7403] ? __skb_flow_dissect+0x426a/0x9ed0 [ 398.898262][ T7403] ? packet_parse_headers+0xc9e/0xed0 [ 398.898379][ T7403] ? packet_sendmsg+0x8aed/0xa2a0 [ 398.898542][ T7403] ? __sock_sendmsg+0x333/0x3d0 [ 398.898691][ T7403] ? ____sys_sendmsg+0x893/0xd80 [ 398.898823][ T7403] ? ___sys_sendmsg+0x271/0x3b0 [ 398.898945][ T7403] ? __sys_sendmmsg+0x2d9/0x7c0 [ 398.899083][ T7403] ? __x64_sys_sendmmsg+0xc6/0x150 [ 398.899217][ T7403] ? x64_sys_call+0x21de/0x3e30 [ 398.899368][ T7403] ? do_syscall_64+0xd9/0xfa0 [ 398.899534][ T7403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.899662][ T7403] ? kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 398.899806][ T7403] ? __alloc_skb+0x1e0/0x7d0 [ 398.899909][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.900040][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.900172][ T7403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.900313][ T7403] ? __skb_flow_dissect+0x24e1/0x9ed0 [ 398.900442][ T7403] ? filter_irq_stacks+0x49/0x190 [ 398.900649][ T7403] ? stack_depot_save_flags+0x35/0x7b0 [ 398.900779][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.900908][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.901044][ T7403] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 398.901248][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.901393][ T7403] __msan_warning+0x1b/0x30 [ 398.901513][ T7403] __skb_flow_dissect+0x426a/0x9ed0 [ 398.901700][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.901851][ T7403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.901994][ T7403] ? packet_parse_headers+0xb91/0xed0 [ 398.902111][ T7403] ? filter_irq_stacks+0x49/0x190 [ 398.902299][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.902472][ T7403] packet_parse_headers+0xc9e/0xed0 [ 398.902590][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.902726][ T7403] packet_sendmsg+0x8aed/0xa2a0 [ 398.902876][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.902996][ T7403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.903160][ T7403] ? aa_label_sk_perm+0x770/0x830 [ 398.903268][ T7403] ? __pfx_tomoyo_socket_sendmsg_permission+0x1/0x10 [ 398.903444][ T7403] ? stack_depot_save_flags+0x35/0x7b0 [ 398.903571][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.903697][ T7403] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 398.903964][ T7403] ? __pfx_packet_sendmsg+0x10/0x10 [ 398.904119][ T7403] ? __pfx_packet_sendmsg+0x10/0x10 [ 398.904279][ T7403] __sock_sendmsg+0x333/0x3d0 [ 398.904454][ T7403] ____sys_sendmsg+0x893/0xd80 [ 398.904628][ T7403] ___sys_sendmsg+0x271/0x3b0 [ 398.904825][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.904966][ T7403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.905104][ T7403] __sys_sendmmsg+0x2d9/0x7c0 [ 398.905242][ T7403] ? kmsan_get_metadata+0xfb/0x160 [ 398.905369][ T7403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.905553][ T7403] __x64_sys_sendmmsg+0xc6/0x150 [ 398.905699][ T7403] x64_sys_call+0x21de/0x3e30 [ 398.905856][ T7403] do_syscall_64+0xd9/0xfa0 [ 398.906030][ T7403] ? irqentry_exit+0x16/0x60 [ 398.906181][ T7403] ? clear_bhb_loop+0x40/0x90 [ 398.906310][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.906446][ T7403] RIP: 0033:0x7f89cdf8eec9 [ 398.906529][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.906643][ T7403] RSP: 002b:00007f89cedd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 398.906747][ T7403] RAX: ffffffffffffffda RBX: 00007f89ce1e5fa0 RCX: 00007f89cdf8eec9 [ 398.906832][ T7403] RDX: 0000000000000001 RSI: 0000200000006e40 RDI: 0000000000000004 [ 398.906903][ T7403] RBP: 00007f89ce011f91 R08: 0000000000000000 R09: 0000000000000000 [ 398.906974][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.907043][ T7403] R13: 00007f89ce1e6038 R14: 00007f89ce1e5fa0 R15: 00007ffc88fe5f58 [ 398.907164][ T7403] [ 398.907655][ T7403] Kernel Offset: disabled