last executing test programs: 2m40.193495s ago: executing program 1 (id=330): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) read$dsp(r1, &(0x7f0000002580)=""/4100, 0x1004) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0xfc3a) 2m39.04765613s ago: executing program 1 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) mq_getsetattr(r6, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket$inet6(0xa, 0x80001, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000003c0012800b00010069703667726500002c0002801400060000000000000000000000ffff000000001400070000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) connect$can_bcm(r8, &(0x7f0000000000), 0x10) clock_gettime(0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00), 0x0, 0x10044, &(0x7f0000000f00)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x20000006}) r10 = gettid() kcmp$KCMP_EPOLL_TFD(r10, r10, 0x7, r1, &(0x7f0000000280)={r1, r2, 0xfffe}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x800, 0x0, 0x0, {0xb9}}, 0x14}}, 0x0) 2m35.792265887s ago: executing program 1 (id=337): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x2, 0x1, 0x80000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x8000) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe6, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22301, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'syzkaller1\x00'}}, 0x1e) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) r12 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_G_PARM(r12, 0xc0cc5615, &(0x7f0000000240)={0x1, @raw_data="f4327592b8fc28d65259d09bb849bb73ae5864f794149923950f58e23a9431fc2a0885812e84fc77e4f32192534302daed7df61bc4e3783d2c85bd4f2e50f347f3f1207e8dcde26a5192555feb175ea9a2c3cb5f86b708a8d7372ecbeae7d618f8433a9d436b4f68f4213d6bd747afffa01f883e6b83596a0279d745c42ba57ea4e6695d44b7bc5e31a80a3965fb769e0a5fcc7a0af93b73d519a63c331be9f695883cb4f4d96168485ab0bd57325bf76d1dcd78a3f86870f3f8fd61a23ff192738ddc22bc6d8d61"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x4a, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r9, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) 2m34.027539876s ago: executing program 1 (id=343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001000), 0x688600, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r3, 0x4068aea3, &(0x7f0000001040)={0xd4, 0x0, 0xc}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x989a9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000009640)='./file0\x00', 0x94, &(0x7f0000000080), 0x1, 0x971c, &(0x7f0000009680)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000014c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x26, 0x9}, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffff8, 0x8, 0xf1, 0x0, 0x2, 0x0, r2, r2}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) ftruncate(0xffffffffffffffff, 0x2007ffc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 2m32.72809234s ago: executing program 1 (id=346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000caf239d2fa904eed61302e0000612e3e06"], 0x0, 0x51, 0x0, 0x83}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="68e01bb6ed604ad45fc61c5e58311a00000007", @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYBLOB="d7fad5d91fbfc2d98f29df96abb3be050d4e156b915d3f4583fd2466747bc68162d5805926bec954fb0059a0caedbd21753222f9fbeed9da5f5bb533d228"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x1ff}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x78}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x80}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x5c}}, 0x40000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtlHVC+VUIVQJ0SOHbUicKIodR7FTmrCH7JE7EpU4wYkzByQOSD1xR+IANy7lgFRgBWqQkHDlsZ11/ji2sondjX8/aeQ38zz+3tvRvGd93swLYGLdioj9iLgWEe9GxFzneNLZ4s321nrfJ48eLB88erCcRLP5zj+TrL51LHrOaXmm85n5iPjBWxE/So4F/VNEfXdvY6lSKW93DhUb1a1ifXfv7np1aa28Vt4slRYXFudfv/da6cL6+lL1Nx9fj4jf/+7LH/1x/1s/aTVrtlPX24+L1O76zGGclumI+N5lBBuDqU5/rp3n5HOdxEVKI+JzEfFydv/PxVR2NY86epm+PcLWAQCXodmci+Zc7z4AcNWlWQ4sSQudXMBspGmh0M7hvRA30kqt3rizWtvZXGnnym7GTLq6XinPd3KFN2MmWV2fLi9k5e5+pVxKju7fi4jnI+JnuevZfmG5VlkZ5xcfAJhgzxyb//+Ta8//AMAVl39czI2zHQDA6OTH3QAAYOTM/wAwecz/ADB5zP8AMHnM/wAwecz/ADBRvv/2262tedB5/vXKe7s7G7X37q6U6xuF6s5yYbm2vVVYq9XWsmf2VAd9XqVW21p4NXbeLzbK9Uaxvrt3v1rb2Wzcz57rfb88M5JeAQBnef6lD/+SRMT+G9ezLXqe9z9wrn7xslsHXKZ03A0AxmZq3A0Axubkal/ApJCPh8n1/2azGT1r90bEw8NSz8NA+/4XoQ+GCpNaNxQ+e25/8Qny/8BTTf4fJtf58v++y8NVIP8Pk6vZTKz5DwATRo4fSAbU9/7+P9/s2Rnu938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kmazLUkLnbXAZyNNC4WIZyPiZswkq+uV8nxEPBcRf87N5Fr7CxFh3SAAeJqlf08663/dnntl9njttdx/c9lrRPz4F+/8/P2lRmN7IeJa8q/D440POsdL42g/ADBId57uzuNdnzx6sNzdRtmej7/TXly0Ffegs7VrpmM6e81nuYYb/046+22t7ytTFxB//2FEfOG0/idZbuRmZ+XT4/FbsZ8dafz0SPw0q2u/tv4tPn8BbYFJ82Fr/HnztPsvjVvZ6+n3fz4boZ5cd/w7ODH+pYfj31Sf8e/WsDFe/cN3TxxszrXrHkZ8aTrioPvhPeNPN37SJ/4rQ8b/64tfeblfXfOXEbfjtP4nR2IVG9WtYn137+56dWmtvFbeLJUWFxbnX7/3WqmY5aiL3Uz1Sf94485z/eK3+n+jT/z8gP5/fcj+/+p/7/7wq2fE/+bXTr/+L5wRvzUnfmPI+Es3fpvvV9eKv9Kn/4Ou/50h43/0t72VEwcHLTgOAFya+u7exlKlUt5+8kL+zPekFxFiiEISsX/JIR4Xcr/+6VuD35wbWXvOWYh+VVOflRZemULuHGflL/Y+HbIw7pEJuGyPb/pxtwQAAAAAAAAAAAAAAOhnFH9ONO4+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHV9GgAA///+udUz") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0xf, 0xd2, 0x32, 0x10, 0x133e, 0x815, 0xf11d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xda, 0xf6, 0x20, 0x7e, [{{0x9, 0x4, 0x5, 0x1, 0x0, 0xff, 0x12, 0x2d, 0x59}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2m27.138870159s ago: executing program 1 (id=352): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x4) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = userfaultfd(0x801) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000002, 0xdf, 0x3) 2m10.155750459s ago: executing program 32 (id=352): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) (async) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x5, &(0x7f0000000240)=0x4) (async) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) r3 = userfaultfd(0x801) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f00000a2000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000002, 0xdf, 0x3) 13.545954368s ago: executing program 5 (id=661): syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x1000, 0x3, 0x8069}, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x709282, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x45e, 0x101781) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40080, 0x0) socket(0x29, 0xa, 0x3) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf2567000000080001007f00000008000300", @ANYRES32=r2, @ANYBLOB="0800c400020000200800c30007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c000) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000300), 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x48) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000240)={0x10, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {0x2e}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 12.442010965s ago: executing program 5 (id=663): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) 12.01716005s ago: executing program 0 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x0) 11.906933823s ago: executing program 0 (id=668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, '\x00', "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "00aa0c00", "2bcfff7c6a10073b"}, 0x38) r1 = socket(0x10, 0x4, 0x9) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb}}}}]}, 0x40}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "0200", "a76768a74f5e768ffe776fa819e3b604", '32gz', "07d6871656cb51ec"}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) 11.898947484s ago: executing program 0 (id=669): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x118}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000002840)={{r0}, r4, 0x18, @inherit={0x60, &(0x7f0000000500)={0x1, 0x3, 0x571, 0x8, {0x2, 0x7fffffff, 0x101, 0x1, 0x10000}, [0x9, 0x100000000, 0x5]}}, @name="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"}) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8ba962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eedd276fc4e3f570bda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x100000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b8050000000f01c20f01c1c5c50f070fde460b0f0130679f013fc2c2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x150d, &(0x7f0000000780)="$eJzs3Al0VUXWKOC9q+qEECNeIzIEqmofuGKAIiIiMoiCDCIiIiIiMomIiBEREQERAgIiIiAi8xARGQICIkMMEcM8DzKLGGmkERGRSSaBeiu2/ej+7b/9/9f+j/c6+1urVmrn3F13n+wk99RZ697vuw2v06xuzSZEBP8S/MuXVACIBYBBAHAdAAQAUDGhYkLu8fwSU/+1J2F/rEfSr3YF7Gri/udt3P+8jfuft3H/8zbuf97G/c/buP95G/efsbxs66yi1/PIu4Pv/+dl/Pr/b+RQuYnfrC93Y/f/Rgr3P2/j/udt3P+8jfuft3H/8zbu/7+/Gv/kGPc/b+P+M5aXXe37zzyu7rjav3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4KBQB/nV/tuhhjjDHGGGOMMfbH8fmudgWMMcYYY4wxxhj7n4cgQIKCAGIgH8RCfoiDayAeroUCcB1E4HpIgBugINwIhaAwFIGikAjFoDhoMGCBIIQSUBKicBOUgpshCUpDGSgLDspBMtwC5eFWqAC3QUW4HSrBHVAZqkBVqAZ3QnW4C+6GGlAT7oFaUBvqQF24F+rBfeKvlTWEB6ERPASN4WFoAo9AU3gUmsFj0BwehxbQElpBa2jz23yoD/dDA3jgn+S/Ar3gVegNfSAV+kI/eA36wwAYCK/DIHgDBsObMATegqEwDIbD2zAC3oGR8C6MgtEwBsbCOBgPE2AiTILJkAbvwRR4H6bCBzANpsMMmAnpMAtmw4cwB+bCPPgI5sPHsAAWwiJYDBnwCWTCEsiCT2EpfAbZsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga3wOWyD7bADdsIu2A174AvYC1/CPvgKcuDr/2b+2f+Q3x0BAQUKVKgwBmMwFmMxDuMwHuOxABbACEYwAROwIBbEQlgIi2ARTMRELI7F0aBBQsISWAKjGMVSWAqTMAnLYBl06DAZk7E83ooVsAJWxIpYCSthZayCVbAaVsPqWB3vRqgcQE2shbWwDtbBe/FevA/rY31sgA2wITbERtgIG2NjbIJNsCk2xWbYDJtjc2yBLbAVtsI22AbbYltsh+2wPbbHDtgBO2JHTMEU7ISdsDN2xi7YBbtiV+yG3bA79sAe+Aq+gq/iq9gHa4m+2A/7YX/svy/3j+F1fAMH45v4Jr6FQ3EYDse38W18B0fiGRyFo3EMjsHqYjxOwIlIYjKmYRpOwSk4FafiNJyO03EmpuMsnI2zcQ7Oxbn4Ec7Hj/FjXIgLcTFmYAZm4hLMwixcimcxG5fhclyBK3EVrsQ1uBbX4HrcgOtxE27CLbgFP8fPcTtux524E3fjbvwCv8Av8UscijmYg/txPx7AA3gQD+IhPISH8TAewSN4FI/iMTyGx/EEnsQTeBpP4xk8i+fwHF7AC3gRX0r8tunu0uuGgsilhBIxIkbEilgRJ+JEvIgXBUQBERERkSASREFRUBQShUQRUUQkikRRXBQXRhhBIhQlRAkRFVFRSpQSSSJJlBFlhBNOJItkUV6UFxVEBVFR3C4qiTtEZVFFPOWqiWqiumjv7hY1RE1RU9QStUUdUVfUFfVEPVFf1BcNRAPRUDQUjcRDorHoiwPxEZHbmWZiGDYXw7GFaClaidbiHXxCtBUjsZ14SrQXT4vROAo7irYuRTwnOokJ2Fm8ICbii6KrmIzdxMuiu+gheopXRC/RzvUWfcQ07Cv6iZnYXwwQA8XrYg7WFrkdqyPeEkPFMDFcvC0W4ztipHhXjBKjxRgxVowT48UEMVFMEpNFmnhPTBHvi6niAzFNTBczxEyRLmaJ2eJDMUfMFfPER2K++FgsEAvFIrFYZIhPRKZYIrLEp2Kp+Exki2ViuVghVopVYrVYI9aKdWK92CA2ik1is9gitorPxTaxXewQO8UusVvsEV+IveJLsU98JXLE12K/+JM4IL4RB2MAQHwrDovvxBHxvTgqfhDHxI/iuDghTopT4rT4SZwRZ8U5cV5cED+Li+KSuCy8AIlSSCmVDGSMzCdjZX4ZJ6+R8fJaWUBeJyPyepkgb5AF5Y2ykCwsi8iiMlEWk8WllkZaSTKUJWRJGZU3yVLyZpkkS8sysqx0spxMlrfI8vJWWUHeJivK22UleYesLKvIqrKavFNWl3fJu2UNWVPeI2vJ2rKOrCvvlfXkfbK+vF82kA/IhvJB2Ug+JBvLh2UT+YhsKh+VzeRjsrl8XLaQLWUr2Vq2kU/ItvJJGQsA7eXTsoN8RnaUz8oU+ZzsJJ+XneULsot8UXaVL8lu8mXZXfaQPeUleVl62Vv2kamyr+wnX5P95QA5UL4uB8k35GD5phwi35JD5TA5XL4tR8h35Ej5rhwlR8sxcqwcJ8fLCXKinCQnyzT5npwi35dT5QdympwuZ8iZMl3OkgN/XWnefyH//X+QP+SXZ98it8rP5Ta5Xe6QO+UuuVvukXvkXrlX7pP7ZI7MkfvlfnlAHpAH5UF5SB6Sh+VheUQekUflUXlMHpPH5Ql5Xp6Sp+VP8ow8K8/K8/KCvCAv/vozAIVKKKmUClSMyqdiVX4Vp65R8epaVUBdpyLqepWgblAF1Y2qkCqsiqiiKlEVU8WVVkZZRSpUJVRJFVU3qVLqZpWkSqsyqqxyqpxKVrf8y/m/V18b1Ua1VW1VO9VOtVftVQfVQXVUHVWKSlGdVCfVWXVWXVQX1VV1Vd1UN9VddVc9VU/VS/VSvVVvlapSVT/1muqvBqiB6nU1SL2hBqvBaogaooaqoWq4Gq5GqBFqpBqpRqlRaowao8apcWqCmqAmqUkqTaWpKWqKmqqmqmlqmpqhZqh0la5mq9lqjpqj5ql5ar6arxaoBWqRWqQyVIbKVJkqS2WppWqpylbL1DK1Qq1Qq9QqtUatUevUOrVBbVCb1CaVrbaqrWqb2qZ2qB1ql9ql9qg9aq/aq/apfSpH5aj9ar86oA6og+qgOqQOqcPqsDqijqij6qg6po6p4+q4OqlOqtPqtDqjzqhz6py6oC6oi+qiuqwu5172BSIQgQpUEBPEBLFBbBAXxAXxQXxQICgQRIJIkBAkBAWDG4NCQeGgSFA0SAyKBcUDHZjABhSEQYmgZBANbgpKBTcHSUHpoExQNnBBuSA5uCUoH9waVAhuCyoGtweVgjuCykGVoGpQLbgzqB7cFdwd1AhqBvcEtYLaQZ2gbnBvUC+4L6gf3B80CB4IGgYPBo2Ch4LGwcNBk+CRoGnwaNAseCxoHjwetAhaBq2C1kGbP3R9788UftL11n10qu6r++nXdH89QA/Ur+tB+g09WL+ph+i39FA9TA/Xb+sR+h09Ur+rR+nReoweq8fp8XqCnqgn6ck6Tb+np+j39VT9gZ6mp+sZeqZO17P0bP2hnqPn6nn6Iz1ff6wX6IV6kV6sM/QnOlMv0Vn6U71Uf6az9TK9XK/QK/UqvVqv0Wv1Or1eb9Ab9Sa9WW/RW/XnepvernfonXqX3q336C/0Xv2l3qe/0jn6a71f/0kf0N/og/rP+pD+Vh/W3+kj+nt9VP+gj+kf9XF9Qp/Up/Rp/ZM+o8/qc/q8vqB/1hf1JX1Z+9yL+9yXd6OMMjEmxsSaWBNn4ky8iTcFTAETMRGTYBJMQVPQFDKFTBFTxCSaRFPcFDe5yJApYUqYqImaUqaUSTJJpowpY5xxJtkkm/KmvKlgKpiKpqKpZCqZyqayqWqqmjvNneYuc5epYWqYe8w9prapbeqauqaeqWfqm/qmgWlgGpqGppFpZBqbxqaJaWKamqammWlmmpvmpoVpYVqZVqaNaWPamramnWln2pv2poPpYDqajibFpJhOppPpbDqbLqaL6Wq6mm6mm+luupuepqfpZXqZ3qa3STWppp/pZ/qb/magGWgGmUFmsBlshpghZmz5DTVy9ycjzAgz0ow0o8xoM8aMNePMeDPBTDSTzGSTZtLMFDPFTDVTzTQzzcwwM0y6STezzWwzx8wx88w8M9/MNwvMArPILDIZJsNkmkyTZbLMUrPUZJtss9wsNyvNSrParDZrzVqz3qw3G81Gs9lsNlvNVrPNbDM7zA6zy+wye8wes9fsNfvMPpNjcmJ/3UKZg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWlOmtPmtDljzphz5py5YH42F80lc9l4E2sFxNlrbLy91haw19lYm9/+bVzEFrWJtpgtbrUtZAv/XWystUm2tC1jy1pny9lke8tv4sq2iq1qq9k7bXV7l737N3E9e5+tb++3DewDtq699+/ihvZB28g+Zhvbx20T29I2ta1tM/uYbW4fty1sS9vKtrYd7DO2o33WptjnbCf7/G/iTLvErrXr7Hq7we61X9pz9rw9Yr+3F+zPtrftYwfZN+xg+6YdYt+yQ+2w38Rj7Fg7zo63E+xEO8lO/k08w8606XaWnW0/tHPs3N/EGfYTO99m2QV2oV1kF/8S59aUZT+1S+1nNtsus8vtCrvSrrKr7Zr/XesKu8lutlvsHvuF3Wa32x12p91ld/8S557HPvuVzbFf28P2O3vAfmMP2qP2kP32lzj3/AB+sMfsj/a4PWFP2lP2tP3JnrFnfzn/3HM/ZS/Zy9ZbICRBkhQFFEP5KJbyUxxdQ/F0LRWg6yhC11MC3UAF6UYqRIWpCBWlRCpGxUmTIUtEIZWgkhSlm6gU3UxJVJrKUFlyVI6S6RYqT7dSBbqNKtLtVInuoMpUhapSNbqTqtNddDfVoJp0D9Wi2lSH6tK9VI/uo/p0PzWgB6ghPUiN6CFqTA9TE3qEmtKj1Iweo+b0OLWgltSKWlMbeoLa0pPUjp6i9vQ0daBnqCM9Syn0HHWi56kzvUBd6EXqSi9RN3qZulMP6kmvUC96lXpTH0qlvtSPXqP+NIAG0us0iN6gwfQmDaG3aCgNo+H0No2gd2gkvUujaDSNobE0jsbTBJpIk2gypdF7NIXep6n0AU2j6TSDZlI6zaLZ9CHNobk0jz6i+fQxLaCFtIgWUwZ9Qpm0hLLoU1pKn1E2LaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCt9TttoO+2gnbSLdtMe+oL20pe0j76iHPqa9tOf6AB9Qwfpz3SIvqXD9B0doe/pKP1Ax+hHOk4n6CSdotP0E52hs3SOztMF+pku0iW6TJ4gxFCEMlRhEMaE+cLYMH8YF14TxofXhgXC68JIeH2YEN4QFgxvDAuFhcMiYdEwMSwWFg91aEIbUhiGJcKSYTS8KSwV3hwmhaXDMmHZ0IXlwuTwlrB8eGtYIbwtrBjeHlYK7wgrh1XCxx6oFt4ZVg/vCu8Oa4Q1w3vCWmHtsE5YN7w3rBfeF9YP7w8bhA+EFcIHw0bhQ2Hj8OGwSfhI2DR8NGwWPhY2Dx8PW4Qtw1Zh67BN+ETYNnwybBc+FbYPnw47hM+EHcNnw5TwubBT+PzvHk8N+4b9wtfC10Lv75eLooujGdFPopnRJdGs6KfRpdHPotnRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHN0S1R7+vmA4dOOOmUC1yMy+diXX4X565x8e5aV8Bd5yLuepfgbnAF3Y2ukCvsiriiLtEVc8WddsZZRy50JVxJF3U3uVLuZpfkSrsyrqxzrpxLdq1dG9fGtXVPunbuKdfePe2eds+4Z9yz7ln3nOvknned3Quui3vRdXUvuZfcy6676+F6uldcL/eq6+36uFSX6vq5fq6/6+8GuoFukBvkBrvBbogb4oa6oW64G+5GuBFupBvpRrlRbowb48a5cW6Cm+AmuUkuzaW5KW6Km+qmumlumpvhZrh0l+5mu9lujpvj5rl5bn7SfLfALXCL3CKX4TJcpst0WS7LLXVLXbbLdsvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XM5Lsftd/vdAXfAHXR/dofct+6w+84dcd+7o+4Hd8z96I67E+6kO+VOu5/cGXfWnXPn3QX3s7voLrnLzru0yHuRKZH3I1MjH0SmRaZHZkRmRtIjsyKzIx9G5kTmRuZFPorMj3wcWRBZGFkUWRzJiHwSyYwsiWRFPo0sjXwWyY4siyyPrIisjKyKeF9sW+hL+JI+6m/ypfzNPsmX9mV8We98OZ/sb/Hl/a2+gr/NV/S3+0r+Dl/ZV/FV/eO+hW/pW/nWvo1/wrf1T/p2/inf3j/tO/hnfEf/rE/xz/lO/nnf2b/gu/gXfVf/ku/mX/bdfQ/f07/ie/lXfW/fx6f6vr6ff8339wP8QP+6H+Tf8IP9m36If8sP9cP8cP+2H+Hf8SP9u36UH+3H+LF+nB/vJ/iJfpKf7NP8e36Kf99P9R/4aX66n+Fn+nQ/y8/2H/o5fq6f5z/y8/3HfoFf6Bf5xT7Df+Iz/RKf5T/1S/1nPtsv88v9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vf+63+e1+h9/pd/ndfo//wu/1X/p9/iuf47/2+/2f/AH/jT/o/+wP+W/9Yf+dP+K/90f9D/6Y/9Ef9yf8SX/Kn/Y/+TP+rD/nz/sL/md/0V/yl/+r71mL+R+6jc4YY4wx9v+JtN853vcffE/8OnL1A4Brtxc99LfHJQBsLPSX+QCR2CECAM/16fbIX0etWqmpqb8+NltCUHIhAESu5P9yifZrvAzawzOQAk9B+X9Y3wDR4wL9zvrR2wHi/iYn9i8fc/Af1r/1P1n/iafHZFYKzyX8k/UXAiSVvJKTH67EV9av8J+sX7jt79Sf/5s0gHZ/kxMPV+Ir6yfDk/A8pPzdIxljjDHGGGOMsb8YIKp2odwdMfzz/XmiupKTD67Ev7c/Z4wxxhhjjDHG2NX3Yo+ezz6RkvJUF57whCd/1OSvd8v+X6nn/2Bylf8xMcYYY4wxxv5wVy76r3YljDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZY3vV/4+PErvY5MsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1fb/woAAP//xiAyZg==") r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x4000}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0xe, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="460a000000000000611134000000000018000d000000000000000000070000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mkdir(&(0x7f0000000580)='./file2\x00', 0x54) mount$overlay(0x0, &(0x7f0000000700)='./file1/file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r10, 0xfffffffffffffffd, 0xbb) 11.653818978s ago: executing program 0 (id=670): r0 = syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000200)={[{@pquota}, {@discard}, {@swalloc}, {@grpid}, {@logbufs={'logbufs', 0x3d, 0x3}}, {@noalign}, {@inode64}, {@grpquota}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$eJzs3QW8rGWheP994ACHDkGwACkxSQkD6VBESVFCkJYUEAGlQwkVFAEFFFCQ7u4u6e7u7o7/58AB8bjgcn9/74XLWuvj2bNn5t2zn3m+87zu2e9mZsl5F51zYGCcgTd68/SfnbPr7csuNuaC6x678+Dr9tphoYeGXTzyGyfjzj7sdI5hp3MODAwMGnY7g964bPBsxxw7wsDggaH/+2djjDraCGMMDIw27Oyw2xmY+Y2T0fd/c7vXhosHOunQb7f9G/9eb8yhNzL0k6WXe2WtgYGBIW/7+qHjmvbf7qi0JeeYb95/Wr3lNsKwqwf987rXTwe/8W/0fQcGRt974J0fH0O3HeltX/u/2dDvOc7kA4vf/j587/9zLTnHfAsM5z90LY447LKZh67x4degseEf5zssuvoDw6Zw0LCJG/y29fJ+PO7/n1pyjnkXHHjndTyw0Dyb3P/a6/vNwXMPDAyeZ2Bg8LwDA4Pne7896j/T+/rgq6qqqvelOeacYehz9hGG+3lgyJs/19LPhRe8PN3dAwODF3rjeeLg5d58LlhVVVVVVVVVH8zmmHOGueD5/zjv9vx/0pO3Hrfn/1VVVVVVVVX/d1pgjjlnGPpcf7jn/xO92/P/xx88dL83/vZ/9pnf+KpX3987UVVVVVVVVVXv2rwL4PP/Sd/t+f9Fx0x6ac//q6qqqqqqqv7vtMhrr7222dteZ2/YxVO/eT09/z/1vluXed8GXFVVVVVVVVX/7V595KTT/vma7xMPDPd676837PcCg4444/LL37eBfjAa9O+/D9n8/R7T/9+GOg85aNKBgbUWf7+HUu9D/2deq77+R8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9w/H/t17//9SjVnjzveA/M+UM15/0z698/b3/By+0wCNbvE9Dfz/6sB7/H1ht0MDAMN9xVhsYGFhojkUWm3pgYOCk62eYcoqBt66bZeh1Xx1vxNffIP7N/0xknnH5hjef7I3ToQ+UgfHfuo0jXr/9BV7bZ8RBww3ibY173H77rbrkczMOfzrVO9+PEd76bMxjH3zzv2UZYbiNhrzDF795+2/el+Gdh4196qFjn2b9NdeZZr2NNv7iamsuv8pKq6y01qzTzzTdjLPOOtNM06y82horTfvGx3eas0lf/zjXe5mzMYafs0fmePucDX/f3mnOJn33OXv9Fne5cMg33pyzwf/NOZvr3eds0tWGfaNxZx9pYLnX52bQwMC4c480sOHQM9ONMjAw7jzDtp1o6LZfG2+EgYGd/nlHh342yluPwUGbD91myXkXnfON3dTAwD9P/9k7vJ/9yMNGPvuw0zmGnc75xrcZZ+CfD8XBsx1z7AhD5+JfpmOMUUcbYYyBgdGGnR12OwOzvnEy2slvbvcO77M+3EBff5mV7d/493pjDgwMjD70k4mXP3WboVP/v/A+7f9P////b16zDHrr8Tho2L9h27zhNcd8C/zze70+DUPnbsRhl8081OQ//Nb2/9K/jXfSIQOTvst43+V1cV6PHl9rnDTBlv+p18Wh8U70LuN9l9fxfcfxLnH37g+8cVP/sfEOt69b8PWPs7+Xfd3Au+/rRqQbWOmSTw2/r/vWOw/xX3aXb87RKMNt9E77uon2nGTzobc/+7vv6xYcOvaR/mVfN8LAwLhzvbmvG7rjm3ekgZ2Gnpl+6Jn5Rho4YOiZGV4/M+rAGUPPfGmFtddYcegF8//742DqQf/yB5qwzuYdbp0Nett9HzTc33cOfuN09H3ffA+nd9hvDhp2t/7LfQU9bsd5l/G+y/tP4TwPvWzFI4dM8J96/yka75B3H+87vV/2O453x2dPvf0/PN631tlIb5uu+d/LOpv0X9fZ0Ls44ttWxnv9OWxF2P6Nzyd669Y22PTBt36mGGm42/2vfqaY/93X2TirDfd12+09MOjd5ma+9zI3n/y3fdAWb5+b9/rz1tSTv3H9iO8yN6PMuuxUb87NyP/NuZnvvzs3sw+M+K9zM3hgnoGBgSmG7R/mfS9zM9G7z817fdyMBtu/8flKb1009w4Hnffm3Aw/F//V3Mz7352bSd963Ezx+nWTjTAw8sgDGy6//vrrTvfGxzfPTv/Gx3dfg3O/l7kc5z8zlx8f/E5z+c+H6hh3X7rvf7EG/22f/ubtz/3fncuBt+ZyYLXhF0t9UOv3f+7yd5e/u/zd5e8uf3f5i3uH4/9vvf7/buN8dedhv9wY6dJJJtz2/R7v+9yH+vj/MN9/Of6/7YSTXDrCwFvXvevx2Te2+UAen535jZPR939zu+GPD/JA3/n47N6zzrz1/9Lx2f+n3lyr7+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uLe4fj/tG/+HcB90y385LADoSM9tNVSC7/f432f+1Af/x/m+y/H/xdeaquHRhh467p3Pf7/xjaO4/93vjTvjh/k4/9vrtWO/9d/Uf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4djv/P/ubfARx66O4bv/n3AFePu/1J7/d43+c+rMf/e/9/b+3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uKGHf8fGO7tLb/b4wKD4///t3sH/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+v8wfs/j/Kn/M4r9d/pjFf/v8MYv/DvljFv8d88cs/r/OH7P4/yZ/zOL/2/wxi/9O+WMW/53zxyz+v8sfs/j/Pn/M4r9L/pjF/w/5Yxb/XfPHLP675Y9Z/HfPH7P4/zF/zOL/p/wxi/8e+WMW/z3zxyz+e+WPWfz/nD9m8f9L/pjFf+/8MYv/PvljFv9988cs/n/NH7P4/y1/zOK/X/6YxX///DGL/9/zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/R/6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9J/AcN5I9Z/Aflj1n8R8gfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yd70H/I+jesDmsV/8tY/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnyx+z+H8jf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/zfzxyz+38ofs/gvmD9m8f92/pjFf6H8MYv/d/LHLP7fzR+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP7fyx+z+C+ZP2bx/37+mMX/B/ljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9h/pjFf7n8MYv/8vljFv8f5Y9Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/j/OH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/j/JH7P4r5s/ZvFfL3/M4r9+/pjF/6f5Yxb/DfLHLP4/yx+z+G+YP2bx3yh/zOK/cf6Yxf/n+WMW/1/kj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/2X+mMX/V/ljFv/t8scs/tvnj1n8d8gfs/jvmD9m8f91/pjF/zf5Yxb/3+aPWfx3yh+z+O+cP2bx/13+mMX/9/ljFv9d8scs/n/IH7P475o/ZvHfLX/M4r97/pjF/4/5Yxb/P+WPWfz3yB+z+O+ZP2bx3yt/zOL/5/wxi/9f8scs/nvnj1n898kfs/jvmz9m8f9r/pjF/2/5Yxb//fLHLP77549Z/P/+r/73/q+P6wOaxf+A1j9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6YxP/18v/3JP6DLs4fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/mPTBda/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljEv/XP83/37P4D8ofs/iPkD9m8R8xf8ziPzh/zOI/Uv6YxX/k/DGL/yj5Yxb/IfljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfw/kj9m8R8/f8ziP0H+mMX/o/ljFv8J88cs/hPlj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfOH/M4j9J/pjFf9L8MYv/p/PHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF/zP5Yxb/qfPHLP6fzR+z+H8uf8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP03+mMV/2vyxQefsOtLAwMCH3n+6/DHL+p8+f8ziP0P+mMV/xvwxi/+X88cs/jPlj1n8Z84fs/jPkj9m8Z81f8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP1v+mMX/G/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8f9W/pjFf8H8MYv/t/PHLP4L5Y9Z/L+TP2bx/27+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/17+mMV/yfwxi//388cs/j/IH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/D/PHLP7L5Y9Z/JfPH7P4/yh/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/cf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvH/Sf6YxX/d/DGL/3r5Yxb/9fPHLP4/zR+z+G+QP2bx/1n+mMV/w/wxi/9G+WMW/43zxyz+P88fs/j/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/EQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfwHD+SPWfwHvTf/kf/HxvUBzeI/Qusfs/iPmD9m8R+cP2bxHyl/zOI/cv6YxX+U/DGL/5D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+H8kfs/iPnz9m8Z8gf8zi/9H8MYv/hPljFv+J8scs/h/LH7P4fzx/zOL/ifwxi/8n88cs/p/KH7P4T5w/ZvGfJH/M4j9p/pjF/9P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v+Z/DGL/9T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/nD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/9nyxyz+38gfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOL/zfwxi/+38scs/gvmj1n8v50/ZvFfKH/M4v+d/DGL/3fzxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL//fyxyz+S+aPWfy/nz9m8f9B/pjFf6n8MYv/0vljFv9l8scs/svmj1n8f5g/ZvFfLn/M4r98/pjF/0f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/j/PHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/T/LHLP7r5o9Z/NfLH7P4r58/ZvH/af6YxX+D/DGL/8/yxyz+G+aPWfw3yh+z+G+cP2bx/3n+mMX/F/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfx/mT9m8f9V/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8f50/ZvH/Tf6Yxf+3+WMW/53yxyz+O+ePWfx/lz9m8f99/pjFf5f8MYv/H/LHLP675o9Z/HfLH7P4754/ZvH/Y/6Yxf9P+WMW/z3yxyz+e+aPWfz3yh+z+P85f8zi/5f8MYv/3vljFv998scs/vvmj1n8/5o/ZvH/W/6YxX+//DGL//75Yxb/v+ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4v+P/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH5P4jzSQP2bxH5Q/ZvEfIX/M4j9i/pjFf3D+mMV/pPwxi//I+WMW/1Hyxyz+Q/LHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/h/JH/M4j9+/pjFf4L8MYv/R/PHLP4T5o9Z/CfKH7P4fyx/zOL/8fwxi/8n8scs/p/MH7P4fyp/zOI/cf6YxX+S/DGL/6T5Yxb/T+ePWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/2fyxyz+U+ePWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+33X5D36vG1r8F3b5v+cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf/H+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6Yxf8n+WMW/3Xzxyz+6+WPWfzXzx+z+P80f8ziv0H+mMX/Z/ljFv8N88cs/hvlj1n8N84fs/j/PH/M4v+L/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/r/MH7P4/yp/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP6/zh+z+P8mf8zi/9v8MYv/TvljFv+d88cs/r/LH7P4/z5/zOK/S/6Yxf8P+WMW/13zxyz+u+WPWfx3zx+z+P8xf8zi/6f8MYv/HvljFv8988cs/nvlj1n8/5w/ZvH/S/6YxX/v/DGL/z75Yxb/ffPHLP5/zR+z+P8tf8ziv1/+mMV///wxi//f88cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/0f+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPSfxHHsgfs/gPyh+z+I+QP2bxHzF/zOI/OH/M4j9S/pjFf+T8MYv/KPljFv8h+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/D+SP2bxHz9/zOI/Qf6Yxf+j+WMW/wnzxyz+E+WPWfw/lj9m8f94/pjF/xP5Yxb/T+aPWfw/lT9m8Z84f8ziP0n+mMV/0vwxi/+n88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/M/ljFv+p88cs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fzl/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxn/2/9h/lf3RcH9As/nO0/jGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/N/PHLP7fyh+z+C+YP2bx/3b+mMV/ofwxi/938scs/t/NH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/t/LH7P4L5k/ZvH/fv6Yxf8H+WMW/6Xyxz6k/oOGsx556fyxD6n/6719/S+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD826JxBw2bmw+2/Yv6YZf2vlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH7P4/y5/zOL/+/wxi/8u+WMW/z/kj1n8d80fs/jvlj9m8d89f8zi/8f8MYv/n/LHLP575I9Z/PfMH7P475U/ZvH/c/6Yxf8v+WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V79F/8P/UuD6gWfyvbv1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+Q+MCpdZ/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf0ziP8pA/pjFf1D+mMV/hPwxi/+I+WMW/8H5Yxb/kfLHLP4j549Z/EfJH7P4D8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+b/7CG/Ms5i/94+WMW/4/kj1n8x88fs/hPkD9m8f9o/pjFf8L8MYv/RPljFv+P5Y9Z/D+eP2bx/0T+mMX/k/ljFv9P5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/p/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4T5U/ZvH/TP6YxX/q/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X84fs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/9s+WMW/2/kj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMX/W/ljFv8F88cs/t/OH7P4L5Q/ZvH/Tv6Yxf+7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf97+WMW/yXzxyz+388fs/j/IH/M4r9U/pjFf+n8MYv/MvljFv9l88cs/j/MH7P4L5c/ZvFfPn/M4v+j/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/8f5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjF/yf5Yxb/dfPHLP7r5Y9Z/NfPH7P4/zR/zOK/Qf6Yxf9n+WMW/w3zxyz+G+WPWfw3zh+z+P88f8zi/4v8MYv/JvljFv9N88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMV/6/wxi/826N8jwuK/bdqYxf+X+WMW/1/lj1n8t8sfs/hvnz9m8d/hDf9XXnu/xvUBzeK/Y+sfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx//N78h/pf25cH9As/n9p/WMW/73zxyz+++SPWfz3zR+z+P81f8zi/7f8MYv/fvljFv/988cs/n/PH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/H/ljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj8m8R8ykD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLHLP6z5o9Z/L+SP2bx/+q7+u/+Pz+uD2gW/6+1/jGL/9fzxyz+s+WPWfy/kT9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/2/lj1n8F8wfs/h/O3/M4r9Q/pjF/zv5Yxb/7+aPWfwXzh+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/7+WPWfyXzB+z+H8/f8zi/4P8MYv/UvljFv+l88cs/svkj1n8l80fs/j/MH/M4r9c/pjFf/n8MYv/j/LHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv8f549Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv+f5I9Z/NfNH7P4r5c/ZvFfP3/M4v/T/DGL/wb5Yxb/n+WPWfw3zB+z+G+UP2bx3zh/zOL/8/wxi/8v8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+P8yf8zi/6v8MYv/dvljFv/t88cs/jvkj1n8d8wfs/j/On/M4v+b/DGL/2/zxyz+O+WPWfx3zh+z+P8uf8zi//v8MYv/LvljFv8/5I9Z/HfNH7P475Y/ZvHfPX/M4v/H/DGL/5/yxyz+e+SPWfz3zB+z+O+VP2bx/3P+mMX/L/ljFv+988cs/vvkj1n8980fs/j/NX/M4v+3/DGL/375Yxb//fPHLP5/zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/x/5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v/Au/mP9b8wrg9oFv8HW/+Yxf+h/DGL/8P5Yxb/R/LHDP6DBg8MeTR/zOA/dP0/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/JvEfdSB/zOI/KH/M4j9C/pjFf8T8MYv/4Pwxi/9I+WMW/5Hzxyz+o+SPWfyH5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/uPkj1n8x80fs/iPlz9m8f9I/pjFf/z8MYv/BPljFv+P5o9Z/CfMH7P4T5Q/ZvH/WP6Yxf/j+WMW/0/kj1n8P5k/ZvH/VP6YxX/i/DGL/yT5Yxb/SfPHLP6fzh+z+E+WP2bxnzx/zOI/Rf6YxX/K/DGL/1T5Yxb/z+SPWfynzh+z+H82f8zi/7n8MYv/5/PHLP5fkPlP9x63s/h/Ueb/XrP4fyl/zOI/Tf6YxX/agYHN3q8hfZCz+E/X+scs/tPnj1n8Z8gfs/jPmD9m8f9y/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5I/ZvH/av6Yxf9r+WMW/6/nj1n8Z8sfs/h/I3/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8388cs/t/KH7P4L5g/ZvH/dv6YxX+h/DGL/3fyxyz+380fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+38sfs/gvmT9m8f9+/pjF/wf5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Yf6YxX+5/DGL//L5Yxb/H+WPWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP4/zh+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP4/yR+z+K+bP2bxXy9/zOK/fv6Yxf+n+WMW/w3yxyz+P8sfs/hvmD9m8d8of8ziv3H+mMX/5/ljFv9f5I9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9l/pjF/1f5Yxb/7fLHLP7b549Z/HfIH7P475g/ZvH/df6Yxf83+WMW/9/mj1n8d8ofs/jvnD9m8f9d/pjF//f5Yxb/XfLHLP5/yB+z+O+aP2bx3y1/zOK/e/6Yxf+P+WMW/z/lj1n898gfs/jvmT9m8d8rf8zi/+f8MYv/X/LHLP57549Z/PfJH7P475s/ZvH/a/6Yxf9v+WMW//3yxyz+++ePWfz/nj9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljH17/PS5826WjnpI/9uH1/9f1f2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4/yN/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHJP6jDeSPWfwH5Y9Z/EfIH7P4j5g/ZvEfnD9m8R8pf8ziP3L+mMV/FJX/qO95S4v/EJX/e8/iP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/0fyxyz+4+ePWfwnyB+z+H80f8ziP2H+mMV/ovwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/hPnj1n8J8kfs/hPmj9m8f90/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Jn/M4j91/pjF/7P5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/L+ePWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX+2/DGL/zfyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4fzN/zOL/rfwxi/+C+WMW/2/nj1n8F8ofs/h/J3/M4v/d/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+9/DGL/5L5Yxb/7+ePWfx/kD9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/x/mj1n8l8sfs/gvnz9m8f9R/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J/8Nv8R3o9xfUCz+J/S+scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/z/yxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+LQv9R38M2Fv+XhP7vJYv/y/ljFv9X8scs/q/mj1n8X8sfk/iPPpA/ZvEflD9m8R8hf8ziP2L+mMV/cP6YxX+k/DGL/8j5Yxb/UfLHLP5D8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+H8kf8ziP37+mMV/gvwxi/9H88cs/hPmj1n8J8ofs/h/LH/M4v/x/DGL/yfyxyz+n8wfs/h/Kn/M4j9x/pjFf5L8MYv/pPljFv9P549Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/Z/LHLP5T549Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+M+YP2bx/3L+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/kj9m8Z97SP6Uxf9rrX/M4v/1/DGL/2z5Yxb/b+SPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/Zv6Yxf9b+WMW/wXzxyz+384fs/gvlD9m8f9O/pjF/7v5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjF/3v5Yxb/JfPHLP7fzx+z+P8gf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+P8wfs/gvlz9m8V8+f8zi/6P8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/x/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMX/J/ljFv9188cs/uvlj1n8188fs/j/NH/M4r9B/pjF/2f5Yxb/DfPHLP4b5Y9Z/DfOH7P4/zx/zOL/i/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP6/zB+z+P8qf8ziv13+mMV/+/wxi/8O+WMW/x3zxyz+v84fs/j/Jn/M4v/b/LEPnf/bkN/uv1P+2IfO/x3W/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP/am/8CQgYEPs/8p+WOW9X9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+P8jf8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB9z+Cf/Tjn8B0Z/qEcBZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/MQbyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP6YxX/C/DGL/0T5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfwnzh+z+E+SP2bxnzR/zOL/6fwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bx/0z+mMV/6vwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/l/OH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/bPljFv9v5I9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjF/1v5Yxb/BfPHLP7fzh+z+C+UP2bx/07+mMX/u/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/e/ljFv8l88cs/t/PH7P4/yB/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP4/zB+z+C+XP2bxXz5/zOL/o/wxi/8K+WMW/xWN/u/hDlv8VzL6v4cs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/+P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8zi/5P8MYv/uvljFv/18scs/uvnj1n8f5o/ZvHfIH/M4v+z/DGL/4b5Yxb/jfLHLP4b549Z/H+eP2bx/0X+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/X+aPWfx/lT9m8d8uf8ziv33+mMV/h/wxi/+O+WMW/1/nj1n8f5M/ZvH/bf6YxX+n/DGL/875Yxb/3+WPWfx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/LEPt//tb146xq35Yx9u/7ca47b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+2IfUf8rhLh3jvvyxD6n/6719/d+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+T+I85kD9m8R+UP2bxHyF/zOI/Yv6YxX9w/pjFf6T8MYv/yPljFv9R8scs/kPyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4fyR/zOI/fv6YxX+C/DGL/0fzxyz+E+aPWfwnyh+z+H8sf8zi//H8MYv/J/LHLP6fzB+z+H8qf8ziP3H+mMV/kvwxi/+k+WMW/0/nj1n8J8sfs/hPnj9m8Z8if8ziP2X+mMV/qvwxi/9n8scs/lPnj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4z5g/ZvH/cv6YxX+m/DGL/8z5Yxb/WfLH/sV/2GXjvM9j+v/VO/jPmj9mWf9fyR+z+H81f8zi/7X8MYv/1/PHLP6z5Y9Z/L+RP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/b+WPWfwXzB+z+H87f8ziv1D+mMX/O/ljFv/v5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv/v5Y9Z/JfMH7P4fz9/zOL/g/wxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+P8wf8ziv1z+mMV/+fwxi/+P8scs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/x/nj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/5/kj1n8180fs/ivlz9m8V8/f8zi/9P8MYv/BvljFv+f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/z/DGL/y/yxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4/zJ/zOL/q/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+P86f8zi/5v8MYv/b/PHLP475Y9Z/HfOH/uw+g8Zzv93+WMfVv+B4fx/nz9m8d8lf8zi/4f8MYv/rvljFv/d8scs/rvnj1n8/5g/ZvH/U/6YxX+P/DGL/575Yxb/vfLHLP5/zh+z+P8lf8ziv3f+mMV/n/wxi/+++WMW/7/mj1n8/5Y/ZvHfL3/M4r9//pjF/+/5Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/j/I3/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/7hvff/H95XB/QLP73t/4xi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMR/rIH8MYv/oPwxi/8I+WMW/xHzxyz+g/PHLP4j5Y9Z/EfOH7P4j5I/ZvEfkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6Yxf8j+WMW//Hzxyz+E+SPWfw/mj9m8Z8wf8ziP1H+mMX/Y/ljFv+P549Z/D+RP2bx/2T+mMX/U/ljFv+J88cs/pPkj1n8J80fs/h/On/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P5M/ZvGfOn/M4v/Z/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/5fzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOI/W/6Yxf8bav/lRn+nayz+s6v93zmL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv9v5o9Z/L+VP2bxXzB/zOL/7fwxi/9C+WMW/+/kj1n8v5s/ZvFfOH/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8v5c/ZvFfMn/M4v/9/DGL/w/yxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/w/wxi/9y+WMW/+Xzxyz+P8ofs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/nD9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfx/kj9m8V83f8ziv17+mMV//fwxi/9P88cs/hvkj1n8f5Y/ZvHfMH/M4r9R/pjFf+P8MYv/z/MfGBgY9d8usfj/In/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/8v88cs/r/KH7P4b5c/ZvHfPn/M4r9D/pjFf8f8MYv/r/PHLP6/yR+z+P82f8ziv1P+mMV/5/wxi//v8scs/r/PH7P475I/ZvH/Q/6YxX/X/DGL/275Yxb/3fPHLP5/zB+z+P8pf8ziv0f+mMV/z/wxi/9e+WMW/z/nj1n8/5I/ZvHfO3/M4r9P/pjFf9/8MYv/X/PHLP5/yx+z+O+XP2bx3z9/zOL/9/wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/P+RP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5YxL/sQfyxyz+g/LHLP4j5I9Z/EfMH7P4D84fs/iPlD9m8R85f8ziP0r+mMV/SP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+P5I9Z/MfPH7P4T5A/ZvH/aP7Y/8fO3Yd7Xdd3HP9xT5azT7sudWnDoTHXZiQyGrUQFcXjzSkTzbxHPQLJjdxIgCmw0Uodmy51s2ATC8ecrVricHPdrWhY1myN2FrlFNfCGHOwyJyx68A5BGdvz7XzZd+vm+/H4w/O+f2O71/K83r5+3lxXWXpf5j+oSz9D9c/lKX/z+gfytL/1fqHsvQ/Qv9Qlv5H6h/K0v81+oey9P9Z/UNZ+g/TP5Sl/1H6h7L0/zn9Q1n6D9c/lKX/0fqHsvQ/Rv9Qlv6v1T+Upf8I/UNZ+v+8/qEs/Y/VP5Sl/y/oH8rS/3X6h7L0/0X9Q1n6/5L+oSz9j9M/lKX/6/UPZek/Uv9Qlv5v0D+Upf/x+oey9B+lfyhL/xP0D2XpP1r/UJb+v6x/KEv/MfqHsvR/o/6hLP1/Rf9Qlv5j9Q9l6f8m/UNZ+r9Z/1CW/r+qfyhL/7foH8rSf5z+oSz9T9Q/lKX/eP1DWfqfpH8oS/+T9Q9l6X+K/qEs/SfoH8rS/1T9Q1n6n6Z/KEv/ifqHsvQ/Xf9Qlv5t+oey9D9D/1CW/mfqH8rS/yz9Q1n6n61/KEv/dv1DWfq/Vf9Qlv5v0z+Upf85+oey9H+7/qEs/c/VP5Sl/yT9Q1n6n6d/KEv/8/UPZen/Dv1DWfpfoH8oS/936h/K0v9C/UNZ+l+kfyhL/4v1D2Xpf4n+oSz9L9U/lKX/ZfqHsvS/XP9Qlv6T9Q9l6X+F/qEs/a/UP5Sl/1X6h7L079A/lKX/1fqHsvSfon8oS/+p+oey9J+mfyhL/3fpH8rS/xr9Q1n6T9c/lKX/DP1DWfrP1D+Upf8s/UNZ+l+rfyhL/9n6h7L0n6N/KEv/ufqHsvSfp38oS//r9A9l6T9f/1CW/u/WP5Sl/wL9Q1n6L9Q/lKX/Iv1DWfpfr38oS//36B/K0v8G/UNZ+t+ofyhL/8X6h7L0X6J/KEv/pfqHsvT/Nf1DWfr/uv6hLP2X6R/K0v+9+oey9P8N/UNZ+r9P/1CW/u/XP5Sl/036h7L0v1n/UJb+t+gfytL/N/UPZem/XP9Qlv6/pX8oS//f1j+Upf+t+oey9L9N/1CW/r+jfyhL/w/oH8rS/3b9Q1n636F/KEv/O/UPZen/u/qHsvT/Pf1DWfrfpX8oS/8P6h/K0v9D+oey9F+hfyhL/5X6h7L0/339Q1n6/4H+oSz979Y/lKX/Kv1DWfrfo38oS/8P6x/K0v8j+oey9F+tfyhL/3v1D2Xp/4f6h7L0X6N/KEv/P9I/lKX/ffqHsvT/Y/1DWfrfr38oS/+P6h/K0v9P9A9l6f8x/UNZ+n9c/1CW/p/QP5Sl/5/qH8rS/5P6h7L0f0D/UJb+a/UPZen/oP6hLP3/TP9Qlv7r9A9l6f+Q/qEs/f9c/1CW/n+hfyhL/4f1D2Xp/5f6h7L0/5T+oSz9P61/KEv/z+gfytL/s/qHsvT/nP6hLP3/Sv9Qlv6f1z+Upf8X9A9l6b9e/1CW/l/UP5Sl/1/rH8rSf4P+oSz9H9E/lKX/l/QPZen/Zf1DWfo/qn8oS/+v6B/K0v+r+oey9P8b/UNZ+j+mfyhL/6/pH8rS/2/1D2Xp/3X9Q1n6/53+oSz9N+ofytL/G/qHsvTfpH8oS/+/1z+Upf8/6B/K0v+b+oey9P9H/UNZ+n9L/1CW/t/WP5Sl/3f0D2Xp/7j+oSz9/0n/UJb+T+gfytL/Sf1DWfpv1j+Upf9T+oey9P9n/UNZ+n9X/1CW/v+ifyhL/+/pH8rSf4v+oSz9n9Y/lKX/9/UPZem/Vf9Qlv7/qn8oS/9t+oey9P83/UNZ+j+jfyhL/3/XP5Sl/3b9Q1n679A/lKX/f+gfytL/B/qHsvTfqX8oS/8f6h/K0v9Z/UNZ+v9I/1CW/s/pH8rS/z/1D2Xp/7z+oSz9f6x/KEv/XfqHkvR/ZUv/UJb+/fQPZenfX/9Qlv4D9A9l6T9Q/1CW/oP0D2XpP1j/UJb+Q/QPZek/VP9Qlv4v0z+Upf9B+oey9H+5/qEs/V+hfyhL/4P1D2Xp/1P6h7L0P0T/0EuuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP81cxcuumby9Okdc3zjG9/4Zu83L/a/mQAAgP9tP/nQ/2L/nQAAAAAAAAAAAAAAAAAAAEBeTfzfib3Y/4wAAAAAAAAAAAAAAPD/XVv7SVsH9NvvqQH7PnjNox27v47eecHU1asfLN1fu358ZvCS/fd9sGvXrl0rnxk3oevhkFar1fm/9squx0N7Hne+/pJhKw7f86iM//ydj1866eCz5qy9beA3Vt7S/vSg3c8Oal1+9bTpHW/o32qVUwa1FnQ+OL5fq1VOG9S6tfPBqM4HEwe11nQ+OGH3g5e1PtP54PVXzpp+VecTp1f+PYOXirb2Ja0B+y22td+/Dfbd/5JhT0zt/trLS3a/2sBW1/6Hr/3SYT1+1u0F9t/9+uWknvvv8z8g8IL6tv9nN3V/7eUl/9v7/4c37FwU/eyF99/9+uVk+4f6BJ//99toz8/9PT7/HxW85N77E4duuL1z/23n3Xdk11MD/yef/3/y+uWUnvvvv9/n/87P8RO6P/8PabXKqQf42wGptLUv3drb+3/v+x/46h43/fbd/z1f2fyKzv3f+1xrWddTg/q4/wm9vf/f1OPvFeibtvZVu3q8//dh/60RwUvu3f+WtQfv/vy/+f4rD93nZ33Z/6k99z9y3oxrR85duOi4aTMmT+mY0jFz7Kgxx48eO3bMmJG7PxHs+fUAf1MgiQN7/28d1OOmX6vVsfd+/X23TOjc/7aHln2k66mhfdz/ab2+/x/l/R9Cw/u3Bg9uLZg8b96c4/f82v1w1J5f9/xlwf778N//Rx/b9Zd1/5lhv1br8L33Iy4dO6Rz/9fPLuu6nhrcx/1P7HX/4/f/s0qgbw7w/f+qHjf77f/ELTfO79z/MT941eaup/r63/+n97r/u73/w4Foa2/V+ibauf8Thiw9o9p1afPnf1CfJvY/bPutO6pdlzPsH+rTxP4nLX/zFdWuy5n2D/VpYv8PzrhsebXrcpb9Q32a2P/zP73jiGrX5Wz7h/o0sf/HvvvU6mrXpd3+oT5N7P+Dd7WfUO26vNX+oT5N7P+46344rtp1eZv9Q32a2P/VLz93TbXrco79Q32a2P8Zu04+tNp1ebv9Q32a2H+/pd9bUu26nGv/UJ8m9v/k5OWzql2XSfYP9Wli/2uGjXi22nU5z/6hPk3sf9nTb5xY7bqcb/9Qnyb2/9U7VjxW7bq8w/6hPk3s/xMXv2pFtetygf1DfZrY/4+GP3RQtevyTvuH+jSx/40b1zxQ7bpcaP9Qnyb2v3LNgOHVrstF9g/1aWL/i0+f8mi163Kx/UN9mtj/6DFfvqjadbnE/qE+Tez/8M9966lq1+VS+4f6NLH/cx+eP7fadbnM/qE+Tex//hEf/3G163K5/UN9mtj/WzqOmFrtuky2f6hPE/svtx20sdp1ucL+oT5N7P/CbavGV7suV9o/1KeJ/a875Asfq3ZdrrJ/qE8T+98+e+bYatelw/6hPk3s/zvvXfy+atflavuH+jSx/9uf+3qpdl2m2D/Up4n9bxl14cXVrstU+4f6NLH/VWc980i16zLN/qE+Tex/+brH51W7Lu+yf6hPE/tfv/7MJ6pdl2vsH+rTxP6PGTHy4GrXZbr9Q32a2P+sC5Z9qNp1mWH/UJ8m9n/K/Xe8ttp1mWn/UJ8m9j/0a+M+We26zLJ/qE8T+//0uPd/qtp1udb+oT5N7H/H+KOPrXZdZts/1KeJ/W96YNSd1a7LHPuH+jSx/w88clfF6zLX/qE+Tex/9uue31btusyzf6hPE/t/06TzF1a7LtfZP9Snif0fevfEL1a7LvPtH+rTxP4v+fb3z6l2Xd5t/1CfJvZ/9GFXHFntuiywf6hPE/ufOm3DzdWuy0L7h/o0sf8JKzeNrnZdFtk/1KeJ/R/y5Nx7ql2X6+0f6tPE/rcOOOzsatflPfYP9Wli//fe8PA3q12XG+wf6tPE/m++6aMd1a7LjfYP9Wli/5/dOXh7teuy2P4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/2IHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WQfRuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUAAD//3II6Vg=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000180)='./file0\x00', 0x810000, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'], 0x3, 0x54d, &(0x7f00000010c0)="$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") fdatasync(r0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x16d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xe, 0x0, 0x1, 0x8, 0x6, @broadcast}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xfdef) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getdents64(r1, 0x0, 0x0) r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44e, 0x120c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r6 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r6, 0x207a98, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) syz_open_dev$loop(0x0, 0xf01c, 0x0) 11.357927647s ago: executing program 5 (id=673): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.72305714s ago: executing program 3 (id=676): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wg0\x00', 0x20}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@resuid}, {@resgid}, {@barrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000000800)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = socket(0x28, 0x5, 0x0) capset(0x0, &(0x7f0000000140)={0x200005, 0x4200007, 0x1, 0x4, 0x4, 0x4}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x22) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) socket$inet_sctp(0x2, 0x1, 0x84) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') open$dir(&(0x7f00000018c0)='./file0/file1\x00', 0x200, 0x9b) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x0, 0x0, {0xa, 0x4e23, 0xfe5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001", @ANYRESDEC=r1], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002f40)=""/21, 0x15}, 0x2}], 0x1, 0x12112, 0x0) chdir(&(0x7f0000000200)='./file0\x00') socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) dup(r5) 8.19103834s ago: executing program 4 (id=677): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) r3 = socket$igmp(0x2, 0x3, 0x2) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) rmdir(&(0x7f0000000300)='./cgroup/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1}, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0x3, 0x2) 7.97864222s ago: executing program 0 (id=678): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x2}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840), 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x315, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r6}, 0xc) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 7.978262828s ago: executing program 5 (id=679): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x2, 0x10000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x4}, 0x7, 0x2, &(0x7f0000000280)={0x3, 0xf, 0x76e4, 0x2, 0x6}, 0x8, 0x0, 0x3, 0x0, 0x3ff, 0x59, &(0x7f0000001580)="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"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x39000, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0xfa, "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"}, &(0x7f0000000040)=0x102) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3, 0x3}, 0x8) syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xb02, &(0x7f0000000a40)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) r5 = creat(&(0x7f0000000380)='./bus\x00', 0x182) write$UHID_INPUT(r5, &(0x7f00000027c0)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9baffffffff2475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ed19a1f93a6cebd52f22e0d0000000000000082b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4803003619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b6f7afd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f9a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a81769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf823defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d05000000000000002ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90dbc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25a527b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a1310300", 0xffffffffffffff48}}, 0x1006) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020660b, &(0x7f0000000080)={0x1, 0x8000000000000b5c}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f000, 0x1}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x21, 0x0, 0x0, 0x41000, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x21, 0x0, &(0x7f00000000c0)="0000000000000000000051229dbd2c90090fbae0753f12c312b3df049d99b39dff", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.254025775s ago: executing program 2 (id=680): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x118}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000002840)={{r0}, r4, 0x18, @inherit={0x60, &(0x7f0000000500)={0x1, 0x3, 0x571, 0x8, {0x2, 0x7fffffff, 0x101, 0x1, 0x10000}, [0x9, 0x100000000, 0x5]}}, @name="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"}) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8ba962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eedd276fc4e3f570bda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x100000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b8050000000f01c20f01c1c5c50f070fde460b0f0130679f013fc2c2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x150d, &(0x7f0000000780)="$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") r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x4000}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0xe, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="460a000000000000611134000000000018000d000000000000000000070000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) mkdir(&(0x7f0000000580)='./file2\x00', 0x54) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r10, 0xfffffffffffffffd, 0xbb) 7.17490948s ago: executing program 4 (id=681): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f0000000c00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x64, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1ff, 0x7d}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x201}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000003080)={&(0x7f0000000400)=""/11, 0xb, 0x0, &(0x7f0000000540)=""/260, 0x104}}, 0x10) close_range(r0, r0, 0x2) 6.941289451s ago: executing program 0 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="68b32ca8", @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="b3f9b0d698b69a1e593f79c19b7a35589f09862a425cc73276ee5d01e313d57a604e903fb650e1f157e792fbcb58aebdbb18c1d9e14d39cde397e92edf3784cb8837f69f154356fed94ade7bfddf9181e5ecd05440ae710b78ac64e65698e9176cabf428c568d2ac9aee5dd164dc5f47d69c50eb5e8680fde5eff6f8fca477a0e3ea274a076743f92165"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004018) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) r5 = syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904", @ANYRESHEX=r0], 0x0) r6 = semget$private(0x0, 0x207, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000080)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000180)={0x1f, 0x0, @any, 0x3, 0x1}, 0xe) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000080)=""/166) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x1) syz_usb_disconnect(r5) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000)=[0xea00]) 6.939985002s ago: executing program 3 (id=683): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (fail_nth: 3) 6.416044934s ago: executing program 33 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="68b32ca8", @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="b3f9b0d698b69a1e593f79c19b7a35589f09862a425cc73276ee5d01e313d57a604e903fb650e1f157e792fbcb58aebdbb18c1d9e14d39cde397e92edf3784cb8837f69f154356fed94ade7bfddf9181e5ecd05440ae710b78ac64e65698e9176cabf428c568d2ac9aee5dd164dc5f47d69c50eb5e8680fde5eff6f8fca477a0e3ea274a076743f92165"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004018) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c00078006000440000000000600054000000000080006"], 0x64}}, 0x0) r5 = syz_usb_connect(0x4, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007882b740422c0917b7ca010203010902120001000000000904", @ANYRESHEX=r0], 0x0) r6 = semget$private(0x0, 0x207, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000080)) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r8, &(0x7f0000000180)={0x1f, 0x0, @any, 0x3, 0x1}, 0xe) semctl$GETALL(r6, 0x0, 0xd, &(0x7f0000000080)=""/166) poll(&(0x7f0000000340)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x1) syz_usb_disconnect(r5) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000000)=[0xea00]) 6.403787452s ago: executing program 2 (id=685): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0xd, 0x20001000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r1, 0x121, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x5668a5a41429f6ce) 6.400028807s ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0xd, 0x20001000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r2, 0x121, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x5668a5a41429f6ce) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0xfffffffc, 0x9, 0x1, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r6, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, 0x0) syz_open_pts(r6, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000540)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.276593558s ago: executing program 4 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) socket(0x10, 0x80002, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socket(0x10, 0x3, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4090, &(0x7f0000000200)={[{@auto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") creat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19f) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = open(0x0, 0x0, 0x244) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYRESOCT=r3], 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x800003d, 0x7ff) 5.018696463s ago: executing program 4 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sched_setscheduler(0x0, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r5, r4, 0x0) 4.935772067s ago: executing program 2 (id=689): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x100}, 0xc) sendto$inet6(r1, &(0x7f0000000180)="b02965", 0x3, 0xc840, 0x0, 0x0) iopl(0xd) 4.827323557s ago: executing program 3 (id=690): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) (async) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0xffffffff}, 0x1c) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) accept4$ax25(r3, 0x0, 0x0, 0x80800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x4, &(0x7f00000001c0)=[{0x35, 0x0, 0x2, 0xfffffffc}, {0x34, 0xfc, 0x83, 0x2}, {0x2, 0x0, 0xfc}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0000000c000000420000000000c01f42000000", @ANYRES32, @ANYBLOB="e1a600"/13, @ANYRES32=0x0, @ANYRES32], 0x50) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r3, 0xc004ae0a, &(0x7f0000000200)={0x1, [0x0]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x4, @multicast}, 0x10) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='binfmt_misc\x00', 0x4400, &(0x7f0000000180)='\x00') 3.576376227s ago: executing program 4 (id=691): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delchain={0x2c, 0x65, 0x20, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x15, 0xa}, {0xb, 0x2}, {0xc, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x74045360924a92bb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(0x0) socket$inet(0x2, 0x800, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xbbf9) 3.5636935s ago: executing program 2 (id=692): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x2}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840), 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000400)={0x8, &(0x7f0000000440)=[{0x5, 0xd0}, {0x0, 0x8fb3}, {0x5, 0x2}, {0x3, 0x9}, {0xfffd, 0x6}, {0x80, 0x1}, {0xc2, 0x9}, {0x2, 0x100}]}) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x315, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x4000094) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r6}, 0xc) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) 3.550472457s ago: executing program 5 (id=693): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x810) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x14c, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x67a400}, {0xc, 0x90, 0x1000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x10}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x7fffffffffffffff}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc}, {0xc, 0x90, 0x1}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x31]}}}}]}) 3.068424463s ago: executing program 2 (id=694): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @hopopts={{0x80, 0x29, 0x36, {0x5e, 0xc, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x966, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x2, "2bdb"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x118}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000280)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000002840)={{r0}, r4, 0x18, @inherit={0x60, &(0x7f0000000500)={0x1, 0x3, 0x571, 0x8, {0x2, 0x7fffffff, 0x101, 0x1, 0x10000}, [0x9, 0x100000000, 0x5]}}, @name="bd2695ab430d8451cb01417c3f4ed94c46cecf39997d5af94acae6a9722eb06e9f6845b16cf372e045e478c49a53fa608a6207b41d0e670a6f1e9f0e0487e8a39fdfefddd329d76b92c48cc6d41befdce03e2d6e15302028e35adacb1352eeac63a049a7337e0f3b078aa1b44d4b21190b689c823204e6d20e1493eaa55addfc41d6b465cf2fee53b6ca6811ae37589d0665953f584317e53d40581d0e57e5748f7a5dc722c234b73be9292b5c2e9af8e818e46dc54692a983d5f46944d8c6f2a9062b8acc9b77b516028647aa133b3ba9f32f175a343d19f1015b20fd1a285e43435e8cdf7197e8a1890f3a8e3ec376761e9ec1461d98411b0bd905b188ed9a05a845dc2ff02fc7c009f7cd81ea2175b7e6ba7b76fddc37e7f4c5e57fe7d1e6387c79aed219702c70ba6fab0c940d91382aa8c4ba95eee80e03921caf6ea6112b0592fe0d4a2e32217cbcc7385310f9e1e8f367a7d4ee925998b01078cfba9481db8f4ed75fd05a7c7a8a7cb61f34cd4e4758d50d6ea6cb01e23cdc500fb0a13dfcd4a07384855b4b072e9433c8585dcb205f72708272ba79175e0e0c42a419fdd52c4fb785ece350bf382dc79ba25a4e1103bef62592d5c0b3b3b091f8daa05b09bbd38ebb15ec02bbe6ca3e9a72956e1affd606bba06cda80333b93d46a34294459f305419c418084178b4192465a4e30422e3703a216b65efa53253d0fbef9b453a6a1ca47d0b7b74fb21877b41b2e68f67d8288f09e1da1b1eb84ca15fa3169f8e61f2018ec88923fdd7e36c97d6caf80a5e90ee6fefcbd99adfffeefc9639d0e687bd751e28f7a0a53320e95493341a8a506654654347ee1a144c511ce20779337742c26b9949a14f05f521c0163511528cc32591a246224fcaa678dd33693f9c4c97f4eebb07aa6d62f4a703b0445b0f1aedb8ff57aea15321b1b6bf83cbbfe329b47ed057e05dd332afb1f85582a43427fd7aed03d2a8a4b7fb64705fb97b8373d06609a5f626700fbb212e608f88bedd7748e230195a68c241c97b36c237fce06f40f57364392e172ec71709abf83b1361d26da81d8a126e32706d6d4acf764f06cbade00df8a5782c036f7d6de2218ec3373cba5ac20948adf695e215af2c318fa3e07a0a3e85cffc005beed6081531a5d390aede3b23cf7a6950dc0cb3c5f1780f788880bf827ebc37466e8015f558614186ded697fbcdb20a89af1791dd796362c065d2b4b638c663bc8b4dbf20a3450640dae5a8093d83039557eddffe8413c5ec9d5940e3191b8f8c6fddf57b45ab7685dee42975644d65b9b409644bd3bdd0eb07137b24d852c144de03022a50789da479d2f165503e590a160e7791ba24f312b4bc8a7416ab484964d546dc5a5e3d1627c9c3eb710ac544fe2dc98ff725dd0da2a2f2ad9547d7963d4cc95ef5178ae886e95529e2417056f45c70e3b372300779ab90668c1858254e7d86bed8a82427b91b3901b4f5c60920091b1b0d4021f76868c775f2efd75d7782030f87eb8661987d4de7c3169f52f0247538694b79eba8e046ff4cf3e01e33d02fa7463ba97ade6835e1e64fa816e1a3ba8001fcee4d0253c1b98338f3bd603e8f6a06086d449a80f17cf2da1606c32adc1122a4d3deca0ed37ffcaa1aea604fe83e9f6273b5b876e410d2f80825b630c47d38bac99f7d7f996c964da1f8fdde83b4b228232422e53d8f71396fa35c5746796d22e436fe2b12075a81fe6f4f2760f464dfb69568e70c452a8f887ba2947193645f4cf82dc23736e0281e7589592ce47da01524ac5406146f4c075b51ed2fe31373f7d2d8e4bc87c9a439c5e9a890a8d12e6f43ea22505851e098b7eeba00fa9f3ea1ca2ddf9b48bce6142688a8c7f88246325210c2c199b7cc5b0e2faf7ef37ed8e0f9d5c19b65168a3da8fee86f98aa3ba911f932f2a521bd515d6903467ebe01d98978d71dae1de9bf2574c3c54953393998a7c46d0a5789ded5c31f5ab0e9a9e8e75ed906c169033604eccb300db6f64572acf522a2fa65faf6f72415e9a69edb0c4667f952dd1a4e66b5dc261cee7a419866157b571e90c751108fac0d2814f888f6e7ab6655e4e5eaf10b87e9ce7363cf1c96345f8a5e27465d1f25e5183acc53fea9ca1550aa1be859980fb73edad51bdc57379b7445e1c28eed94f0a24e8b2c381778ee672080d55e6407806bb12861a5da4a1cc612ae5fd4614a4acdc44113f064966703aa39fd9d25866b48dc54c993e1bb0c43823b12545238bf2e5f43d505036066e19f52984ae90e740af9c177e32aeb7da696d122057fcc130ada4312cd99998ecd89e2afdaefb22f16e2299294b1d8d293e3f2df3e9fdec299753092017f3a5ffa2ed74667d62ee2ac700b71549cb0d9d8085626295203994930e1ee52f3f47f96da743ec726cb5c154009b9647c59dfa28521300a705c2819ccc753ec37cefe90124e378fafe9a21595599309f8549e406bebb905cd1caa9e92422dcde0162109a5488796454db5579bf084cad2caad0d68dfc2292e153871f87a529b65b3cde9263edf9112a25728c562ae0165a6fa27c6c3dd3c94dd74a34fe8169cc7e1949eb481ed774565af2a7469a9fafca9b0f69c15dc920eb8eaca95c4829bcb189b345207b47b7136a66f3383f0291b17cfa2e8eab4757adc11f7f2dc9a6c9fb2b521e05ccada96189d316a1e2d351de1fb7f6641c159dbea516dc8bc47623ffa95c8b81a7b77f6986108cbd74154d308f21c553cf6f5e6c99dbb8d79d142fff1c75405a1550e98eaadd4e252db215599263ce837ed421d95795dfed98290821a67c951aaa5f3cfb9af5143657f18494226786ef80156ea50d34bfe7cb86c10c9cd917660d88435cad3a0d404ff22f0830086f49c3fabac2ef454329836ecc42597b75bcf859e4f4b03b2b390d06806ccd25eb0775f6f4d1fda6c215e6985acdbfcdf0db1c4e8b48e9be8070ef4bcc1176bf2b60adf0cad3a7dd9f6d85843b5120a6b12847f7491b5f7c59fa190d9c3669ce1162486a21071e8f4ea5fbc1791f98ee033ce49188cfb37c310647274a6bc78d7c030312c14e0d661828e1e81db84f595a963def6e047232dc28240392d3c4e27f3da6eddb0b5b6c05c90dc44c539ea817eed87e0045ad4977d055d0c3e7da86e3537b6c4daabf57828051074bad466a01f9802cd044cbc5b87817e347954be5bbc30d945d292532481d566fe52a93c455fb55fe775cd0d43577fd1452cea91c5f79c9a2a87df040482c267e3176029eb0b336356770844445dfc0ca346a3d81ce88bd9f5fa7754d08a077d1837055ce4acf7f6ff58ef256fc5b46861ea4b2c68cac6b781f55f1d2e3a24dce4d2f211114b4da1144a528209ca7ba32b1e522f634ad4ad9d99da27e03ff23d069d915fb32ff5c59944679aae67986121be9c1145b410faedf5f19e87bb36f14a564b5b3d59bdb78691c41b5acb2c791b3b8c8b81bb75f5ddafdb01b8e2451e1b51c860a02fa845d0045714fa444cb9e76c84dcd37c2362f2bc2642c7641761fcbee39f88baf0024cdd67ed6f96454a3e66a643dce1d0f1deb755aa7507dee3ae2f1f1d666637b8dfee439b1efbd33a39f754b5818246bb36a103889abd28b2d146f43ea7774cab331525b3f6576de3bd8c4d9d1212e88580fbe066331de08c8ecdbe6d39c79e8fa9bf99d8a836092fb65a5d7dcbecae4ed1503c3b23ec7e20792ba7eca2d9934afd5cc90ff1332957cd77d37915bd7ae95d433ea6c49201686750a6197b32d072ece89d9ceb81106a33c36ff0002a7f5512b92ec3cbfcc12e1e0dbb6b2f0788f9af6c81e99596afe3b251c24e014838ca54b10f9e022313703e2d45f79e062afa979397a0a16a731ee181fea986d4b64a5641ed5c0f5a00545be0eb751091b54befede3e9632be69c18a937bb6fc8fc2c273db3d96fedb4d715b35c4bed30c0c7d225ea736d07581810ea7d371130c50569859513f7bfc817ff73e1e6347f0a36bf9175ab05901a24e14eef5273df2e0175df0aaddc0b77e29e91e2edacaa25b589cdb84bedb48c14f5e37c0a296a90e4623c12be6a8dacf7825f96a2cd713c95c4ae5d7f8293cdb34d63cd7dd44f73cdd2dc50dd82b3ab0c7f3d91ce745910d16055978304b09eb4bf1b28c2f1f70cd66d644d7e26f2fe38913920449d08217ebdf1ee8e8970553308692a1425f5bf0aeefe79b023ca6384b6a472e3895ee95d14b74319688dc64e8e904cb93262a3c88471cb87e0939789ac72d1b1c97c9a5f9ebdec9bb397cb3212f8023139218c9331e17c6ba49a2d20f263f475152d7072bdeb490e949c66c012a23eddf763369e77bd279355b2156369d94b1d56b9869519b0aa9f683479bf748440b55267d1fce2d5e44d0f1cf206e3d4de781d63e17aeeedcc7a442155a64944d5cfdf8d9bf46cdf782d53cca83a441500e260511370c2a5d731aa3db7e6eee7151825142c7336d826e83cbb569f0a31a264e510eaa6e2f8805734f0975888bcdaa3e16cde91dd40bbca90f54d1d726d88629a8076b686073ce5a42022b482eeb6ec314b56f2ceea3d126b07a0de5eb055ccfdc930bc57b80e7ae34d1230fc9a2d989104484690536e07ab69e63d9f34a9b7ec02e590b1220eb708f0fddb4d1c62e1ec48d1bd18bd81b89884b5d93fce532138b22b2bffc3cb1202448def82c4b205bd4de7d523cd895b31b80c94fd6899dce4225dde321f5dc90dd8c0f6e55872c1e21d03dce7070ca9e97888d5a06009615717a3b1eac6cf4778f5b91aa02b804e41099018b892b73c5808f87b59a590c30090557e2a4742d534abd4b914c14c122335667d0667c9cee17245b75ad0dd49873f4aec04bc732c7856d047dde994164413226085fda66c52acd335fa7baa774e0712586f859ca98f2d0a4300fe77a1cd3b64d8e2a8b597635117b5041991846d6dd11ba12c69bfb638cafe422c2e2a0c61870388b895912e8e59917e9e68a1e1b1e5a89c37d662c84a1ea548c7f7abbef8d942f4fe9025ba07399f147d60ffea0dc78fbf074c1b38edb7ce4269e28926f7cd1a2a7973eedc65d9449405a84b54a69afc9c76d6e1d907f68b254a11dc4f87fae2400da73e6ca5527d79b70a4c4e8c6c929ad392c041a4aa9bcda2914282d3aae593573263e19616ab7ea490956bc18c4e03f1a15bc8cec91b1d98738826373edd3b41eaa8874a0f3e826fdea2cba9ca703da0f721f36b31ca4bab963fa1593c3dc1f90982497a5dc41cbc61a18a359e015e4267ea8da8431c7ad04b7a04ea0b8f37d7b2e06637575e5801d0e802e0ac378eb9da6fc51b38069c2931c6a889e107e3d804a66b0cc7c53fe481134af7086a0c190fca81b5e6e24e49325a1eb053c2f957f2675805679112c12a923c35bf6f4a21d44445dcbbbc7ddb59923b31008669ec19b712d9cc167e9836d04257a424c238e4673bfea6d5eeb19e494f9ced3b4ffa7e825bcf4585cfcf020def2518ac044eb4b03f6a70af99dc98e695103975502c8c2b45078dea6a20d3da04ae0faaa96e6944b87f75a96020aa4dd34396b01b8d4ce303c553c673b77557aa841570ec891ae8715840f4970531c0bfdf86b1874a5ae09a8c40e22a550ced47551b170491307277f2850def9cfaa2ab1a4e56a4058ecfe37623acb20b934c1a6a5825d67abce78c3ae06c2f9414041d695da29f4888cbe21ad282d"}) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8ba962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eedd276fc4e3f570bda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x2, 0x2, 0x100000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b8050000000f01c20f01c1c5c50f070fde460b0f0130679f013fc2c2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000140)=0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x150d, &(0x7f0000000780)="$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") r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r8, 0x0, 0x0, 0x4000}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0xe, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="460a000000000000611134000000000018000d000000000000000000070000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r10, 0xfffffffffffffffd, 0xbb) 2.442056043s ago: executing program 2 (id=695): socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0xfffffffd}}, 0x2e) ioctl$PPPIOCGMRU(r4, 0x80047453, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x3a, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8349f246e"}}}}, 0x48) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r8, 0x4611, 0x3) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000002c0)={0xfffffffffffffdf2}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) 2.221840693s ago: executing program 4 (id=696): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0xfffffffc, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0xa, 0xa2b9, 0x6, 0x9, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x0, 0x5, 0x401, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x1, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7d, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00040, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x4, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x10000, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x55, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0xffffffff, 0x2, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x40100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000001c0)={0x7fffffff, 0x10, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0]}) socket(0x15, 0x5, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4001) r5 = syz_usb_connect$uac1(0x6, 0xc6, &(0x7f0000001440)=ANY=[@ANYBLOB="1201100100be34206b1d01014000010203010902b40003010df0100904000000010100000a2401090001020102072407010000040904010000010200000904010101010200000d240201010103084677308a6f0905010920000f590207250101029a0b0904020000010200000904020101010200000a240b240202290bff7fffb08c0a24020156010308707f0d2402010703f80972331a520a0924020201000000060c24020103000002a4e521770905820908006d008f07250102bc020000000000000000003504bb713535f0d8c2780031a03c4fa99f193246"], &(0x7f0000000a00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x5, 0x0, 0x10, 0x8}, 0x153, &(0x7f0000000440)={0x5, 0xf, 0x153, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0xf9, 0x5, 0x7fffff9, 0xff1e, 0x7, [0xffc000, 0xc00f, 0xff00cf, 0xcf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1, 0xff, 0x9, 0xe5}, @generic={0xff, 0x10, 0x1, "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"}, @ssp_cap={0x10, 0x10, 0xa, 0xaf, 0x1, 0x0, 0xff0f, 0x0, [0xff0030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x6, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x45, 0xfd, 0xf}]}, 0x6, [{0xbe, &(0x7f0000000640)=@string={0xbe, 0x3, "55a0ab151a0b13d3d77aa173451cd38a9c45eeb748d7e0c2c3291238231fc49bb11418d89f10d52f2ba8a7c12bad1924365964d12f01a9b553c290fb20054b7e5300ddddfec0ad7b1cc70050bb756ccf13e26ab25fb88891d1de504588fd05a52cf9ca9766a8e211aa66bbf17ff74315946955d06f647f01800247e9747a7adad82327f3fd7b55863e3f5c297a84a2fe6d1114c6a04b23233d5bbd3a9f036abb5d92c73f2a038859c046ee727ac6535536d16878e301908b4c5d3205"}}, {0x94, &(0x7f0000000700)=@string={0x94, 0x3, "c92631af6686f518a6e3d4477b0ee6301c6da848e01513cc3943f447a522a525b9849fac9e07d6dd999fc08cb646bcd024b4a5a6ca6842fb98c6518131ef2304c62d5b3642e0717d821b94369550ddcc7f8b76d8e10d139719eab60f3688c47ca94462f3b06b2906c5f483b0beeff6a2ce017f335d35f398fa8f048af347f37182b86f03c47cf84a8bc6ef0c6f3aa5fa1cbb"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x8e, &(0x7f0000000880)=@string={0x8e, 0x3, "865c7cabb6e1ebc2e38a7c105c7acea484c68a939b7ec4fe7d43011f9c9d957fe35c98d562e1cccdd088f8242173d5fb34974bc27abbbb61fb70565a4adbe4a25741c1ab4f2f5015866739371dd8a528572a859aceceb333e73e7b3b4db82b1d29ce4acbbe5eee1a7bf0de2eb0b2d24fce1370c78780f8ba229daf494dc55220858cfbd01ca3cd5698e01291"}}, {0x9b, &(0x7f0000000940)=@string={0x9b, 0x3, "fe11fe31fff2c7f5af004b273ffd25bec023ffb66b93b72d12f4e8398e14c00bc7f280c36e6c9b1624134fc519d6d19704b5d3dc98e084391552af391503f82860cab4b522910a3ae2a982c57043fa80ae037a444edf8c0d557d8431ef67678c08a19f3bb9ac3624140f21db5c6debfa9ac7d172d36cda09de429aa506b3aedfe27414c58297a4aeebf5c2a03020157fb99d9f29a371aef0a6"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000800)={0x14, &(0x7f0000000a80)={0x0, 0x31, 0x8c, {0x8c, 0xd, "192a6cf129fb11754a822837d728fbc011cfb6abf785c2f42063d8c122f3d6acc134237dd22122c1eb43b1df5e99a330fa3390cebf867e9eb92f3d606e1dc2da53a92b8daa72f6066d42dc0737fa7fc729cdefc3c03299539c1c40c70bb1551bb294cfff85f2c6512934884b883b9e73c5ed92535b8f299be3b8fb1e048a44fa8edd21608931f9a1e64a"}}, &(0x7f0000000b40)={0x0, 0x3, 0xf6, @string={0xf6, 0x3, "5acad40006ed05acfdb3f2abadbe7d0a9a545bba28b2ad007753bdf96ea4d9a336390c2c141e3553a944ad90da25d4a6ffb520136b2dba64d7e21b2a29b840a845b72b393a6b8610a0b27fe703f3f49551d12dcb2f57234568c430ac9e6aa26fa6819026c2e48139d1fc5f9709a980aaaff974bf274484484bf243cf5623e67e6df453d0670ee453dace51b48cd8fe88e59f3512533254016daa014e9aa4ac70e7083c03c80299acb55d6a07af5ca19bc2cc98c910b21c1e54009bfc0a30f716e6fbc77f26c142bdb88129fe3e02a750d91105b2921b01f344a2cc6d554d72eb8d398a3af856af776120f7e7bb33c7b6d9c17e18"}}}, &(0x7f00000013c0)={0x44, &(0x7f0000001140)={0x20, 0xa, 0xde, "1a57bf01459f8f9bff98831926c4ab31764584ee1da425ca753631ebd542340a15d865bdec1abde08dcae01e33203a28464fb6404ecb8f6e5f8dfdd03f2059ed399204211946a3ce66d426f48f22d8fa8a563be78014243516c58aa770e7fb7e1fdceca55e2604db9e60dc4c30e52483059e7af46a32085ac9623fca01d6b6c6ae3a2cbe6b1a992dec52e3f136a668c6f042a6fc859a6f1117295183819f38d659ce18f85582a7c78f825a95e9fa49e62b0c331c9a917b2f1167b9a821d3b7073ba960d566fe6862a8c8b0aa17ddf513a77a8d9048241fadc15c070d1979"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000001240)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000001280)={0x20, 0x81, 0x1, '$'}, &(0x7f00000012c0)={0x20, 0x82, 0x2, "5bcf"}, &(0x7f0000001300)={0x20, 0x83, 0x3, "5ae324"}, &(0x7f0000001340)={0x20, 0x84, 0x3, "6e7a1a"}, &(0x7f0000001380)={0x20, 0x85, 0x3, "9753e7"}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 610.847271ms ago: executing program 5 (id=697): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = io_uring_setup(0x401, 0x0) syz_io_uring_setup(0x7b, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000100)=""/67, 0x43) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) 302.697865ms ago: executing program 3 (id=698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) (fail_nth: 3) 0s ago: executing program 3 (id=699): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x8c400, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FALLOCATE={0x11, 0x30, 0x0, @fd=r3, 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0000000000003 [ 268.644198][ T7218] RBP: 00007f1799635090 R08: 0000000000000000 R09: 00007f1799634df7 [ 268.644210][ T7218] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 268.644221][ T7218] R13: 00007f17989e6038 R14: 00007f17989e5fa0 R15: 00007ffc4536cae8 [ 268.644257][ T7218] [ 269.771506][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.980071][ T7229] loop2: detected capacity change from 0 to 32768 [ 269.988566][ T7229] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.325 (7229) [ 270.012636][ T7229] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.023318][ T7229] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 270.428270][ T7229] BTRFS info (device loop2): enabling ssd optimizations [ 270.435341][ T7229] BTRFS info (device loop2): turning on async discard [ 270.443334][ T7229] BTRFS info (device loop2): enabling free space tree [ 271.118376][ T7259] loop0: detected capacity change from 0 to 1024 [ 271.167640][ T7259] EXT4-fs: Ignoring removed nobh option [ 271.202474][ T7259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.307796][ T5832] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.361139][ T857] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 271.580231][ T857] usb 4-1: Using ep0 maxpacket: 16 [ 271.794455][ T857] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 271.980435][ T857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.032942][ T857] usb 4-1: Product: syz [ 272.042775][ T857] usb 4-1: Manufacturer: syz [ 272.052916][ T857] usb 4-1: SerialNumber: syz [ 272.073420][ T857] usb 4-1: config 0 descriptor?? [ 272.127172][ T857] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 272.327500][ T857] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 272.525705][ T857] visor 4-1:0.0: probe with driver visor failed with error -5 [ 272.543091][ T7261] loop3: detected capacity change from 0 to 512 [ 273.784176][ T7261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.343799][ T7261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.388144][ T7261] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.994503][ T7277] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 275.022690][ T7277] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 275.540710][ T5970] usb 4-1: USB disconnect, device number 17 [ 275.679758][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.920436][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.393019][ T7311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.340'. [ 277.541764][ T7310] loop1: detected capacity change from 0 to 32768 [ 277.612144][ T7310] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.677157][ T5958] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 277.692384][ T7310] XFS (loop1): Ending clean mount [ 277.897175][ T5958] usb 4-1: Using ep0 maxpacket: 16 [ 278.017530][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 278.300323][ T5958] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 278.309616][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.436455][ T5958] usb 4-1: Product: syz [ 278.468810][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.480259][ T5958] usb 4-1: Manufacturer: syz [ 278.484894][ T5958] usb 4-1: SerialNumber: syz [ 278.527974][ T5958] usb 4-1: config 0 descriptor?? [ 278.544654][ T5958] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 278.579760][ T7326] loop4: detected capacity change from 0 to 128 [ 278.879280][ T5958] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 278.920031][ T7329] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 278.939379][ T5958] visor 4-1:0.0: probe with driver visor failed with error -5 [ 278.994722][ T7332] loop1: detected capacity change from 0 to 512 [ 279.218900][ T7304] loop3: detected capacity change from 0 to 512 [ 279.261628][ T7304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.486667][ T7304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.547038][ T7304] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.979851][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 280.276818][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 280.336923][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 280.364063][ T24] usb 2-1: config 218 has an invalid interface number: 5 but max is 0 [ 280.422816][ T24] usb 2-1: config 218 has no interface number 0 [ 283.758586][ T24] usb 2-1: config 218 interface 5 has no altsetting 0 [ 283.970461][ T24] usb 2-1: string descriptor 0 read error: -71 [ 283.981430][ T24] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f1.1d [ 284.025237][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.076955][ T24] usb 2-1: can't set config #218, error -71 [ 284.080742][ T5910] usb 4-1: USB disconnect, device number 18 [ 284.090583][ T24] usb 2-1: USB disconnect, device number 9 [ 284.153127][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.432028][ T7373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.355'. [ 285.776894][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 286.837151][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 287.808285][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.818608][ T10] usb 3-1: config 0 has no interfaces? [ 287.834148][ T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 287.843288][ T10] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 287.928819][ T7380] loop4: detected capacity change from 0 to 32768 [ 287.971944][ T7380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.356 (7380) [ 288.432855][ T10] usb 3-1: Product: syz [ 288.437121][ T10] usb 3-1: Manufacturer: syz [ 288.441723][ T10] usb 3-1: SerialNumber: syz [ 288.449096][ T10] usb 3-1: config 0 descriptor?? [ 288.519005][ T10] usb 3-1: can't set config #0, error -71 [ 288.553753][ T7380] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 288.568713][ T10] usb 3-1: USB disconnect, device number 6 [ 288.828101][ T7396] 9pnet_virtio: no channels available for device syz [ 289.317076][ T7380] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 289.346238][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 289.359672][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 289.555452][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 289.883038][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 289.926679][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 289.970732][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 290.067223][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 290.098673][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 290.164402][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 290.206864][ T7380] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 290.647646][ T7380] BTRFS error (device loop4): open_ctree failed: -12 [ 291.246818][ T5960] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 292.350764][ T5960] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 292.359740][ T5960] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config [ 292.373912][ T5960] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 293.348273][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.356370][ T5960] usb 1-1: Product: syz [ 293.360609][ T5960] usb 1-1: Manufacturer: syz [ 293.365250][ T5960] usb 1-1: SerialNumber: syz [ 293.374551][ T5960] usb 1-1: config 0 descriptor?? [ 293.453051][ T5960] usb 1-1: can't set config #0, error -71 [ 293.488480][ T5960] usb 1-1: USB disconnect, device number 13 [ 294.043062][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 298.737032][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 298.878340][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 298.884791][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 299.855729][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 300.699762][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 300.815818][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 300.991490][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 301.033505][ T24] usb 3-1: Product: syz [ 301.043660][ T24] usb 3-1: Manufacturer: syz [ 301.110520][ T24] usb 3-1: SerialNumber: syz [ 301.118174][ T24] usb 3-1: config 0 descriptor?? [ 301.128826][ T24] usb 3-1: selecting invalid altsetting 0 [ 301.357215][ T7463] loop0: detected capacity change from 0 to 2048 [ 301.445597][ T7463] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 301.465284][ T7466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 301.553272][ T7463] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.568864][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 301.629995][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 301.641132][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 301.649620][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 301.657797][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.669610][ T6011] usb 3-1: USB disconnect, device number 7 [ 303.746825][ T5834] Bluetooth: hci5: command tx timeout [ 304.662124][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 304.671342][ T7497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 304.680312][ T7497] netlink: 4612 bytes leftover after parsing attributes in process `syz.3.383'. [ 306.210553][ T5834] Bluetooth: hci5: command tx timeout [ 306.563871][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.388'. [ 307.682781][ T3520] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.863131][ T7531] loop3: detected capacity change from 0 to 32768 [ 307.870436][ T7531] gfs2: Unknown parameter 'GPL' [ 307.966264][ T7533] loop4: detected capacity change from 0 to 2048 [ 307.995557][ T7531] loop3: detected capacity change from 0 to 2048 [ 308.002646][ T7531] udf: Unexpected value for 'nostrict' [ 308.060525][ T7533] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 308.227148][ T5834] Bluetooth: hci5: command tx timeout [ 308.236867][ T7533] UDF-fs: Scanning with blocksize 512 failed [ 308.246134][ T7467] chnl_net:caif_netlink_parms(): no params data found [ 308.268244][ T7533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 308.604387][ T7538] loop3: detected capacity change from 0 to 256 [ 308.616238][ T7538] vfat: Unknown parameter ' à' [ 309.139080][ T3520] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.308413][ T7541] loop3: detected capacity change from 0 to 32768 [ 309.848389][ T7542] read_mapping_page failed! [ 309.855354][ T7542] ERROR: (device loop3): txCommit: [ 309.855354][ T7542] [ 310.308749][ T5834] Bluetooth: hci5: command tx timeout [ 310.340777][ T3520] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.683565][ T3520] team0: Port device netdevsim0 removed [ 310.699040][ T3520] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.834245][ T7552] loop4: detected capacity change from 0 to 512 [ 311.382866][ T7552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.396469][ T7552] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.579393][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.587092][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.599900][ T7467] bridge_slave_0: entered allmulticast mode [ 311.609374][ T7467] bridge_slave_0: entered promiscuous mode [ 311.641996][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.665880][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.676813][ T980] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 311.685821][ T7467] bridge_slave_1: entered allmulticast mode [ 311.706420][ T7467] bridge_slave_1: entered promiscuous mode [ 311.989395][ T980] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 311.999300][ T980] usb 5-1: config 0 has no interface number 0 [ 312.008424][ T980] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.031670][ T980] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.042313][ T7467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.042893][ T980] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.547565][ T980] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 312.559428][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.574843][ T980] usb 5-1: config 0 descriptor?? [ 312.746167][ T3520] bridge_slave_1: left allmulticast mode [ 312.763240][ T3520] bridge_slave_1: left promiscuous mode [ 312.776569][ T3520] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.838789][ T3520] bridge_slave_0: left allmulticast mode [ 312.844484][ T3520] bridge_slave_0: left promiscuous mode [ 312.866673][ T3520] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.136168][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.400'. [ 313.766618][ T7585] __vm_enough_memory: pid: 7585, comm: syz.4.395, bytes: 21200573837312 not enough memory for the allocation [ 317.560501][ T980] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0002/input/input7 [ 318.631957][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.762430][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.794753][ T980] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 318.817474][ T980] usb 5-1: USB disconnect, device number 8 [ 318.931720][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.116233][ T7587] fido_id[7587]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 319.831906][ T7595] loop4: detected capacity change from 0 to 128 [ 319.871870][ T7595] omfs: sysblock size (-58445445) is out of range [ 320.309384][ T7600] loop4: detected capacity change from 0 to 32768 [ 320.367196][ T7600] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.511124][ T7600] XFS (loop4): Ending clean mount [ 321.053916][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 321.437163][ T5844] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 321.920132][ T3520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.931205][ T3520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.942191][ T3520] bond0 (unregistering): Released all slaves [ 321.959281][ T7467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.991302][ T7618] netlink: 80 bytes leftover after parsing attributes in process `syz.4.406'. [ 322.029759][ T7620] pim6reg: entered allmulticast mode [ 322.051877][ T10] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 322.195739][ T7624] loop0: detected capacity change from 0 to 2048 [ 322.214789][ T7624] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 322.222761][ T10] usb 4-1: device descriptor read/64, error -71 [ 322.241440][ T7624] UDF-fs: Scanning with blocksize 512 failed [ 322.311865][ T7467] team0: Port device team_slave_0 added [ 322.315025][ T7624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.468443][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 323.610872][ T7467] team0: Port device team_slave_1 added [ 323.702312][ T10] usb 4-1: device descriptor read/64, error -71 [ 323.889022][ T10] usb usb4-port1: attempt power cycle [ 323.900153][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.907201][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.933722][ T7467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.278871][ T3520] hsr_slave_0: left promiscuous mode [ 324.286378][ T3520] hsr_slave_1: left promiscuous mode [ 324.300408][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.328166][ T7652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.412'. [ 324.345257][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.372183][ T3520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.385080][ T3520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.397031][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 324.450629][ T10] usb 4-1: device descriptor read/8, error -71 [ 326.276212][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 327.831360][ T3520] veth1_macvtap: left promiscuous mode [ 328.027867][ T3520] veth0_macvtap: left promiscuous mode [ 328.122292][ T3520] veth1_vlan: left promiscuous mode [ 328.201563][ T3520] veth0_vlan: left promiscuous mode [ 328.497130][ T10] usb 4-1: device not accepting address 22, error -71 [ 329.199538][ T10] usb usb4-port1: unable to enumerate USB device [ 330.602164][ T7670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 330.786060][ T7676] loop0: detected capacity change from 0 to 64 [ 330.800145][ T7676] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 331.020450][ T7682] loop2: detected capacity change from 0 to 1024 [ 331.046462][ T7682] EXT4-fs: Ignoring removed nobh option [ 331.077319][ T7684] loop0: detected capacity change from 0 to 1024 [ 331.135762][ T7684] EXT4-fs: Ignoring removed nobh option [ 331.208952][ T7682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.276622][ T7684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.475979][ T30] audit: type=1800 audit(1763832304.735:44): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.421" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 331.548728][ T30] audit: type=1800 audit(1763832304.815:45): pid=7684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.422" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 332.211285][ T3520] team0 (unregistering): Port device team_slave_1 removed [ 332.289948][ T3520] team0 (unregistering): Port device team_slave_0 removed [ 332.418191][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.567577][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.981391][ T7467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.000491][ T7467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.056806][ T7467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.265833][ T7705] loop3: detected capacity change from 0 to 2048 [ 333.330764][ T7705] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=66359, location=66359 [ 333.356492][ T7705] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.373814][ T7702] loop0: detected capacity change from 0 to 40427 [ 333.537540][ T7714] netlink: 20 bytes leftover after parsing attributes in process `syz.4.427'. [ 334.628174][ T7467] hsr_slave_0: entered promiscuous mode [ 334.657421][ T7467] hsr_slave_1: entered promiscuous mode [ 334.663965][ T7467] debugfs: 'hsr0' already exists in 'hsr' [ 334.696473][ T7467] Cannot create hsr debugfs directory [ 334.726867][ T5831] Bluetooth: hci0: command 0x1003 tx timeout [ 334.735141][ T5834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 335.013223][ T7722] bridge0: entered promiscuous mode [ 335.075793][ T7722] bridge0: port 3(macvtap1) entered blocking state [ 335.104657][ T7722] bridge0: port 3(macvtap1) entered disabled state [ 335.113514][ T7722] macvtap1: entered allmulticast mode [ 335.130846][ T7722] bridge0: entered allmulticast mode [ 335.142339][ T7722] macvtap1: left allmulticast mode [ 335.158842][ T7730] loop0: detected capacity change from 0 to 256 [ 335.165746][ T7722] bridge0: left allmulticast mode [ 335.168295][ T7728] loop3: detected capacity change from 0 to 2048 [ 335.197107][ T7730] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.253414][ T7728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.271693][ T7730] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 335.283984][ T7722] bridge0: left promiscuous mode [ 335.324868][ T7728] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.345548][ T7730] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 335.371117][ T7730] exFAT-fs (loop0): failed to load alloc-bitmap [ 335.391869][ T7730] exFAT-fs (loop0): failed to recognize exfat type [ 336.118284][ T7735] loop0: detected capacity change from 0 to 128 [ 336.130996][ T7735] ext4: Unknown parameter 'seclabel' [ 336.183329][ T7735] No such timeout policy "syz1" [ 336.562855][ T7733] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 336.770708][ T7739] kvm: user requested TSC rate below hardware speed [ 336.829276][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.937729][ T7742] netlink: 352 bytes leftover after parsing attributes in process `syz.0.432'. [ 337.029606][ T7741] loop2: detected capacity change from 0 to 64 [ 337.037511][ T7741] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 337.121168][ T7742] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4049079360 (8098158720 ns) > initial count (4986859780 ns). Using initial count to start timer. [ 337.363362][ T7739] vxcan3: entered allmulticast mode [ 337.487437][ T980] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 337.668012][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 337.701418][ T980] usb 4-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42 [ 337.717854][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.754692][ T980] usb 4-1: config 0 descriptor?? [ 337.781042][ T980] gspca_main: finepix-2.14.0 probing 04cb:013d [ 337.820289][ T7757] loop4: detected capacity change from 0 to 2048 [ 337.910480][ T7757] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 338.181441][ T7757] UDF-fs: Scanning with blocksize 512 failed [ 338.194697][ T5960] usb 4-1: USB disconnect, device number 23 [ 338.282509][ T7757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 338.292098][ T7467] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.351008][ T7467] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 338.518690][ T7467] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.325374][ T7467] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.842848][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 343.864221][ T7467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.052380][ T7467] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.268453][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.275582][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.301335][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.308563][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.469674][ T7801] loop3: detected capacity change from 0 to 256 [ 344.532456][ T7801] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.593114][ T7801] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 344.758858][ T7806] loop2: detected capacity change from 0 to 64 [ 344.808803][ T7806] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 344.837317][ T7801] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 344.958216][ T7801] exFAT-fs (loop3): failed to load alloc-bitmap [ 344.964516][ T7801] exFAT-fs (loop3): failed to recognize exfat type [ 345.107619][ T7812] fuse: Bad value for 'fd' [ 345.436668][ T7819] loop3: detected capacity change from 0 to 128 [ 345.450527][ T7819] ext4: Unknown parameter 'seclabel' [ 345.511929][ T7819] No such timeout policy "syz1" [ 346.466864][ T5834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.674744][ T7467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.692549][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.448'. [ 347.607421][ T5910] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 347.749389][ T980] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 348.138660][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 348.196605][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33216, setting to 1024 [ 348.336769][ T7862] loop2: detected capacity change from 0 to 64 [ 348.347931][ T7862] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 348.467500][ T5910] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.476582][ T5910] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 348.489908][ T5910] usb 4-1: Manufacturer: syz [ 348.502396][ T5910] usb 4-1: config 0 descriptor?? [ 349.047166][ T5831] Bluetooth: hci5: command 0x0405 tx timeout [ 349.347616][ T7467] veth0_vlan: entered promiscuous mode [ 349.361729][ T7467] veth1_vlan: entered promiscuous mode [ 349.607052][ T7467] veth0_macvtap: entered promiscuous mode [ 349.630137][ T7467] veth1_macvtap: entered promiscuous mode [ 349.655532][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.681278][ T7467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.752974][ T7879] FAULT_INJECTION: forcing a failure. [ 349.752974][ T7879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 349.809382][ T6208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.845241][ T6208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.860993][ T6208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.879033][ T6208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.901864][ T7879] CPU: 0 UID: 0 PID: 7879 Comm: syz.4.456 Not tainted syzkaller #0 PREEMPT(full) [ 349.901889][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 349.901909][ T7879] Call Trace: [ 349.901917][ T7879] [ 349.901925][ T7879] dump_stack_lvl+0x189/0x250 [ 349.901957][ T7879] ? __pfx____ratelimit+0x10/0x10 [ 349.901982][ T7879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.902004][ T7879] ? __pfx__printk+0x10/0x10 [ 349.902022][ T7879] ? fs_reclaim_acquire+0x7d/0x100 [ 349.902051][ T7879] should_fail_ex+0x414/0x560 [ 349.902077][ T7879] prepare_alloc_pages+0x22b/0x650 [ 349.902104][ T7879] __alloc_frozen_pages_noprof+0x123/0x370 [ 349.902131][ T7879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 349.902162][ T7879] ? policy_nodemask+0x27c/0x720 [ 349.902188][ T7879] alloc_pages_mpol+0x232/0x4a0 [ 349.902217][ T7879] folio_alloc_mpol_noprof+0x39/0x70 [ 349.902240][ T7879] __read_swap_cache_async+0x101/0x480 [ 349.902267][ T7879] swap_cluster_readahead+0x336/0x630 [ 349.902290][ T7879] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 349.902321][ T7879] ? get_vma_policy+0x27c/0x3c0 [ 349.902345][ T7879] swapin_readahead+0x189/0xc60 [ 349.902375][ T7879] ? __pfx_swapin_readahead+0x10/0x10 [ 349.902393][ T7879] ? swap_table_get+0x1e/0x260 [ 349.902416][ T7879] ? swap_table_get+0x1e/0x260 [ 349.902437][ T7879] ? swap_table_get+0x1e/0x260 [ 349.902462][ T7879] ? swap_table_get+0x216/0x260 [ 349.902488][ T7879] ? swap_cache_get_folio+0x51c/0x530 [ 349.902518][ T7879] do_swap_page+0x8ee/0x5d70 [ 349.902549][ T7879] ? __lock_acquire+0xab9/0xd20 [ 349.902586][ T7879] ? do_swap_page+0x17f/0x5d70 [ 349.902610][ T7879] ? __pfx_do_swap_page+0x10/0x10 [ 349.902645][ T7879] ? __pfx_default_wake_function+0x10/0x10 [ 349.902670][ T7879] ? ___pte_offset_map+0x1ae/0x240 [ 349.902691][ T7879] ? pte_offset_map_rw_nolock+0xea/0x160 [ 349.902713][ T7879] handle_mm_fault+0x127a/0x32c0 [ 349.902745][ T7879] ? handle_mm_fault+0xdb/0x32c0 [ 349.902774][ T7879] ? __pfx_handle_mm_fault+0x10/0x10 [ 349.902814][ T7879] ? lock_mm_and_find_vma+0x9c/0x300 [ 349.902837][ T7879] do_user_addr_fault+0x764/0x1380 [ 349.902876][ T7879] exc_page_fault+0x82/0x100 [ 349.902905][ T7879] asm_exc_page_fault+0x26/0x30 [ 349.902922][ T7879] RIP: 0010:__get_user_1+0x14/0x30 [ 349.902943][ T7879] Code: ff ff ff cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 349.902958][ T7879] RSP: 0018:ffffc90004b27c78 EFLAGS: 00050287 [ 349.902975][ T7879] RAX: 0000200000001900 RBX: 0000200000001900 RCX: 33abed068adceb00 [ 349.902989][ T7879] RDX: 00007ffffffff000 RSI: ffffffff8d9760ce RDI: ffffffff8bbf81e0 [ 349.903001][ T7879] RBP: ffffc90004b27e58 R08: 0000000000000000 R09: ffffffff820fb310 [ 349.903014][ T7879] R10: dffffc0000000000 R11: ffffed10036d81a0 R12: ffff888026baf5d0 [ 349.903027][ T7879] R13: dffffc0000000000 R14: ffff888056d5f000 R15: ffff8880571c27e0 [ 349.903047][ T7879] ? __might_fault+0xb0/0x130 [ 349.903075][ T7879] tioclinux+0xa2/0x530 [ 349.903094][ T7879] ? vt_ioctl+0x80f/0x1f20 [ 349.903116][ T7879] vt_ioctl+0x81a/0x1f20 [ 349.903142][ T7879] ? __pfx_vt_ioctl+0x10/0x10 [ 349.903178][ T7879] ? __fget_files+0x2a/0x420 [ 349.903206][ T7879] ? tty_jobctrl_ioctl+0x369/0xb70 [ 349.903222][ T7879] ? __fget_files+0x3a0/0x420 [ 349.903242][ T7879] ? __fget_files+0x2a/0x420 [ 349.903265][ T7879] tty_ioctl+0x929/0xde0 [ 349.903287][ T7879] ? __pfx_tty_ioctl+0x10/0x10 [ 349.903309][ T7879] __se_sys_ioctl+0xfc/0x170 [ 349.903331][ T7879] do_syscall_64+0xfa/0xfa0 [ 349.903348][ T7879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.903363][ T7879] ? clear_bhb_loop+0x60/0xb0 [ 349.903383][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.903400][ T7879] RIP: 0033:0x7fbb2ef8f749 [ 349.903416][ T7879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.903430][ T7879] RSP: 002b:00007fbb2d1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.903448][ T7879] RAX: ffffffffffffffda RBX: 00007fbb2f1e5fa0 RCX: 00007fbb2ef8f749 [ 349.903461][ T7879] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000010 [ 349.903472][ T7879] RBP: 00007fbb2d1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 349.903482][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.903492][ T7879] R13: 00007fbb2f1e6038 R14: 00007fbb2f1e5fa0 R15: 00007ffd6af082b8 [ 349.903524][ T7879] [ 350.606806][ T998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.606850][ T998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.944977][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 351.086994][ T7586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.087016][ T7586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.219697][ T5910] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 351.219744][ T5910] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 351.219803][ T5910] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 351.231289][ T5910] usb 4-1: USB disconnect, device number 24 [ 351.468323][ T7904] loop3: detected capacity change from 0 to 512 [ 352.024682][ T7910] cgroup: fork rejected by pids controller in /syz5 [ 352.602763][ T7904] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 353.081488][ T8208] loop2: detected capacity change from 0 to 64 [ 353.087187][ T8208] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 353.296845][ T5958] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 353.430708][ T5958] usb 4-1: device descriptor read/64, error -71 [ 353.504121][ T8219] loop5: detected capacity change from 0 to 256 [ 353.763619][ T8219] FAT-fs (loop5): Directory bread(block 64) failed [ 353.808794][ T8219] FAT-fs (loop5): Directory bread(block 65) failed [ 353.816823][ T5958] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 353.848863][ T8219] FAT-fs (loop5): Directory bread(block 66) failed [ 353.862600][ T8219] FAT-fs (loop5): Directory bread(block 67) failed [ 353.874033][ T8219] FAT-fs (loop5): Directory bread(block 68) failed [ 353.880938][ T8219] FAT-fs (loop5): Directory bread(block 69) failed [ 353.889429][ T8219] FAT-fs (loop5): Directory bread(block 70) failed [ 353.901988][ T8219] FAT-fs (loop5): Directory bread(block 71) failed [ 353.909880][ T8222] tipc: Failed to remove unknown binding: 66,1,1/0:3867706367/3867706369 [ 353.910779][ T8219] FAT-fs (loop5): Directory bread(block 72) failed [ 353.930589][ T8219] FAT-fs (loop5): Directory bread(block 73) failed [ 353.932229][ T8222] tipc: Failed to remove unknown binding: 66,1,1/0:3867706367/3867706369 [ 353.965512][ T8222] tipc: Failed to remove unknown binding: 66,1,1/0:3867706367/3867706369 [ 353.987134][ T5958] usb 4-1: device descriptor read/64, error -71 [ 354.099649][ T5958] usb usb4-port1: attempt power cycle [ 354.460245][ T5958] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 354.500398][ T5958] usb 4-1: device descriptor read/8, error -71 [ 354.540040][ T8233] netlink: 72 bytes leftover after parsing attributes in process `syz.2.472'. [ 354.591234][ T8233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.472'. [ 354.757168][ T5958] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 354.837187][ T5958] usb 4-1: device descriptor read/8, error -71 [ 354.948903][ T5958] usb usb4-port1: unable to enumerate USB device [ 355.257693][ T8246] loop4: detected capacity change from 0 to 64 [ 355.298253][ T8246] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 356.928661][ T8268] loop2: detected capacity change from 0 to 256 [ 356.939295][ T8268] exfat: Deprecated parameter 'namecase' [ 356.945015][ T8268] exfat: Deprecated parameter 'namecase' [ 356.991166][ T8241] loop0: detected capacity change from 0 to 32768 [ 357.028533][ T8263] loop3: detected capacity change from 0 to 4096 [ 357.037484][ T8263] ntfs3: Bad value for 'uid' [ 357.042120][ T8263] ntfs3: Bad value for 'uid' [ 357.152294][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 357.216434][ T8268] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 357.228913][ T8241] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.474 (8241) [ 357.347275][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 357.357340][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 357.360222][ T8268] exFAT-fs (loop2): start_clu is invalid cluster(0xff000008) [ 357.403803][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 357.419836][ T8241] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 357.445174][ T8241] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 357.462763][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 357.480945][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 357.492048][ T10] usb 6-1: Product: syz [ 357.496244][ T10] usb 6-1: Manufacturer: syz [ 357.501532][ T10] usb 6-1: SerialNumber: syz [ 357.553196][ T10] usb 6-1: config 0 descriptor?? [ 357.642074][ T8241] BTRFS info (device loop0): enabling ssd optimizations [ 357.685362][ T8241] BTRFS info (device loop0): turning on async discard [ 357.705635][ T8241] BTRFS info (device loop0): enabling free space tree [ 357.989895][ T10] usb 6-1: USB disconnect, device number 2 [ 358.415533][ T5833] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.439995][ T8301] loop3: detected capacity change from 0 to 64 [ 358.449552][ T8301] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 359.033256][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 359.347943][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 359.360852][ T8274] loop4: detected capacity change from 0 to 40427 [ 359.455685][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.675461][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.886544][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 360.028110][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.328482][ T24] usb 4-1: config 0 descriptor?? [ 360.545811][ T24] hub 4-1:0.0: USB hub found [ 361.227345][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.508879][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.255290][ T24] hub 4-1:0.0: 29 ports detected [ 362.333819][ T24] hub 4-1:0.0: insufficient power available to use all downstream ports [ 362.571993][ T8321] loop0: detected capacity change from 0 to 2048 [ 362.574253][ T8274] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 362.582249][ T8321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 362.659927][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.673707][ T8321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.704689][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.471472][ T24] usb 4-1: USB disconnect, device number 29 [ 363.599985][ T8333] FAULT_INJECTION: forcing a failure. [ 363.599985][ T8333] name failslab, interval 1, probability 0, space 0, times 0 [ 363.634860][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.0.492 Not tainted syzkaller #0 PREEMPT(full) [ 363.634887][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 363.634902][ T8333] Call Trace: [ 363.634909][ T8333] [ 363.634917][ T8333] dump_stack_lvl+0x189/0x250 [ 363.634949][ T8333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.634973][ T8333] ? __pfx__printk+0x10/0x10 [ 363.635007][ T8333] should_fail_ex+0x414/0x560 [ 363.635035][ T8333] should_failslab+0xa8/0x100 [ 363.635059][ T8333] __kmalloc_noprof+0xdf/0x800 [ 363.635079][ T8333] ? kfree+0x4d/0x680 [ 363.635093][ T8333] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 363.635124][ T8333] tomoyo_realpath_from_path+0xe3/0x5d0 [ 363.635145][ T8333] ? tomoyo_domain+0xd8/0x130 [ 363.635170][ T8333] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 363.635195][ T8333] tomoyo_path_number_perm+0x1e8/0x5a0 [ 363.635223][ T8333] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 363.635287][ T8333] ? __fget_files+0x2a/0x420 [ 363.635315][ T8333] ? __fget_files+0x3a0/0x420 [ 363.635337][ T8333] ? __fget_files+0x2a/0x420 [ 363.635364][ T8333] security_file_ioctl+0xcb/0x2d0 [ 363.635390][ T8333] __se_sys_ioctl+0x47/0x170 [ 363.635413][ T8333] do_syscall_64+0xfa/0xfa0 [ 363.635431][ T8333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.635449][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 363.635469][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.635485][ T8333] RIP: 0033:0x7f531a38f749 [ 363.635502][ T8333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.635517][ T8333] RSP: 002b:00007f531b20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.635536][ T8333] RAX: ffffffffffffffda RBX: 00007f531a5e5fa0 RCX: 00007f531a38f749 [ 363.635549][ T8333] RDX: 000020000011d340 RSI: 000000008010640b RDI: 0000000000000003 [ 363.635559][ T8333] RBP: 00007f531b20b090 R08: 0000000000000000 R09: 0000000000000000 [ 363.635571][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.635581][ T8333] R13: 00007f531a5e6038 R14: 00007f531a5e5fa0 R15: 00007ffcef995298 [ 363.635607][ T8333] [ 363.635614][ T8333] ERROR: Out of memory at tomoyo_realpath_from_path. [ 364.398498][ T8347] tipc: Enabling of bearer rejected, failed to enable media [ 365.077001][ T6617] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 365.559838][ T6617] usb 4-1: Using ep0 maxpacket: 8 [ 365.569980][ T6617] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 365.590440][ T6617] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.603442][ T6617] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.623795][ T6617] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 365.644099][ T6617] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.683133][ T6617] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.703011][ T6617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.002114][ T6617] usb 4-1: usb_control_msg returned -32 [ 366.031132][ T6617] usbtmc 4-1:16.0: can't read capabilities [ 366.276806][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 366.358311][ T8378] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 366.379187][ T5890] usb 4-1: USB disconnect, device number 30 [ 366.457019][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 366.464487][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 366.490652][ T8381] FAULT_INJECTION: forcing a failure. [ 366.490652][ T8381] name failslab, interval 1, probability 0, space 0, times 0 [ 366.508372][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 366.531070][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 366.543884][ T8381] CPU: 0 UID: 0 PID: 8381 Comm: syz.0.503 Not tainted syzkaller #0 PREEMPT(full) [ 366.543909][ T8381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.543920][ T8381] Call Trace: [ 366.543927][ T8381] [ 366.543936][ T8381] dump_stack_lvl+0x189/0x250 [ 366.543964][ T8381] ? __pfx____ratelimit+0x10/0x10 [ 366.543995][ T8381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.544019][ T8381] ? __pfx__printk+0x10/0x10 [ 366.544049][ T8381] should_fail_ex+0x414/0x560 [ 366.544077][ T8381] should_failslab+0xa8/0x100 [ 366.544102][ T8381] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 366.544124][ T8381] ? __alloc_skb+0x255/0x430 [ 366.544143][ T8381] ? napi_skb_cache_get+0x4a5/0x790 [ 366.544162][ T8381] ? napi_skb_cache_get+0x151/0x790 [ 366.544186][ T8381] __alloc_skb+0x255/0x430 [ 366.544209][ T8381] ? __pfx___alloc_skb+0x10/0x10 [ 366.544241][ T8381] _sctp_make_chunk+0x59/0x290 [ 366.544268][ T8381] sctp_make_heartbeat+0xa7/0x470 [ 366.544297][ T8381] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 366.544326][ T8381] ? is_bpf_text_address+0x26/0x2b0 [ 366.544355][ T8381] sctp_sf_do_prm_requestheartbeat+0x32/0x280 [ 366.544382][ T8381] sctp_do_sm+0x1e7/0x5c40 [ 366.544400][ T8381] ? __pfx_sctp_pname+0x10/0x10 [ 366.544419][ T8381] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 366.544439][ T8381] ? arch_stack_walk+0xfc/0x150 [ 366.544475][ T8381] ? __pfx_sctp_do_sm+0x10/0x10 [ 366.544492][ T8381] ? stack_trace_save+0x9c/0xe0 [ 366.544563][ T8381] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 366.544587][ T8381] sctp_apply_peer_addr_params+0xdf/0x1880 [ 366.544622][ T8381] sctp_setsockopt_peer_addr_params+0x678/0x940 [ 366.544653][ T8381] sctp_setsockopt+0x752/0x12c0 [ 366.544677][ T8381] ? sock_common_setsockopt+0x36/0xc0 [ 366.544696][ T8381] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 366.544717][ T8381] do_sock_setsockopt+0x17c/0x1b0 [ 366.544743][ T8381] __x64_sys_setsockopt+0x13f/0x1b0 [ 366.544771][ T8381] do_syscall_64+0xfa/0xfa0 [ 366.544790][ T8381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.544808][ T8381] ? clear_bhb_loop+0x60/0xb0 [ 366.544829][ T8381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.544846][ T8381] RIP: 0033:0x7f531a38f749 [ 366.544865][ T8381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.544880][ T8381] RSP: 002b:00007f531b20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 366.544898][ T8381] RAX: ffffffffffffffda RBX: 00007f531a5e5fa0 RCX: 00007f531a38f749 [ 366.544911][ T8381] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 366.544922][ T8381] RBP: 00007f531b20b090 R08: 000000000000009c R09: 0000000000000000 [ 366.544934][ T8381] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 366.544944][ T8381] R13: 00007f531a5e6038 R14: 00007f531a5e5fa0 R15: 00007ffcef995298 [ 366.544976][ T8381] [ 366.829450][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 366.838124][ T10] usb 5-1: Product: syz [ 366.842381][ T10] usb 5-1: Manufacturer: syz [ 366.847089][ T10] usb 5-1: SerialNumber: syz [ 366.854677][ T10] usb 5-1: config 0 descriptor?? [ 367.171999][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.504'. [ 367.272039][ T6029] usb 5-1: USB disconnect, device number 9 [ 367.532879][ T8394] mmap: syz.0.504 (8394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 367.699970][ T8409] loop5: detected capacity change from 0 to 128 [ 367.732478][ T8409] EXT4-fs: Invalid want_extra_isize 2147483647 [ 368.074462][ T8410] bond1: entered promiscuous mode [ 368.080072][ T8410] bond1: entered allmulticast mode [ 368.097591][ T8410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.196976][ T7349] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 368.588573][ T7349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.610704][ T7349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.651271][ T7349] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 368.698954][ T7349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.710309][ T7349] usb 5-1: config 0 descriptor?? [ 369.707006][ T5831] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 369.719236][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 369.719263][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.719274][ T5831] Workqueue: hci1 hci_rx_work [ 369.719299][ T5831] Call Trace: [ 369.719307][ T5831] [ 369.719316][ T5831] dump_stack_lvl+0x189/0x250 [ 369.719346][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.719372][ T5831] ? __pfx__printk+0x10/0x10 [ 369.719397][ T5831] ? kernfs_path_from_node+0x250/0x290 [ 369.719417][ T5831] ? kernfs_path_from_node+0x2f/0x290 [ 369.719441][ T5831] sysfs_create_dir_ns+0x259/0x280 [ 369.719464][ T5831] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 369.719485][ T5831] ? do_raw_spin_unlock+0x122/0x240 [ 369.719510][ T5831] kobject_add_internal+0x59f/0xb70 [ 369.719539][ T5831] kobject_add+0x155/0x220 [ 369.719565][ T5831] ? __pfx_kobject_add+0x10/0x10 [ 369.719585][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 369.719612][ T5831] ? get_device_parent+0x366/0x3a0 [ 369.719643][ T5831] device_add+0x408/0xb80 [ 369.719673][ T5831] hci_conn_add_sysfs+0xd5/0x210 [ 369.719697][ T5831] le_conn_complete_evt+0xf1d/0x1420 [ 369.719730][ T5831] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 369.719759][ T5831] ? irqentry_exit+0x5dd/0x660 [ 369.719792][ T5831] hci_le_conn_complete_evt+0x187/0x480 [ 369.719819][ T5831] hci_event_packet+0x78f/0x1260 [ 369.719841][ T5831] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 369.719864][ T5831] ? __pfx_hci_event_packet+0x10/0x10 [ 369.719884][ T5831] ? kcov_remote_start+0x4d3/0x810 [ 369.719900][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.719920][ T5831] ? hci_send_to_monitor+0xe2/0x590 [ 369.719946][ T5831] hci_rx_work+0x3ee/0x1060 [ 369.719976][ T5831] ? process_one_work+0x868/0x15e0 [ 369.719995][ T5831] process_one_work+0x93a/0x15e0 [ 369.720014][ T5831] ? __lock_acquire+0xab9/0xd20 [ 369.720058][ T5831] ? __pfx_process_one_work+0x10/0x10 [ 369.720087][ T5831] ? assign_work+0x3a1/0x410 [ 369.720113][ T5831] worker_thread+0x9b0/0xee0 [ 369.720160][ T5831] kthread+0x711/0x8a0 [ 369.720178][ T5831] ? __pfx_worker_thread+0x10/0x10 [ 369.720204][ T5831] ? __pfx_kthread+0x10/0x10 [ 369.720221][ T5831] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.720243][ T5831] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.720258][ T5831] ? __pfx_kthread+0x10/0x10 [ 369.720277][ T5831] ret_from_fork+0x599/0xb30 [ 369.720300][ T5831] ? __pfx_ret_from_fork+0x10/0x10 [ 369.720331][ T5831] ? __switch_to_asm+0x39/0x70 [ 369.720347][ T5831] ? __switch_to_asm+0x33/0x70 [ 369.720361][ T5831] ? __pfx_kthread+0x10/0x10 [ 369.720396][ T5831] ret_from_fork_asm+0x1a/0x30 [ 369.720432][ T5831] [ 369.720618][ T5831] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 370.388064][ T5831] Bluetooth: hci1: failed to register connection device [ 370.418791][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.517523][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.602437][ T7349] konepure 0003:1E7D:2DBE.0004: unknown main item tag 0x2 [ 370.629080][ T7349] konepure 0003:1E7D:2DBE.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.4-1/input0 [ 374.455006][ T24] usb 5-1: USB disconnect, device number 10 [ 374.481846][ T166] Bluetooth: hci0: Frame reassembly failed (-84) [ 375.357872][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 375.696779][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 375.705199][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 375.715585][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 375.957814][ T980] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 376.030945][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 376.053294][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 376.065139][ T24] usb 5-1: Product: syz [ 376.071817][ T24] usb 5-1: Manufacturer: syz [ 376.098280][ T24] usb 5-1: SerialNumber: syz [ 376.257245][ T980] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.269628][ T24] usb 5-1: config 0 descriptor?? [ 376.275063][ T980] usb 1-1: config 0 has no interface number 0 [ 376.536317][ T980] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 376.546128][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.560228][ T5834] Bluetooth: hci0: command 0x1003 tx timeout [ 376.566565][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 376.566625][ T980] usb 1-1: Product: syz [ 376.632028][ T980] usb 1-1: Manufacturer: syz [ 376.662425][ T980] usb 1-1: SerialNumber: syz [ 376.731205][ T980] usb 1-1: config 0 descriptor?? [ 377.257688][ T980] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 377.282994][ T980] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 377.294683][ T980] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 377.304914][ T980] usb 1-1: media controller created [ 377.335711][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 378.325245][ T5475] usb 5-1: USB disconnect, device number 11 [ 378.339369][ T980] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 378.469920][ T980] usb 1-1: USB disconnect, device number 14 [ 378.776779][ T5475] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 378.786824][ T6029] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 378.916954][ T5475] usb 6-1: device descriptor read/64, error -71 [ 378.947303][ T6029] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 378.960528][ T6029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.968849][ T6029] usb 3-1: Product: syz [ 378.985364][ T6029] usb 3-1: Manufacturer: syz [ 378.993084][ T6029] usb 3-1: SerialNumber: syz [ 379.025957][ T6029] usb 3-1: config 0 descriptor?? [ 379.029583][ T6029] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 379.196828][ T5475] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 379.212572][ T8519] loop0: detected capacity change from 0 to 2048 [ 379.222008][ T8519] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 379.258210][ T8519] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.288098][ T6029] gspca_sunplus: reg_r err -71 [ 379.311414][ T6029] usb 3-1: USB disconnect, device number 9 [ 379.330791][ T5475] usb 6-1: device descriptor read/64, error -71 [ 379.437158][ T5475] usb usb6-port1: attempt power cycle [ 379.768145][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.768288][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.236832][ T5475] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 380.401835][ T5475] usb 6-1: device descriptor read/8, error -71 [ 380.787283][ T5475] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 380.911190][ T5475] usb 6-1: device descriptor read/8, error -71 [ 381.017271][ T5475] usb usb6-port1: unable to enumerate USB device [ 381.099317][ T8536] loop3: detected capacity change from 0 to 4096 [ 381.124333][ T8536] ntfs3: Unknown parameter 'nosys_immutable' [ 381.307013][ T5834] Bluetooth: hci0: sending frame failed (-49) [ 381.347400][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 381.987294][ T8549] loop5: detected capacity change from 0 to 64 [ 382.056023][ T8549] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 382.575797][ T8564] loop5: detected capacity change from 0 to 2048 [ 382.609526][ T8564] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=66359, location=66359 [ 382.648812][ T8564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.347421][ T8584] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 384.957903][ T8583] loop5: detected capacity change from 0 to 4096 [ 385.180046][ T8583] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 385.233516][ T8583] ntfs3(loop5): Failed to load $Bitmap (-2). [ 385.324324][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.5.553'. [ 385.579632][ T8602] loop0: detected capacity change from 0 to 64 [ 385.641043][ T8602] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 386.014553][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 386.028389][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 386.028414][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.028427][ T5834] Workqueue: hci5 hci_rx_work [ 386.028451][ T5834] Call Trace: [ 386.028459][ T5834] [ 386.028467][ T5834] dump_stack_lvl+0x189/0x250 [ 386.028500][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.028527][ T5834] ? __pfx__printk+0x10/0x10 [ 386.028555][ T5834] ? kernfs_path_from_node+0x250/0x290 [ 386.028576][ T5834] ? kernfs_path_from_node+0x2f/0x290 [ 386.028602][ T5834] sysfs_create_dir_ns+0x259/0x280 [ 386.028627][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 386.028651][ T5834] ? do_raw_spin_unlock+0x122/0x240 [ 386.028677][ T5834] kobject_add_internal+0x59f/0xb70 [ 386.028707][ T5834] kobject_add+0x155/0x220 [ 386.028733][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 386.028753][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 386.028782][ T5834] ? get_device_parent+0x366/0x3a0 [ 386.028812][ T5834] device_add+0x408/0xb80 [ 386.028842][ T5834] hci_conn_add_sysfs+0xd5/0x210 [ 386.028865][ T5834] le_conn_complete_evt+0xf1d/0x1420 [ 386.028900][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 386.028930][ T5834] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 386.028947][ T5834] ? __asan_memcpy+0x40/0x70 [ 386.028971][ T5834] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 386.028990][ T5834] ? skb_pull_data+0xfb/0x200 [ 386.029014][ T5834] hci_le_conn_complete_evt+0x187/0x480 [ 386.029045][ T5834] hci_event_packet+0x78f/0x1260 [ 386.029079][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 386.029106][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 386.029130][ T5834] ? kcov_remote_start+0x4d3/0x810 [ 386.029149][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.029170][ T5834] ? hci_send_to_monitor+0xe2/0x590 [ 386.029197][ T5834] hci_rx_work+0x3ee/0x1060 [ 386.029227][ T5834] ? process_one_work+0x868/0x15e0 [ 386.029248][ T5834] process_one_work+0x93a/0x15e0 [ 386.029266][ T5834] ? __lock_acquire+0xab9/0xd20 [ 386.029308][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 386.029342][ T5834] ? assign_work+0x3a1/0x410 [ 386.029370][ T5834] worker_thread+0x9b0/0xee0 [ 386.029420][ T5834] kthread+0x711/0x8a0 [ 386.029440][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 386.029462][ T5834] ? __pfx_kthread+0x10/0x10 [ 386.029482][ T5834] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.029506][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.029521][ T5834] ? __pfx_kthread+0x10/0x10 [ 386.029536][ T5834] ret_from_fork+0x599/0xb30 [ 386.029559][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 386.029592][ T5834] ? __switch_to_asm+0x39/0x70 [ 386.029608][ T5834] ? __switch_to_asm+0x33/0x70 [ 386.029620][ T5834] ? __pfx_kthread+0x10/0x10 [ 386.029637][ T5834] ret_from_fork_asm+0x1a/0x30 [ 386.029669][ T5834] [ 386.029867][ T5834] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 386.316507][ T8615] loop2: detected capacity change from 0 to 1024 [ 386.321739][ T5834] Bluetooth: hci5: failed to register connection device [ 386.497355][ T8615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 386.673085][ T8615] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.690240][ T8618] loop0: detected capacity change from 0 to 2048 [ 386.699684][ T8618] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=66359, location=66359 [ 386.714308][ T30] audit: type=1800 audit(1763832359.985:46): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.563" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 386.714735][ T8615] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.563: Freeing blocks not in datazone - block = 0, count = 16 [ 386.820082][ T8615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.563: bg 0: block 112: padding at end of block bitmap is not set [ 386.834884][ T8618] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.014917][ T8624] loop5: detected capacity change from 0 to 1024 [ 387.053545][ T8624] EXT4-fs: Ignoring removed nobh option [ 387.115699][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 387.442394][ T8624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.634537][ T5836] Bluetooth: hci0: command 0x1003 tx timeout [ 387.641853][ T5831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 387.883603][ T30] audit: type=1800 audit(1763832361.135:47): pid=8624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.565" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 388.193780][ T8634] ufs: You didn't specify the type of your ufs filesystem [ 388.193780][ T8634] [ 388.193780][ T8634] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 388.193780][ T8634] [ 388.193780][ T8634] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 388.226964][ T8634] ufs: ufstype=old is supported read-only [ 389.033466][ T8651] loop4: detected capacity change from 0 to 64 [ 389.039786][ T5970] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 389.068386][ T8651] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 389.230290][ T5970] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.255025][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.283702][ T5970] usb 3-1: Product: syz [ 389.302629][ T8652] loop3: detected capacity change from 0 to 4096 [ 389.303937][ T5970] usb 3-1: Manufacturer: syz [ 389.312989][ T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 389.331726][ T5970] usb 3-1: SerialNumber: syz [ 389.359388][ T8652] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 389.360109][ T5970] usb 3-1: config 0 descriptor?? [ 389.390410][ T8652] ntfs3(loop3): Failed to load $Bitmap (-2). [ 389.420046][ T8657] FAULT_INJECTION: forcing a failure. [ 389.420046][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 389.438843][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.4.576 Not tainted syzkaller #0 PREEMPT(full) [ 389.438868][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 389.438879][ T8657] Call Trace: [ 389.438889][ T8657] [ 389.438897][ T8657] dump_stack_lvl+0x189/0x250 [ 389.438926][ T8657] ? __pfx____ratelimit+0x10/0x10 [ 389.438952][ T8657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.438977][ T8657] ? __pfx__printk+0x10/0x10 [ 389.438999][ T8657] ? __pfx___might_resched+0x10/0x10 [ 389.439023][ T8657] ? fs_reclaim_acquire+0x7d/0x100 [ 389.439050][ T8657] should_fail_ex+0x414/0x560 [ 389.439079][ T8657] should_failslab+0xa8/0x100 [ 389.439104][ T8657] __kmalloc_cache_noprof+0x84/0x700 [ 389.439123][ T8657] ? trace_contention_end+0x39/0x120 [ 389.439139][ T8657] ? vhost_task_create+0xf8/0x320 [ 389.439163][ T8657] vhost_task_create+0xf8/0x320 [ 389.439179][ T8657] ? unwind_get_return_address+0x4d/0x90 [ 389.439203][ T8657] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 389.439228][ T8657] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 389.439254][ T8657] ? __pfx_vhost_task_create+0x10/0x10 [ 389.439281][ T8657] ? __pfx_vhost_task_fn+0x10/0x10 [ 389.439303][ T8657] ? stack_depot_save_flags+0x40/0x860 [ 389.439339][ T8657] kvm_mmu_post_init_vm+0x14c/0x300 [ 389.439362][ T8657] kvm_arch_vcpu_ioctl_run+0xdc/0x1cd0 [ 389.439390][ T8657] ? __mutex_trylock_common+0x153/0x260 [ 389.439410][ T8657] ? __pfx___mutex_trylock_common+0x10/0x10 [ 389.439428][ T8657] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 389.439451][ T8657] ? rcu_is_watching+0x15/0xb0 [ 389.439467][ T8657] ? trace_contention_end+0x39/0x120 [ 389.439484][ T8657] ? look_up_lock_class+0x74/0x170 [ 389.439503][ T8657] ? register_lock_class+0x51/0x320 [ 389.439532][ T8657] ? __lock_acquire+0xab9/0xd20 [ 389.439584][ T8657] kvm_vcpu_ioctl+0x99a/0xed0 [ 389.439607][ T8657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.439648][ T8657] ? __fget_files+0x2a/0x420 [ 389.439676][ T8657] ? __fget_files+0x3a0/0x420 [ 389.439698][ T8657] ? __fget_files+0x2a/0x420 [ 389.439725][ T8657] ? bpf_lsm_file_ioctl+0x9/0x20 [ 389.439747][ T8657] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 389.439765][ T8657] __se_sys_ioctl+0xfc/0x170 [ 389.439787][ T8657] do_syscall_64+0xfa/0xfa0 [ 389.439806][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.439830][ T8657] ? clear_bhb_loop+0x60/0xb0 [ 389.439852][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.439867][ T8657] RIP: 0033:0x7fbb2ef8f749 [ 389.439883][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.439899][ T8657] RSP: 002b:00007fbb2d1cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.439919][ T8657] RAX: ffffffffffffffda RBX: 00007fbb2f1e6090 RCX: 00007fbb2ef8f749 [ 389.439932][ T8657] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 389.439943][ T8657] RBP: 00007fbb2d1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 389.439954][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.439964][ T8657] R13: 00007fbb2f1e6128 R14: 00007fbb2f1e6090 R15: 00007ffd6af082b8 [ 389.439996][ T8657] [ 389.897185][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 389.958578][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 390.041231][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 390.100986][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 390.140175][ T8659] loop3: detected capacity change from 0 to 2048 [ 390.156532][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 390.229313][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 390.272807][ T8659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.285368][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 390.297998][ T8664] loop4: detected capacity change from 0 to 2048 [ 390.309655][ T8659] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.331932][ T8664] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=66359, location=66359 [ 390.357605][ T9] usb 1-1: SerialNumber: syz [ 390.384837][ T7467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.400634][ T8654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 390.421227][ T8654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 390.439898][ T8659] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.577: invalid fast symlink length 39 [ 390.453330][ T8654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 390.468619][ T8664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.469170][ T5970] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 390.497803][ T5970] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 390.498775][ T8665] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.577: invalid fast symlink length 39 [ 390.694238][ T8654] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 390.780705][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 390.817505][ T9] usb 1-1: USB disconnect, device number 15 [ 391.219529][ T8671] loop5: detected capacity change from 0 to 4096 [ 391.277452][ T8663] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 391.363816][ T9] kernel read not supported for file /359/attr/prev (pid: 9 comm: kworker/0:0) [ 391.465821][ T8671] netlink: 28 bytes leftover after parsing attributes in process `syz.5.579'. [ 391.738833][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.832655][ T8681] FAULT_INJECTION: forcing a failure. [ 391.832655][ T8681] name failslab, interval 1, probability 0, space 0, times 0 [ 391.845654][ T8681] CPU: 1 UID: 0 PID: 8681 Comm: syz.0.580 Not tainted syzkaller #0 PREEMPT(full) [ 391.845679][ T8681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.845689][ T8681] Call Trace: [ 391.845697][ T8681] [ 391.845704][ T8681] dump_stack_lvl+0x189/0x250 [ 391.845733][ T8681] ? __pfx____ratelimit+0x10/0x10 [ 391.845759][ T8681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.845783][ T8681] ? __pfx__printk+0x10/0x10 [ 391.845809][ T8681] ? __pfx___might_resched+0x10/0x10 [ 391.845836][ T8681] should_fail_ex+0x414/0x560 [ 391.845864][ T8681] should_failslab+0xa8/0x100 [ 391.845888][ T8681] __kmalloc_noprof+0xdf/0x800 [ 391.845908][ T8681] ? copy_splice_read+0x143/0xa50 [ 391.845937][ T8681] copy_splice_read+0x143/0xa50 [ 391.845972][ T8681] ? __pfx_copy_splice_read+0x10/0x10 [ 391.845992][ T8681] ? look_up_lock_class+0x74/0x170 [ 391.846012][ T8681] ? register_lock_class+0x51/0x320 [ 391.846039][ T8681] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 391.846066][ T8681] ? alloc_pipe_info+0x374/0x4d0 [ 391.846087][ T8681] ? __pfx_copy_splice_read+0x10/0x10 [ 391.846108][ T8681] splice_direct_to_actor+0x4a9/0xcc0 [ 391.846153][ T8681] ? __pfx_direct_splice_actor+0x10/0x10 [ 391.846176][ T8681] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 391.846211][ T8681] do_splice_direct+0x181/0x270 [ 391.846237][ T8681] ? __pfx_do_splice_direct+0x10/0x10 [ 391.846258][ T8681] ? common_file_perm+0x1b5/0x230 [ 391.846285][ T8681] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 391.846304][ T8681] ? bpf_lsm_file_permission+0x9/0x20 [ 391.846325][ T8681] ? security_file_permission+0x75/0x290 [ 391.846349][ T8681] ? rw_verify_area+0x255/0x4d0 [ 391.846372][ T8681] do_sendfile+0x4da/0x7e0 [ 391.846395][ T8681] ? __pfx_vfs_write+0x10/0x10 [ 391.846420][ T8681] ? __pfx_do_sendfile+0x10/0x10 [ 391.846444][ T8681] ? __fget_files+0x3a0/0x420 [ 391.846478][ T8681] __se_sys_sendfile64+0x13e/0x190 [ 391.846504][ T8681] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 391.846531][ T8681] ? do_syscall_64+0xbe/0xfa0 [ 391.846552][ T8681] do_syscall_64+0xfa/0xfa0 [ 391.846569][ T8681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.846587][ T8681] ? clear_bhb_loop+0x60/0xb0 [ 391.846607][ T8681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.846624][ T8681] RIP: 0033:0x7f531a38f749 [ 391.846641][ T8681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.846656][ T8681] RSP: 002b:00007f531b1c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 391.846678][ T8681] RAX: ffffffffffffffda RBX: 00007f531a5e6180 RCX: 00007f531a38f749 [ 391.846689][ T8681] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 391.846699][ T8681] RBP: 00007f531b1c9090 R08: 0000000000000000 R09: 0000000000000000 [ 391.846710][ T8681] R10: 000000000000207b R11: 0000000000000246 R12: 0000000000000001 [ 391.846720][ T8681] R13: 00007f531a5e6218 R14: 00007f531a5e6180 R15: 00007ffcef995298 [ 391.846749][ T8681] [ 392.342057][ T6029] usb 3-1: USB disconnect, device number 10 [ 392.461225][ T8693] FAULT_INJECTION: forcing a failure. [ 392.461225][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 392.546977][ T8693] CPU: 1 UID: 0 PID: 8693 Comm: syz.5.584 Not tainted syzkaller #0 PREEMPT(full) [ 392.547002][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.547013][ T8693] Call Trace: [ 392.547020][ T8693] [ 392.547027][ T8693] dump_stack_lvl+0x189/0x250 [ 392.547055][ T8693] ? __pfx____ratelimit+0x10/0x10 [ 392.547087][ T8693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.547110][ T8693] ? __pfx__printk+0x10/0x10 [ 392.547133][ T8693] ? __pfx___might_resched+0x10/0x10 [ 392.547156][ T8693] ? fs_reclaim_acquire+0x7d/0x100 [ 392.547183][ T8693] should_fail_ex+0x414/0x560 [ 392.547211][ T8693] should_failslab+0xa8/0x100 [ 392.547235][ T8693] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 392.547257][ T8693] ? __alloc_skb+0x255/0x430 [ 392.547276][ T8693] ? napi_skb_cache_get+0x4a5/0x790 [ 392.547295][ T8693] ? napi_skb_cache_get+0x151/0x790 [ 392.547326][ T8693] __alloc_skb+0x255/0x430 [ 392.547349][ T8693] ? __pfx___alloc_skb+0x10/0x10 [ 392.547380][ T8693] alloc_skb_with_frags+0xca/0x890 [ 392.547400][ T8693] ? __might_fault+0xb0/0x130 [ 392.547432][ T8693] sock_alloc_send_pskb+0x84d/0x980 [ 392.547475][ T8693] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 392.547502][ T8693] ? is_bpf_text_address+0x26/0x2b0 [ 392.547526][ T8693] ? __lock_acquire+0xab9/0xd20 [ 392.547551][ T8693] ? iov_iter_advance+0x8b/0x1c0 [ 392.547578][ T8693] tun_get_user+0xa43/0x3e90 [ 392.547614][ T8693] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 392.547639][ T8693] ? aa_file_perm+0x44c/0x1540 [ 392.547658][ T8693] ? __pfx_tun_get_user+0x10/0x10 [ 392.547684][ T8693] ? save_netdev_trace_buffer+0x4a0/0x5a0 [ 392.547714][ T8693] ? ref_tracker_alloc+0x318/0x460 [ 392.547735][ T8693] ? tun_get+0x157/0x2f0 [ 392.547750][ T8693] ? tun_chr_write_iter+0x60/0x210 [ 392.547766][ T8693] ? ksys_write+0x145/0x250 [ 392.547786][ T8693] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 392.547814][ T8693] ? tun_get+0x1c/0x2f0 [ 392.547838][ T8693] ? tun_get+0x1c/0x2f0 [ 392.547854][ T8693] ? tun_get+0x1c/0x2f0 [ 392.547877][ T8693] tun_chr_write_iter+0x113/0x210 [ 392.547898][ T8693] vfs_write+0x5c9/0xb30 [ 392.547922][ T8693] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 392.547941][ T8693] ? __pfx_vfs_write+0x10/0x10 [ 392.547968][ T8693] ? __fget_files+0x2a/0x420 [ 392.547998][ T8693] ksys_write+0x145/0x250 [ 392.548019][ T8693] ? __pfx_ksys_write+0x10/0x10 [ 392.548041][ T8693] ? do_syscall_64+0xbe/0xfa0 [ 392.548059][ T8693] do_syscall_64+0xfa/0xfa0 [ 392.548075][ T8693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.548090][ T8693] ? clear_bhb_loop+0x60/0xb0 [ 392.548110][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.548125][ T8693] RIP: 0033:0x7f94b798f749 [ 392.548140][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.548155][ T8693] RSP: 002b:00007f94b87ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 392.548174][ T8693] RAX: ffffffffffffffda RBX: 00007f94b7be5fa0 RCX: 00007f94b798f749 [ 392.548187][ T8693] RDX: 000000000000fdef RSI: 0000200000000600 RDI: 0000000000000003 [ 392.548198][ T8693] RBP: 00007f94b87ad090 R08: 0000000000000000 R09: 0000000000000000 [ 392.548209][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.548219][ T8693] R13: 00007f94b7be6038 R14: 00007f94b7be5fa0 R15: 00007fffbdf24b58 [ 392.548249][ T8693] [ 392.908674][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 392.917350][ T8695] loop4: detected capacity change from 0 to 64 [ 392.961968][ T8695] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 393.277466][ T8701] loop3: detected capacity change from 0 to 1024 [ 393.335959][ T8701] EXT4-fs: Ignoring removed nobh option [ 393.547185][ T8703] loop2: detected capacity change from 0 to 32768 [ 393.661824][ T8701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.861416][ T8717] tipc: Failed to remove unknown binding: 66,1,1/0:3146895936/3146895938 [ 393.871167][ T8717] tipc: Failed to remove unknown binding: 66,1,1/0:3146895936/3146895938 [ 393.879714][ T8717] tipc: Failed to remove unknown binding: 66,1,1/0:3146895936/3146895938 [ 394.631813][ T8703] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 394.731983][ T30] audit: type=1800 audit(1763832367.995:48): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.589" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 394.872556][ T8703] XFS (loop2): Ending clean mount [ 395.186186][ T8733] loop4: detected capacity change from 0 to 2048 [ 395.903542][ T8733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.962467][ T5832] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 395.972776][ T8733] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.042690][ T8726] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.592: invalid fast symlink length 39 [ 396.055920][ T8726] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.592: invalid fast symlink length 39 [ 396.575584][ T8754] loop2: detected capacity change from 0 to 512 [ 396.701739][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.285333][ T8755] loop2: detected capacity change from 0 to 131072 [ 397.310430][ T8755] F2FS-fs (loop2): invalid crc value [ 397.331496][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.510378][ T8763] loop5: detected capacity change from 0 to 32768 [ 397.589580][ T8755] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 397.601547][ T8755] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 397.686536][ T8763] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 397.932165][ T8763] XFS (loop5): Ending clean mount [ 398.119304][ T8781] loop3: detected capacity change from 0 to 64 [ 398.181457][ T8781] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 398.533634][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.602'. [ 398.844193][ T7467] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 399.484516][ T8786] tipc: Failed to remove unknown binding: 66,1,1/0:2288139685/2288139687 [ 399.494503][ T8786] tipc: Failed to remove unknown binding: 66,1,1/0:2288139685/2288139687 [ 399.503128][ T8786] tipc: Failed to remove unknown binding: 66,1,1/0:2288139685/2288139687 [ 400.039106][ T8792] batadv_slave_1: entered promiscuous mode [ 400.085892][ T8792] batadv_slave_1: left promiscuous mode [ 400.199113][ T8799] loop3: detected capacity change from 0 to 256 [ 400.257253][ T8800] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 400.293495][ T8799] FAT-fs (loop3): Directory bread(block 64) failed [ 400.327871][ T8799] FAT-fs (loop3): Directory bread(block 65) failed [ 400.374564][ T8799] FAT-fs (loop3): Directory bread(block 66) failed [ 400.437252][ T8799] FAT-fs (loop3): Directory bread(block 67) failed [ 400.444005][ T8799] FAT-fs (loop3): Directory bread(block 68) failed [ 400.515385][ T8799] FAT-fs (loop3): Directory bread(block 69) failed [ 400.552611][ T8799] FAT-fs (loop3): Directory bread(block 70) failed [ 400.564450][ T8803] FAULT_INJECTION: forcing a failure. [ 400.564450][ T8803] name failslab, interval 1, probability 0, space 0, times 0 [ 400.619442][ T8803] CPU: 1 UID: 0 PID: 8803 Comm: syz.2.606 Not tainted syzkaller #0 PREEMPT(full) [ 400.619468][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.619478][ T8803] Call Trace: [ 400.619486][ T8803] [ 400.619494][ T8803] dump_stack_lvl+0x189/0x250 [ 400.619524][ T8803] ? __pfx____ratelimit+0x10/0x10 [ 400.619549][ T8803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.619574][ T8803] ? __pfx__printk+0x10/0x10 [ 400.619599][ T8803] ? __pfx___might_resched+0x10/0x10 [ 400.619620][ T8803] ? fs_reclaim_acquire+0x7d/0x100 [ 400.619656][ T8803] should_fail_ex+0x414/0x560 [ 400.619683][ T8803] should_failslab+0xa8/0x100 [ 400.619708][ T8803] __kmalloc_cache_noprof+0x84/0x700 [ 400.619730][ T8803] ? cma_alloc_port+0xb9/0x680 [ 400.619758][ T8803] cma_alloc_port+0xb9/0x680 [ 400.619784][ T8803] rdma_bind_addr_dst+0x29b4/0x3410 [ 400.619802][ T8803] ? do_raw_spin_lock+0x121/0x290 [ 400.619835][ T8803] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.619852][ T8803] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 400.619876][ T8803] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 400.619916][ T8803] rdma_resolve_addr+0x664/0x2030 [ 400.619946][ T8803] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 400.619962][ T8803] ? __mutex_lock+0x335/0x1350 [ 400.619992][ T8803] ? ucma_resolve_ip+0x1a5/0x280 [ 400.620050][ T8803] ucma_resolve_ip+0x1db/0x280 [ 400.620077][ T8803] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 400.620117][ T8803] ucma_write+0x249/0x2e0 [ 400.620143][ T8803] ? __pfx_ucma_write+0x10/0x10 [ 400.620165][ T8803] ? security_file_permission+0x75/0x290 [ 400.620190][ T8803] ? rw_verify_area+0x255/0x4d0 [ 400.620213][ T8803] vfs_writev+0x4b6/0x960 [ 400.620240][ T8803] ? __pfx_ucma_write+0x10/0x10 [ 400.620267][ T8803] ? __pfx_vfs_writev+0x10/0x10 [ 400.620327][ T8803] ? __fget_files+0x2a/0x420 [ 400.620354][ T8803] ? __fget_files+0x3a0/0x420 [ 400.620375][ T8803] ? __fget_files+0x2a/0x420 [ 400.620407][ T8803] do_writev+0x14d/0x2d0 [ 400.620434][ T8803] ? __pfx_do_writev+0x10/0x10 [ 400.620460][ T8803] ? do_syscall_64+0xbe/0xfa0 [ 400.620481][ T8803] do_syscall_64+0xfa/0xfa0 [ 400.620500][ T8803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.620517][ T8803] ? clear_bhb_loop+0x60/0xb0 [ 400.620538][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.620554][ T8803] RIP: 0033:0x7f179878f749 [ 400.620570][ T8803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.620586][ T8803] RSP: 002b:00007f1799635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 400.620604][ T8803] RAX: ffffffffffffffda RBX: 00007f17989e5fa0 RCX: 00007f179878f749 [ 400.620615][ T8803] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000011 [ 400.620625][ T8803] RBP: 00007f1799635090 R08: 0000000000000000 R09: 0000000000000000 [ 400.620635][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.620652][ T8803] R13: 00007f17989e6038 R14: 00007f17989e5fa0 R15: 00007ffc4536cae8 [ 400.620684][ T8803] [ 400.622983][ T8799] FAT-fs (loop3): Directory bread(block 71) failed [ 400.867156][ T5958] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 400.958298][ T8799] FAT-fs (loop3): Directory bread(block 72) failed [ 401.032490][ T8799] FAT-fs (loop3): Directory bread(block 73) failed [ 401.170012][ T5836] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 401.520739][ T5958] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 401.530168][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.542744][ T5958] usb 6-1: Product: syz [ 401.551596][ T5958] usb 6-1: Manufacturer: syz [ 401.562563][ T5958] usb 6-1: SerialNumber: syz [ 401.630455][ T8813] loop0: detected capacity change from 0 to 1024 [ 401.661798][ T8813] EXT4-fs: Ignoring removed nobh option [ 401.716134][ T8813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.858882][ T8823] loop4: detected capacity change from 0 to 64 [ 401.871501][ T8823] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 401.951895][ T8820] loop3: detected capacity change from 0 to 2048 [ 402.043019][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 402.106237][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 402.211045][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 402.231970][ T8820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.367658][ T8820] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.257397][ T8820] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.613: invalid fast symlink length 39 [ 403.308782][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.319939][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.333645][ T5910] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 403.440132][ T8833] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.613: invalid fast symlink length 39 [ 403.946903][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.054332][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.087971][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.108333][ T5910] usb 3-1: config 0 descriptor?? [ 405.162453][ T8843] tipc: Failed to remove unknown binding: 66,1,1/0:865681938/865681940 [ 405.171716][ T8843] tipc: Failed to remove unknown binding: 66,1,1/0:865681938/865681940 [ 405.180134][ T8843] tipc: Failed to remove unknown binding: 66,1,1/0:865681938/865681940 [ 405.190554][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 405.205854][ T5910] ath6kl: Failed to submit usb control message: -110 [ 405.275622][ T5910] ath6kl: unable to send the bmi data to the device: -110 [ 405.287204][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 406.472086][ T5910] ath6kl: Unable to send get target info: -110 [ 406.472473][ T8825] loop2: detected capacity change from 0 to 4096 [ 406.479870][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 406.498884][ T5910] ath6kl: Failed to init ath6kl core: -110 [ 406.506020][ T5910] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 406.514738][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 406.611715][ T8850] FAULT_INJECTION: forcing a failure. [ 406.611715][ T8850] name failslab, interval 1, probability 0, space 0, times 0 [ 406.707300][ T8850] CPU: 1 UID: 0 PID: 8850 Comm: syz.0.620 Not tainted syzkaller #0 PREEMPT(full) [ 406.707328][ T8850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.707339][ T8850] Call Trace: [ 406.707346][ T8850] [ 406.707354][ T8850] dump_stack_lvl+0x189/0x250 [ 406.707384][ T8850] ? __pfx____ratelimit+0x10/0x10 [ 406.707410][ T8850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.707435][ T8850] ? __pfx__printk+0x10/0x10 [ 406.707462][ T8850] ? __pfx___might_resched+0x10/0x10 [ 406.707484][ T8850] ? fs_reclaim_acquire+0x7d/0x100 [ 406.707511][ T8850] should_fail_ex+0x414/0x560 [ 406.707540][ T8850] should_failslab+0xa8/0x100 [ 406.707566][ T8850] kmem_cache_alloc_lru_noprof+0x8d/0x6e0 [ 406.707587][ T8850] ? __d_alloc+0x37/0x6f0 [ 406.707609][ T8850] __d_alloc+0x37/0x6f0 [ 406.707633][ T8850] d_alloc+0x4b/0x190 [ 406.707647][ T8850] ? lookup_one_qstr_excl+0xc8/0x360 [ 406.707675][ T8850] lookup_one_qstr_excl+0xdc/0x360 [ 406.707705][ T8850] do_unlinkat+0x1c5/0x560 [ 406.707731][ T8850] ? __pfx_do_unlinkat+0x10/0x10 [ 406.707753][ T8850] ? strncpy_from_user+0x150/0x2c0 [ 406.707779][ T8850] ? getname_flags+0x1e5/0x540 [ 406.707806][ T8850] __x64_sys_unlinkat+0xd3/0xf0 [ 406.707839][ T8850] do_syscall_64+0xfa/0xfa0 [ 406.707858][ T8850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.707875][ T8850] ? clear_bhb_loop+0x60/0xb0 [ 406.707897][ T8850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.707915][ T8850] RIP: 0033:0x7f531a38f749 [ 406.707931][ T8850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.707946][ T8850] RSP: 002b:00007f531b20b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 406.707966][ T8850] RAX: ffffffffffffffda RBX: 00007f531a5e5fa0 RCX: 00007f531a38f749 [ 406.707980][ T8850] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 406.707992][ T8850] RBP: 00007f531b20b090 R08: 0000000000000000 R09: 0000000000000000 [ 406.708003][ T8850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.708012][ T8850] R13: 00007f531a5e6038 R14: 00007f531a5e5fa0 R15: 00007ffcef995298 [ 406.708044][ T8850] [ 407.010899][ T8852] loop3: detected capacity change from 0 to 1024 [ 407.056735][ T5910] usb 3-1: USB disconnect, device number 11 [ 407.066079][ T5958] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.068598][ T8857] FAULT_INJECTION: forcing a failure. [ 407.068598][ T8857] name failslab, interval 1, probability 0, space 0, times 0 [ 407.087539][ T8857] CPU: 1 UID: 0 PID: 8857 Comm: syz.5.622 Not tainted syzkaller #0 PREEMPT(full) [ 407.087563][ T8857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.087574][ T8857] Call Trace: [ 407.087582][ T8857] [ 407.087589][ T8857] dump_stack_lvl+0x189/0x250 [ 407.087619][ T8857] ? __pfx____ratelimit+0x10/0x10 [ 407.087644][ T8857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.087669][ T8857] ? __pfx__printk+0x10/0x10 [ 407.087692][ T8857] ? __pfx___might_resched+0x10/0x10 [ 407.087715][ T8857] ? fs_reclaim_acquire+0x7d/0x100 [ 407.087742][ T8857] should_fail_ex+0x414/0x560 [ 407.087770][ T8857] should_failslab+0xa8/0x100 [ 407.087794][ T8857] kmem_cache_alloc_noprof+0x88/0x700 [ 407.087815][ T8857] ? vm_area_dup+0x2b/0x680 [ 407.087838][ T8857] vm_area_dup+0x2b/0x680 [ 407.087861][ T8857] __split_vma+0x1a9/0xa00 [ 407.087887][ T8857] ? __pfx___split_vma+0x10/0x10 [ 407.087927][ T8857] vma_modify+0x85f/0x1a70 [ 407.087971][ T8857] vma_modify_flags+0x208/0x2e0 [ 407.087998][ T8857] ? __pfx_vma_modify_flags+0x10/0x10 [ 407.088043][ T8857] ? mas_next_slot+0xc20/0xcf0 [ 407.088074][ T8857] mlock_fixup+0x29c/0x410 [ 407.088104][ T8857] ? __pfx_mlock_fixup+0x10/0x10 [ 407.088129][ T8857] ? mas_find+0xb0e/0xd30 [ 407.088159][ T8857] apply_vma_lock_flags+0x285/0x390 [ 407.088182][ T8857] ? vfs_write+0x956/0xb30 [ 407.088206][ T8857] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 407.088242][ T8857] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 407.088261][ T8857] ? __pfx_vfs_write+0x10/0x10 [ 407.088284][ T8857] do_mlock+0x524/0x720 [ 407.088317][ T8857] ? __pfx_do_mlock+0x10/0x10 [ 407.088341][ T8857] ? fput+0xa0/0xd0 [ 407.088365][ T8857] ? ksys_write+0x22a/0x250 [ 407.088387][ T8857] ? __pfx_ksys_write+0x10/0x10 [ 407.088413][ T8857] __x64_sys_mlock+0x60/0x70 [ 407.088437][ T8857] do_syscall_64+0xfa/0xfa0 [ 407.088455][ T8857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.088473][ T8857] ? clear_bhb_loop+0x60/0xb0 [ 407.088494][ T8857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.088511][ T8857] RIP: 0033:0x7f94b798f749 [ 407.088528][ T8857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.088543][ T8857] RSP: 002b:00007f94b87ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 407.088562][ T8857] RAX: ffffffffffffffda RBX: 00007f94b7be5fa0 RCX: 00007f94b798f749 [ 407.088575][ T8857] RDX: 0000000000000000 RSI: 0000000000400000 RDI: 0000200000bff000 [ 407.088588][ T8857] RBP: 00007f94b87ad090 R08: 0000000000000000 R09: 0000000000000000 [ 407.088599][ T8857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.088609][ T8857] R13: 00007f94b7be6038 R14: 00007f94b7be5fa0 R15: 00007fffbdf24b58 [ 407.088642][ T8857] [ 407.521731][ T8852] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 407.564138][ T5958] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 407.617068][ T8864] FAULT_INJECTION: forcing a failure. [ 407.617068][ T8864] name failslab, interval 1, probability 0, space 0, times 0 [ 407.627232][ T8852] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 407.629931][ T8864] CPU: 1 UID: 0 PID: 8864 Comm: syz.4.626 Not tainted syzkaller #0 PREEMPT(full) [ 407.629955][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.629965][ T8864] Call Trace: [ 407.629972][ T8864] [ 407.629979][ T8864] dump_stack_lvl+0x189/0x250 [ 407.630008][ T8864] ? __pfx____ratelimit+0x10/0x10 [ 407.630033][ T8864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.630064][ T8864] ? __pfx__printk+0x10/0x10 [ 407.630094][ T8864] should_fail_ex+0x414/0x560 [ 407.630121][ T8864] should_failslab+0xa8/0x100 [ 407.630144][ T8864] __kmalloc_noprof+0xdf/0x800 [ 407.630164][ T8864] ? blk_rq_map_user_iov+0x471/0x1a10 [ 407.630189][ T8864] blk_rq_map_user_iov+0x471/0x1a10 [ 407.630226][ T8864] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 407.630250][ T8864] ? __lock_acquire+0xab9/0xd20 [ 407.630281][ T8864] ? import_ubuf+0xfb/0x1d0 [ 407.630299][ T8864] blk_rq_map_user_io+0x252/0x3a0 [ 407.630324][ T8864] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 407.630341][ T8864] ? trace_contention_end+0x39/0x120 [ 407.630367][ T8864] ? sg_common_write+0xb85/0x13d0 [ 407.630388][ T8864] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 407.630412][ T8864] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 407.630427][ T8864] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 407.630456][ T8864] ? sg_link_reserve+0x28e/0x540 [ 407.630478][ T8864] sg_common_write+0xcd8/0x13d0 [ 407.630511][ T8864] ? __pfx_sg_common_write+0x10/0x10 [ 407.630540][ T8864] sg_write+0xacd/0xea0 [ 407.630572][ T8864] ? __pfx_sg_write+0x10/0x10 [ 407.630598][ T8864] ? __pfx_aa_file_perm+0x10/0x10 [ 407.630645][ T8864] ? bpf_lsm_file_permission+0x9/0x20 [ 407.630666][ T8864] ? security_file_permission+0x75/0x290 [ 407.630690][ T8864] ? rw_verify_area+0x255/0x4d0 [ 407.630712][ T8864] vfs_writev+0x4b6/0x960 [ 407.630737][ T8864] ? __pfx_sg_write+0x10/0x10 [ 407.630762][ T8864] ? __pfx_vfs_writev+0x10/0x10 [ 407.630798][ T8864] ? __fget_files+0x2a/0x420 [ 407.630825][ T8864] ? __fget_files+0x3a0/0x420 [ 407.630846][ T8864] ? __fget_files+0x2a/0x420 [ 407.630877][ T8864] do_writev+0x14d/0x2d0 [ 407.630902][ T8864] ? __pfx_do_writev+0x10/0x10 [ 407.630928][ T8864] ? do_syscall_64+0xbe/0xfa0 [ 407.630947][ T8864] do_syscall_64+0xfa/0xfa0 [ 407.630965][ T8864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.630982][ T8864] ? clear_bhb_loop+0x60/0xb0 [ 407.631002][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.631018][ T8864] RIP: 0033:0x7fbb2ef8f749 [ 407.631033][ T8864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.631053][ T8864] RSP: 002b:00007fbb2d1ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 407.631071][ T8864] RAX: ffffffffffffffda RBX: 00007fbb2f1e5fa0 RCX: 00007fbb2ef8f749 [ 407.631084][ T8864] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 407.631094][ T8864] RBP: 00007fbb2d1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 407.631105][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.631116][ T8864] R13: 00007fbb2f1e6038 R14: 00007fbb2f1e5fa0 R15: 00007ffd6af082b8 [ 407.631145][ T8864] [ 407.746086][ T8869] loop0: detected capacity change from 0 to 256 [ 407.784514][ T5958] usb 6-1: USB disconnect, device number 7 [ 407.787280][ T8852] EXT4-fs (loop3): orphan cleanup on readonly fs [ 407.933511][ T30] audit: type=1804 audit(1763832381.185:49): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.624" name="/newroot/129/file0" dev="tmpfs" ino=726 res=1 errno=0 [ 408.068912][ T8869] FAT-fs (loop0): Directory bread(block 64) failed [ 408.093906][ T8876] loop5: detected capacity change from 0 to 2048 [ 408.100483][ T8869] FAT-fs (loop0): Directory bread(block 65) failed [ 408.105816][ T8852] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.621: Freeing blocks not in datazone - block = 0, count = 4096 [ 408.238925][ T8852] EXT4-fs (loop3): 1 orphan inode deleted [ 408.248079][ T8869] FAT-fs (loop0): Directory bread(block 66) failed [ 408.258694][ T8876] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.272670][ T8876] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.277587][ T8852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.427234][ T8869] FAT-fs (loop0): Directory bread(block 67) failed [ 408.470039][ T8881] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 408.545268][ T8869] FAT-fs (loop0): Directory bread(block 68) failed [ 408.691294][ T8876] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.628: invalid fast symlink length 39 [ 408.714421][ T8869] FAT-fs (loop0): Directory bread(block 69) failed [ 408.871907][ T8869] FAT-fs (loop0): Directory bread(block 70) failed [ 409.119245][ T8869] FAT-fs (loop0): Directory bread(block 71) failed [ 409.144766][ T8876] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.628: invalid fast symlink length 39 [ 409.464966][ T8869] FAT-fs (loop0): Directory bread(block 72) failed [ 409.609283][ T8869] FAT-fs (loop0): Directory bread(block 73) failed [ 410.322850][ T8887] tipc: Failed to remove unknown binding: 66,1,1/0:630535605/630535607 [ 410.344997][ T7467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.351385][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.406508][ T8887] tipc: Failed to remove unknown binding: 66,1,1/0:630535605/630535607 [ 410.440086][ T8887] tipc: Failed to remove unknown binding: 66,1,1/0:630535605/630535607 [ 410.705160][ T8891] FAULT_INJECTION: forcing a failure. [ 410.705160][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 410.749163][ T8891] CPU: 1 UID: 0 PID: 8891 Comm: syz.2.634 Not tainted syzkaller #0 PREEMPT(full) [ 410.749188][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.749195][ T8891] Call Trace: [ 410.749200][ T8891] [ 410.749205][ T8891] dump_stack_lvl+0x189/0x250 [ 410.749223][ T8891] ? __pfx____ratelimit+0x10/0x10 [ 410.749240][ T8891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.749253][ T8891] ? __pfx__printk+0x10/0x10 [ 410.749271][ T8891] should_fail_ex+0x414/0x560 [ 410.749288][ T8891] should_failslab+0xa8/0x100 [ 410.749302][ T8891] __kmalloc_noprof+0xdf/0x800 [ 410.749314][ T8891] ? blk_rq_map_user_iov+0x471/0x1a10 [ 410.749328][ T8891] blk_rq_map_user_iov+0x471/0x1a10 [ 410.749349][ T8891] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 410.749362][ T8891] ? __lock_acquire+0xab9/0xd20 [ 410.749380][ T8891] ? import_ubuf+0xfb/0x1d0 [ 410.749391][ T8891] blk_rq_map_user_io+0x252/0x3a0 [ 410.749406][ T8891] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 410.749415][ T8891] ? trace_contention_end+0x39/0x120 [ 410.749429][ T8891] ? sg_common_write+0xb85/0x13d0 [ 410.749441][ T8891] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 410.749456][ T8891] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 410.749465][ T8891] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 410.749482][ T8891] ? sg_link_reserve+0x28e/0x540 [ 410.749494][ T8891] sg_common_write+0xcd8/0x13d0 [ 410.749512][ T8891] ? __pfx_sg_common_write+0x10/0x10 [ 410.749528][ T8891] sg_write+0xacd/0xea0 [ 410.749547][ T8891] ? __pfx_sg_write+0x10/0x10 [ 410.749561][ T8891] ? __pfx_aa_file_perm+0x10/0x10 [ 410.749588][ T8891] ? bpf_lsm_file_permission+0x9/0x20 [ 410.749601][ T8891] ? security_file_permission+0x75/0x290 [ 410.749614][ T8891] ? rw_verify_area+0x255/0x4d0 [ 410.749627][ T8891] vfs_writev+0x4b6/0x960 [ 410.749642][ T8891] ? __pfx_sg_write+0x10/0x10 [ 410.749657][ T8891] ? __pfx_vfs_writev+0x10/0x10 [ 410.749677][ T8891] ? __fget_files+0x2a/0x420 [ 410.749702][ T8891] ? __fget_files+0x3a0/0x420 [ 410.749714][ T8891] ? __fget_files+0x2a/0x420 [ 410.749731][ T8891] do_writev+0x14d/0x2d0 [ 410.749745][ T8891] ? __pfx_do_writev+0x10/0x10 [ 410.749760][ T8891] ? do_syscall_64+0xbe/0xfa0 [ 410.749772][ T8891] do_syscall_64+0xfa/0xfa0 [ 410.749781][ T8891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.749791][ T8891] ? clear_bhb_loop+0x60/0xb0 [ 410.749802][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.749811][ T8891] RIP: 0033:0x7f179878f749 [ 410.749821][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.749829][ T8891] RSP: 002b:00007f1799635038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 410.749841][ T8891] RAX: ffffffffffffffda RBX: 00007f17989e5fa0 RCX: 00007f179878f749 [ 410.749848][ T8891] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000004 [ 410.749854][ T8891] RBP: 00007f1799635090 R08: 0000000000000000 R09: 0000000000000000 [ 410.749860][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.749865][ T8891] R13: 00007f17989e6038 R14: 00007f17989e5fa0 R15: 00007ffc4536cae8 [ 410.749881][ T8891] [ 411.094609][ T8894] loop3: detected capacity change from 0 to 4096 [ 411.172899][ T8894] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 411.244509][ T8898] FAULT_INJECTION: forcing a failure. [ 411.244509][ T8898] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 411.258135][ T8898] CPU: 1 UID: 0 PID: 8898 Comm: syz.4.635 Not tainted syzkaller #0 PREEMPT(full) [ 411.258160][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.258171][ T8898] Call Trace: [ 411.258179][ T8898] [ 411.258187][ T8898] dump_stack_lvl+0x189/0x250 [ 411.258217][ T8898] ? __pfx____ratelimit+0x10/0x10 [ 411.258243][ T8898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.258268][ T8898] ? __pfx__printk+0x10/0x10 [ 411.258290][ T8898] ? fs_reclaim_acquire+0x7d/0x100 [ 411.258321][ T8898] should_fail_ex+0x414/0x560 [ 411.258349][ T8898] prepare_alloc_pages+0x22b/0x650 [ 411.258379][ T8898] __alloc_frozen_pages_noprof+0x123/0x370 [ 411.258407][ T8898] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 411.258439][ T8898] ? policy_nodemask+0x27c/0x720 [ 411.258467][ T8898] alloc_pages_mpol+0x232/0x4a0 [ 411.258495][ T8898] alloc_pages_noprof+0xa9/0x190 [ 411.258520][ T8898] get_free_pages_noprof+0xf/0x80 [ 411.258543][ T8898] __pollwait+0x25a/0x460 [ 411.258568][ T8898] ? __pfx___pollwait+0x10/0x10 [ 411.258586][ T8898] sctp_poll+0xb9/0xa10 [ 411.258617][ T8898] sock_poll+0x325/0x3e0 [ 411.258638][ T8898] ? __pfx_sock_poll+0x10/0x10 [ 411.258656][ T8898] do_select+0x105e/0x17d0 [ 411.258688][ T8898] ? do_select+0x811/0x17d0 [ 411.258736][ T8898] ? __pfx_do_select+0x10/0x10 [ 411.258755][ T8898] ? trace_event_raw_event_bpf_trace_printk+0x187/0x260 [ 411.258779][ T8898] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 411.258807][ T8898] ? __pfx___pollwait+0x10/0x10 [ 411.258830][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.258855][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.258880][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.258905][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.258930][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.258955][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.258979][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.259004][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.259029][ T8898] ? __pfx_pollwake+0x10/0x10 [ 411.259074][ T8898] core_sys_select+0x6e2/0xa20 [ 411.259108][ T8898] ? __pfx_core_sys_select+0x10/0x10 [ 411.259155][ T8898] ? __pfx_set_user_sigmask+0x10/0x10 [ 411.259190][ T8898] __se_sys_pselect6+0x27a/0x300 [ 411.259218][ T8898] ? __pfx___se_sys_pselect6+0x10/0x10 [ 411.259251][ T8898] ? __pfx_ksys_write+0x10/0x10 [ 411.259275][ T8898] ? __x64_sys_pselect6+0x21/0xf0 [ 411.259299][ T8898] do_syscall_64+0xfa/0xfa0 [ 411.259319][ T8898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.259337][ T8898] ? clear_bhb_loop+0x60/0xb0 [ 411.259358][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.259375][ T8898] RIP: 0033:0x7fbb2ef8f749 [ 411.259405][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.259420][ T8898] RSP: 002b:00007fbb2d1cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 411.259439][ T8898] RAX: ffffffffffffffda RBX: 00007fbb2f1e6090 RCX: 00007fbb2ef8f749 [ 411.259452][ T8898] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 411.259463][ T8898] RBP: 00007fbb2d1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 411.259552][ T8898] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 411.259563][ T8898] R13: 00007fbb2f1e6128 R14: 00007fbb2f1e6090 R15: 00007ffd6af082b8 [ 411.259591][ T8898] [ 411.785346][ T8905] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.794807][ T8905] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.921666][ T8894] ntfs3(loop3): Failed to load $Bitmap (-2). [ 412.178922][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.186251][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.470199][ T5836] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 412.945801][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.5.639'. [ 413.555139][ T8922] loop3: detected capacity change from 0 to 2048 [ 413.613146][ T8921] loop2: detected capacity change from 0 to 256 [ 413.687651][ T8921] exfat: Deprecated parameter 'namecase' [ 413.726406][ T8922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.742426][ T8928] loop4: detected capacity change from 0 to 256 [ 413.750723][ T8921] exfat: Deprecated parameter 'namecase' [ 413.795053][ T8921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 413.809546][ T8922] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.859169][ T8928] FAT-fs (loop4): Directory bread(block 64) failed [ 413.886394][ T8921] exFAT-fs (loop2): start_clu is invalid cluster(0xff000008) [ 413.895058][ T8928] FAT-fs (loop4): Directory bread(block 65) failed [ 413.926632][ T8922] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.641: invalid fast symlink length 39 [ 413.943478][ T8928] FAT-fs (loop4): Directory bread(block 66) failed [ 413.950857][ T8928] FAT-fs (loop4): Directory bread(block 67) failed [ 413.960701][ T8928] FAT-fs (loop4): Directory bread(block 68) failed [ 413.981013][ T8932] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.641: invalid fast symlink length 39 [ 413.999844][ T8928] FAT-fs (loop4): Directory bread(block 69) failed [ 414.012413][ T8928] FAT-fs (loop4): Directory bread(block 70) failed [ 414.022530][ T8928] FAT-fs (loop4): Directory bread(block 71) failed [ 414.033929][ T8928] FAT-fs (loop4): Directory bread(block 72) failed [ 414.041384][ T8928] FAT-fs (loop4): Directory bread(block 73) failed [ 414.299572][ T8934] tipc: Failed to remove unknown binding: 66,1,1/0:1225368726/1225368728 [ 414.339636][ T8934] tipc: Failed to remove unknown binding: 66,1,1/0:1225368726/1225368728 [ 414.359267][ T8934] tipc: Failed to remove unknown binding: 66,1,1/0:1225368726/1225368728 [ 414.660924][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.700806][ T8938] loop4: detected capacity change from 0 to 4096 [ 414.736896][ T8938] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 414.910232][ T8947] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 414.910232][ T8947] program syz.3.648 not setting count and/or reply_len properly [ 415.330597][ T8936] loop2: detected capacity change from 0 to 32768 [ 415.526516][ T8936] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 415.648607][ T8936] XFS (loop2): Ending clean mount [ 415.690338][ T8936] XFS (loop2): Quotacheck needed: Please wait. [ 415.802284][ T8936] XFS (loop2): Quotacheck: Done. [ 416.526835][ T7671] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 416.543271][ T8976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.652'. [ 417.151819][ T7671] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 417.236810][ T7671] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.276100][ T7671] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 417.336797][ T7671] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.363765][ T7671] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 417.384353][ T8986] tipc: Failed to remove unknown binding: 66,1,1/0:1539034213/1539034215 [ 417.411092][ T7671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.435120][ T8986] tipc: Failed to remove unknown binding: 66,1,1/0:1539034213/1539034215 [ 417.435975][ T7671] usb 3-1: config 0 descriptor?? [ 417.445458][ T8986] tipc: Failed to remove unknown binding: 66,1,1/0:1539034213/1539034215 [ 417.474092][ T7671] usb 3-1: can't set config #0, error -71 [ 417.499120][ T7671] usb 3-1: USB disconnect, device number 12 [ 417.554048][ T8988] loop3: detected capacity change from 0 to 2048 [ 417.634176][ T5832] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 417.757990][ T8988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.834876][ T8988] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.924080][ T8988] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.658: invalid fast symlink length 39 [ 418.143275][ T8988] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.658: invalid fast symlink length 39 [ 418.857776][ T9001] loop2: detected capacity change from 0 to 8 [ 418.864988][ T9001] squashfs: Unknown parameter 'euid>00000000000000000000' [ 419.008056][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.274161][ T9021] loop0: detected capacity change from 0 to 256 [ 419.282610][ T9021] exfat: Deprecated parameter 'namecase' [ 419.290602][ T9021] exfat: Deprecated parameter 'namecase' [ 419.309195][ T9021] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 419.336228][ T9021] exFAT-fs (loop0): start_clu is invalid cluster(0xff000008) [ 419.793143][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.672'. [ 420.047852][ T9033] bridge1: port 1(veth3) entered blocking state [ 420.073501][ T9033] bridge1: port 1(veth3) entered disabled state [ 420.114314][ T9033] veth3: entered allmulticast mode [ 420.119657][ T7671] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 420.154182][ T9033] veth3: entered promiscuous mode [ 420.307336][ T7671] usb 6-1: Using ep0 maxpacket: 32 [ 420.478082][ T7671] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 420.480996][ T9023] loop0: detected capacity change from 0 to 32768 [ 420.623654][ T7671] usb 6-1: config 0 has no interface number 0 [ 420.629957][ T7671] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.661416][ T7671] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 420.684122][ T9029] bridge1: port 2(ip6gretap0) entered blocking state [ 420.740687][ T9023] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 420.756715][ T7671] usb 6-1: config 0 interface 85 has no altsetting 0 [ 420.782775][ T7671] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 420.821227][ T7671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.821241][ T9029] bridge1: port 2(ip6gretap0) entered disabled state [ 420.821437][ T9029] ip6gretap0: entered allmulticast mode [ 420.829713][ T7671] usb 6-1: Product: syz [ 420.852641][ T7671] usb 6-1: Manufacturer: syz [ 420.859564][ T7671] usb 6-1: SerialNumber: syz [ 420.868758][ T9023] XFS (loop0): Ending clean mount [ 420.872636][ T9029] ip6gretap0: entered promiscuous mode [ 420.890784][ T7671] usb 6-1: config 0 descriptor?? [ 420.911329][ T9023] XFS (loop0): Quotacheck needed: Please wait. [ 420.941659][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.949109][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.117123][ T9023] XFS (loop0): Quotacheck: Done. [ 421.203247][ T9023] XFS (loop0): User initiated shutdown received. [ 421.228785][ T9023] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 421.242977][ T9023] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 421.517466][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 421.602931][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.675'. [ 421.788433][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 422.017987][ T10] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.163659][ T10] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 422.408239][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 422.539507][ T10] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 422.679225][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.689239][ T9055] loop3: detected capacity change from 0 to 2048 [ 422.753849][ T10] usb 1-1: config 0 descriptor?? [ 422.829453][ T10] usb 1-1: can't set config #0, error -71 [ 422.877603][ T10] usb 1-1: USB disconnect, device number 16 [ 422.971594][ T9055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.989888][ T9055] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.078398][ T9055] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.676: invalid fast symlink length 39 [ 423.112386][ T7671] appletouch 6-1:0.85: Failed to read mode from device. [ 423.140378][ T7671] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 423.150779][ T9063] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.676: invalid fast symlink length 39 [ 423.234011][ T7671] usb 6-1: USB disconnect, device number 8 [ 423.480028][ T5836] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 423.845021][ T9069] loop5: detected capacity change from 0 to 2048 [ 423.959161][ T9070] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 423.982542][ T7131] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 424.051017][ T9074] loop4: detected capacity change from 0 to 512 [ 424.075535][ T9074] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 424.118768][ T30] audit: type=1800 audit(1763832397.385:50): pid=9069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.679" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 424.179180][ T9074] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.681: inode has both inline data and extents flags [ 424.205940][ T9074] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.681: couldn't read orphan inode 17 (err -117) [ 424.222335][ T9074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.223878][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.301429][ T9072] loop2: detected capacity change from 0 to 256 [ 424.310950][ T9072] exfat: Deprecated parameter 'namecase' [ 424.347086][ T9072] exfat: Deprecated parameter 'namecase' [ 424.357406][ T9074] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.681: bg 0: block 65: padding at end of block bitmap is not set [ 424.371633][ T9072] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 424.375853][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.420704][ T9074] Quota error (device loop4): write_blk: dquota write failed [ 424.478165][ T9074] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 424.539076][ T9074] EXT4-fs error (device loop4): ext4_acquire_dquot:6948: comm syz.4.681: Failed to acquire dquot type 0 [ 424.724640][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.892250][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.993336][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.648522][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.661039][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.686452][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.694946][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.710224][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 425.921131][ T9098] loop4: detected capacity change from 0 to 512 [ 425.928161][ T9098] EXT4-fs: Ignoring removed bh option [ 425.963880][ T9098] EXT4-fs (loop4): 1 truncate cleaned up [ 425.970501][ T9098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.079338][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.185082][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.096515][ T9112] tipc: Failed to remove unknown binding: 66,1,1/0:4276010676/4276010678 [ 427.106218][ T9112] tipc: Failed to remove unknown binding: 66,1,1/0:4276010676/4276010678 [ 427.296815][ T5958] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 427.656808][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 427.685424][ T9070] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 427.699578][ T5958] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 427.718523][ T9070] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 427.728852][ T5958] usb 4-1: config 0 has no interface number 0 [ 427.734998][ T5958] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 427.749765][ T5836] Bluetooth: hci0: command tx timeout [ 427.752345][ T5958] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 427.773215][ T9070] Remounting filesystem read-only [ 427.882501][ T7467] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 427.909200][ T5836] Bluetooth: hci5: command 0x0405 tx timeout [ 427.966534][ T34] bridge_slave_1: left allmulticast mode [ 427.972741][ T34] bridge_slave_1: left promiscuous mode [ 427.979124][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.989408][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.028109][ T5958] usb 4-1: Product: syz [ 428.032789][ T5958] usb 4-1: Manufacturer: syz [ 428.092207][ T5958] usb 4-1: SerialNumber: syz [ 428.103232][ T34] bridge_slave_0: left allmulticast mode [ 428.136046][ T5958] usb 4-1: config 0 descriptor?? [ 428.141163][ T34] bridge_slave_0: left promiscuous mode [ 428.208622][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.224356][ T5958] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 428.242785][ T5958] em28xx 4-1:0.132: Video interface 132 found: [ 428.312393][ T9128] loop2: detected capacity change from 0 to 256 [ 428.322523][ T9128] exfat: Deprecated parameter 'namecase' [ 428.359366][ T9128] exfat: Deprecated parameter 'namecase' [ 428.391893][ T9128] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 428.406299][ T30] audit: type=1326 audit(1763832401.675:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.3.690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c36f8f749 code=0x0 [ 429.479698][ T9141] loop4: detected capacity change from 0 to 1024 [ 429.501703][ T9141] EXT4-fs: inline encryption not supported [ 429.662552][ T5958] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 429.803370][ T9141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.846850][ T5840] Bluetooth: hci0: command tx timeout [ 429.968522][ T5958] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 430.047522][ T5958] em28xx 4-1:0.132: board has no eeprom [ 430.216995][ T5958] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 430.235624][ T5958] em28xx 4-1:0.132: analog set to bulk mode. [ 430.259998][ T7671] em28xx 4-1:0.132: Registering V4L2 extension [ 430.322871][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.362463][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.411349][ T34] bond0 (unregistering): Released all slaves [ 430.429750][ T7671] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 430.455716][ T9110] batadv_slave_1: entered promiscuous mode [ 430.486463][ T7671] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 430.510659][ T9139] syzkaller1: entered promiscuous mode [ 430.546317][ T7671] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 430.556813][ T9139] syzkaller1: entered allmulticast mode [ 430.591910][ T7671] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 430.602492][ T9111] batadv_slave_1: left promiscuous mode [ 430.685178][ T5970] usb 4-1: USB disconnect, device number 31 [ 430.694265][ T7671] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 430.706456][ T7671] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 430.716191][ T5970] em28xx 4-1:0.132: Disconnecting em28xx [ 430.857255][ T5958] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 430.876858][ T7671] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 430.945005][ T7671] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 430.956447][ T7671] em28xx 4-1:0.132: No AC97 audio processor [ 430.978797][ T7671] usb 4-1: Decoder not found [ 430.983445][ T7671] em28xx 4-1:0.132: failed to create media graph [ 430.999992][ T9153] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 431.054120][ T7671] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 431.070591][ T5958] usb 6-1: Using ep0 maxpacket: 32 [ 431.136183][ T5958] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 431.153503][ T7671] em28xx 4-1:0.132: Remote control support is not available for this card. [ 431.157035][ T9155] ================================================================== [ 431.164738][ T5958] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 431.170195][ T9155] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420 [ 431.170227][ T9155] Read of size 8 at addr ffff888030f24740 by task v4l_id/9155 [ 431.170241][ T9155] [ 431.170250][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 431.170268][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 431.170279][ T9155] Call Trace: [ 431.170286][ T9155] [ 431.170295][ T9155] dump_stack_lvl+0x189/0x250 [ 431.170320][ T9155] ? __virt_addr_valid+0x1c8/0x5c0 [ 431.170337][ T9155] ? rcu_is_watching+0x15/0xb0 [ 431.170353][ T9155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.170375][ T9155] ? rcu_is_watching+0x15/0xb0 [ 431.170391][ T9155] ? lock_release+0x4b/0x3d0 [ 431.170410][ T9155] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 431.170434][ T9155] ? __virt_addr_valid+0x1c8/0x5c0 [ 431.170451][ T9155] ? __virt_addr_valid+0x4a5/0x5c0 [ 431.170468][ T9155] print_report+0xca/0x240 [ 431.170572][ T9155] ? v4l2_fh_open+0xac/0x420 [ 431.170590][ T9155] kasan_report+0x118/0x150 [ 431.170613][ T9155] ? v4l2_fh_open+0xac/0x420 [ 431.170633][ T9155] v4l2_fh_open+0xac/0x420 [ 431.170652][ T9155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 431.170671][ T9155] em28xx_v4l2_open+0x157/0x9a0 [ 431.170694][ T9155] v4l2_open+0x1bf/0x3a0 [ 431.170715][ T9155] chrdev_open+0x4cc/0x5e0 [ 431.170737][ T9155] ? __pfx_chrdev_open+0x10/0x10 [ 431.170758][ T9155] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 431.170785][ T9155] ? __pfx_chrdev_open+0x10/0x10 [ 431.170804][ T9155] do_dentry_open+0x7ce/0x1420 [ 431.170834][ T9155] vfs_open+0x3b/0x340 [ 431.170854][ T9155] ? path_openat+0x33b3/0x3d90 [ 431.170873][ T9155] path_openat+0x33ce/0x3d90 [ 431.170897][ T9155] ? stack_depot_save_flags+0x40/0x860 [ 431.170924][ T9155] ? __kasan_slab_alloc+0x6c/0x80 [ 431.170944][ T9155] ? __pfx_path_openat+0x10/0x10 [ 431.170970][ T9155] do_filp_open+0x1fa/0x410 [ 431.170986][ T9155] ? __lock_acquire+0xab9/0xd20 [ 431.171007][ T9155] ? __pfx_do_filp_open+0x10/0x10 [ 431.171034][ T9155] ? _raw_spin_unlock+0x28/0x50 [ 431.171055][ T9155] ? alloc_fd+0x64c/0x6c0 [ 431.171080][ T9155] do_sys_openat2+0x121/0x1c0 [ 431.171105][ T9155] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.171129][ T9155] ? exc_page_fault+0x82/0x100 [ 431.171156][ T9155] __x64_sys_openat+0x138/0x170 [ 431.171181][ T9155] do_syscall_64+0xfa/0xfa0 [ 431.171198][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.171214][ T9155] ? clear_bhb_loop+0x60/0xb0 [ 431.171233][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.171249][ T9155] RIP: 0033:0x7fb809ea7407 [ 431.171265][ T9155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 431.171280][ T9155] RSP: 002b:00007ffc232f8690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 431.171298][ T9155] RAX: ffffffffffffffda RBX: 00007fb80a641880 RCX: 00007fb809ea7407 [ 431.171316][ T9155] RDX: 0000000000000000 RSI: 00007ffc232f9f1c RDI: ffffffffffffff9c [ 431.171328][ T9155] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 431.171338][ T9155] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 431.171348][ T9155] R13: 00007ffc232f88e0 R14: 00007fb80a7a8000 R15: 000055d3296ff4d8 [ 431.171369][ T9155] [ 431.171375][ T9155] [ 431.499635][ T9155] Allocated by task 7671: [ 431.503958][ T9155] kasan_save_track+0x3e/0x80 [ 431.508629][ T9155] __kasan_kmalloc+0x93/0xb0 [ 431.513210][ T9155] __kmalloc_cache_noprof+0x3e2/0x700 [ 431.518575][ T9155] em28xx_v4l2_init+0x10b/0x2e70 [ 431.523587][ T9155] em28xx_init_extension+0x120/0x1c0 [ 431.528864][ T9155] process_one_work+0x93a/0x15e0 [ 431.533806][ T9155] worker_thread+0x9b0/0xee0 [ 431.538426][ T9155] kthread+0x711/0x8a0 [ 431.542482][ T9155] ret_from_fork+0x599/0xb30 [ 431.547057][ T9155] ret_from_fork_asm+0x1a/0x30 [ 431.551807][ T9155] [ 431.554117][ T9155] Freed by task 7671: [ 431.558082][ T9155] kasan_save_track+0x3e/0x80 [ 431.562746][ T9155] kasan_save_free_info+0x46/0x50 [ 431.567757][ T9155] __kasan_slab_free+0x5c/0x80 [ 431.572508][ T9155] kfree+0x1c0/0x680 [ 431.576390][ T9155] em28xx_v4l2_init+0x1683/0x2e70 [ 431.581413][ T9155] em28xx_init_extension+0x120/0x1c0 [ 431.586689][ T9155] process_one_work+0x93a/0x15e0 [ 431.591619][ T9155] worker_thread+0x9b0/0xee0 [ 431.596198][ T9155] kthread+0x711/0x8a0 [ 431.600257][ T9155] ret_from_fork+0x599/0xb30 [ 431.604874][ T9155] ret_from_fork_asm+0x1a/0x30 [ 431.609647][ T9155] [ 431.611957][ T9155] The buggy address belongs to the object at ffff888030f24000 [ 431.611957][ T9155] which belongs to the cache kmalloc-8k of size 8192 [ 431.626000][ T9155] The buggy address is located 1856 bytes inside of [ 431.626000][ T9155] freed 8192-byte region [ffff888030f24000, ffff888030f26000) [ 431.639964][ T9155] [ 431.642281][ T9155] The buggy address belongs to the physical page: [ 431.648690][ T9155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30f20 [ 431.657445][ T9155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 431.665952][ T9155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 431.673490][ T9155] page_type: f5(slab) [ 431.677475][ T9155] raw: 00fff00000000040 ffff88813fe27280 ffffea0000a56c00 dead000000000002 [ 431.686047][ T9155] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 431.694623][ T9155] head: 00fff00000000040 ffff88813fe27280 ffffea0000a56c00 dead000000000002 [ 431.703282][ T9155] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000 [ 431.711940][ T9155] head: 00fff00000000003 ffffea0000c3c801 00000000ffffffff 00000000ffffffff [ 431.720604][ T9155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 431.729264][ T9155] page dumped because: kasan: bad access detected [ 431.735665][ T9155] page_owner tracks the page as allocated [ 431.741365][ T9155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5487, tgid 5487 (S40network), ts 57744203645, free_ts 57692354910 [ 431.761772][ T9155] post_alloc_hook+0x234/0x290 [ 431.766534][ T9155] get_page_from_freelist+0x2365/0x2440 [ 431.772162][ T9155] __alloc_frozen_pages_noprof+0x181/0x370 [ 431.777961][ T9155] alloc_pages_mpol+0x232/0x4a0 [ 431.782811][ T9155] allocate_slab+0x86/0x3b0 [ 431.787299][ T9155] ___slab_alloc+0xf56/0x1990 [ 431.791966][ T9155] __slab_alloc+0x65/0x100 [ 431.796469][ T9155] __kmalloc_cache_noprof+0x41e/0x700 [ 431.801914][ T9155] tomoyo_init_log+0x111f/0x1f70 [ 431.806838][ T9155] tomoyo_supervisor+0x340/0x1480 [ 431.811849][ T9155] tomoyo_find_next_domain+0x488/0x1aa0 [ 431.817387][ T9155] tomoyo_bprm_check_security+0x11c/0x180 [ 431.823104][ T9155] security_bprm_check+0x89/0x270 [ 431.828118][ T9155] bprm_execve+0x888/0x1440 [ 431.832612][ T9155] do_execveat_common+0x510/0x6a0 [ 431.837628][ T9155] __x64_sys_execve+0x94/0xb0 [ 431.843945][ T9155] page last free pid 5486 tgid 5486 stack trace: [ 431.850341][ T9155] __free_frozen_pages+0xbc8/0xd30 [ 431.855517][ T9155] __put_partials+0x146/0x170 [ 431.860183][ T9155] put_cpu_partial+0x1f2/0x2e0 [ 431.864942][ T9155] __slab_free+0x288/0x2a0 [ 431.869341][ T9155] qlist_free_all+0x97/0x100 [ 431.873922][ T9155] kasan_quarantine_reduce+0x148/0x160 [ 431.879370][ T9155] __kasan_slab_alloc+0x22/0x80 [ 431.884210][ T9155] __kmalloc_noprof+0x3cf/0x800 [ 431.889047][ T9155] tomoyo_realpath_from_path+0xe3/0x5d0 [ 431.894585][ T9155] tomoyo_path_perm+0x213/0x4b0 [ 431.899427][ T9155] security_inode_getattr+0x12f/0x330 [ 431.904787][ T9155] __x64_sys_newfstat+0xfc/0x200 [ 431.909718][ T9155] do_syscall_64+0xfa/0xfa0 [ 431.914214][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.920094][ T9155] [ 431.922402][ T9155] Memory state around the buggy address: [ 431.928107][ T9155] ffff888030f24600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 431.936166][ T9155] ffff888030f24680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 431.944305][ T9155] >ffff888030f24700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 431.952354][ T9155] ^ [ 431.958499][ T9155] ffff888030f24780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 431.966547][ T9155] ffff888030f24800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 431.974598][ T9155] ================================================================== [ 431.983083][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 431.994357][ T5970] em28xx 4-1:0.132: Closing input extension [ 432.020039][ T5840] Bluetooth: hci0: command tx timeout [ 432.026631][ T9155] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 432.033862][ T9155] CPU: 1 UID: 0 PID: 9155 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) [ 432.042964][ T9155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.053008][ T9155] Call Trace: [ 432.056283][ T9155] [ 432.059206][ T9155] dump_stack_lvl+0x99/0x250 [ 432.063799][ T9155] ? __asan_memcpy+0x40/0x70 [ 432.068491][ T9155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.073687][ T9155] ? __pfx__printk+0x10/0x10 [ 432.078277][ T9155] vpanic+0x237/0x6d0 [ 432.082248][ T9155] ? __pfx_vpanic+0x10/0x10 [ 432.086741][ T9155] ? preempt_schedule+0xae/0xc0 [ 432.091585][ T9155] ? __pfx_preempt_schedule+0x10/0x10 [ 432.096955][ T9155] panic+0xb9/0xc0 [ 432.100714][ T9155] ? __pfx_panic+0x10/0x10 [ 432.105118][ T9155] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 432.111009][ T9155] ? is_module_address+0x17/0xf0 [ 432.115944][ T9155] ? v4l2_fh_open+0xac/0x420 [ 432.120525][ T9155] check_panic_on_warn+0x89/0xb0 [ 432.125547][ T9155] ? v4l2_fh_open+0xac/0x420 [ 432.130159][ T9155] end_report+0x6f/0x160 [ 432.134412][ T9155] kasan_report+0x129/0x150 [ 432.138916][ T9155] ? v4l2_fh_open+0xac/0x420 [ 432.143509][ T9155] v4l2_fh_open+0xac/0x420 [ 432.147921][ T9155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 432.153894][ T9155] em28xx_v4l2_open+0x157/0x9a0 [ 432.158741][ T9155] v4l2_open+0x1bf/0x3a0 [ 432.162983][ T9155] chrdev_open+0x4cc/0x5e0 [ 432.167394][ T9155] ? __pfx_chrdev_open+0x10/0x10 [ 432.172328][ T9155] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 432.178662][ T9155] ? __pfx_chrdev_open+0x10/0x10 [ 432.183592][ T9155] do_dentry_open+0x7ce/0x1420 [ 432.188360][ T9155] vfs_open+0x3b/0x340 [ 432.192513][ T9155] ? path_openat+0x33b3/0x3d90 [ 432.197278][ T9155] path_openat+0x33ce/0x3d90 [ 432.201882][ T9155] ? stack_depot_save_flags+0x40/0x860 [ 432.207342][ T9155] ? __kasan_slab_alloc+0x6c/0x80 [ 432.212367][ T9155] ? __pfx_path_openat+0x10/0x10 [ 432.217304][ T9155] do_filp_open+0x1fa/0x410 [ 432.221799][ T9155] ? __lock_acquire+0xab9/0xd20 [ 432.226647][ T9155] ? __pfx_do_filp_open+0x10/0x10 [ 432.231708][ T9155] ? _raw_spin_unlock+0x28/0x50 [ 432.236622][ T9155] ? alloc_fd+0x64c/0x6c0 [ 432.240955][ T9155] do_sys_openat2+0x121/0x1c0 [ 432.245631][ T9155] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.250918][ T9155] ? exc_page_fault+0x82/0x100 [ 432.255680][ T9155] __x64_sys_openat+0x138/0x170 [ 432.260529][ T9155] do_syscall_64+0xfa/0xfa0 [ 432.265026][ T9155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.271079][ T9155] ? clear_bhb_loop+0x60/0xb0 [ 432.275761][ T9155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.281642][ T9155] RIP: 0033:0x7fb809ea7407 [ 432.286054][ T9155] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 432.305745][ T9155] RSP: 002b:00007ffc232f8690 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 432.314166][ T9155] RAX: ffffffffffffffda RBX: 00007fb80a641880 RCX: 00007fb809ea7407 [ 432.322238][ T9155] RDX: 0000000000000000 RSI: 00007ffc232f9f1c RDI: ffffffffffffff9c [ 432.330216][ T9155] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 432.338193][ T9155] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 432.346163][ T9155] R13: 00007ffc232f88e0 R14: 00007fb80a7a8000 R15: 000055d3296ff4d8 [ 432.354138][ T9155] [ 432.357595][ T9155] Kernel Offset: disabled [ 432.361915][ T9155] Rebooting in 86400 seconds..