last executing test programs: 19.112325351s ago: executing program 2 (id=810): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r10}) 15.254393137s ago: executing program 1 (id=820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f00"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a19f70000000000010902240001000020000904000001030002000921000000012207000905810308"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x2000001, 0x2011, r1, 0xffffc000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'team_slave_0\x00', @broadcast}) syz_emit_ethernet(0x267, &(0x7f0000000000)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "4b8abd", 0x231, 0x21, 0xff, @private0, @mcast1, {[@hopopts={0x2, 0x9, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x2, 0x1, [0x563, 0x9, 0x86, 0xab95]}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x10}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x2f, 0x2, '\x00', [@ra={0x5, 0x2, 0x7a0}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}]}, @fragment={0x29, 0x0, 0xcb, 0x0, 0x0, 0x3, 0x67}, @dstopts={0x0, 0xd, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0xc, 0x100, [0x1, 0x401, 0x8000, 0xf999, 0x509, 0x4, 0x5, 0x800, 0x9, 0x0]}}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @fragment={0x4, 0x0, 0x2, 0x1, 0x0, 0x5, 0x64}, @fragment={0x10, 0x0, 0x10, 0x0, 0x0, 0x0, 0x65}, @fragment={0x6c, 0x0, 0x70, 0x0, 0x0, 0x7, 0x64}, @srh={0x32, 0x4, 0x4, 0x2, 0x2, 0x0, 0x4, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x21, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x8, [0x2, 0x8, 0x8]}}]}], {{0x5, 0x4e23, 0x4, 0x1, 0x2, 0x0, 0x0, 0x1, 0x7, 'iu6', 0xb6, "c52b0d"}, "5624ad912ac2e3d6b7763483c5df9645041dff7a2d038aa999dd30b38f3073027c15d27af42457dfbedd916003f20c216809bfaf852089e3d5447ae98f884111cb740e3f6e5d05744a67f650693c51dbdd84d977892a810ffbcfa626f974be045abe1ce2e064bbf0d85a73b4ef72d6ae0acf8059a6b553d27e346102cfad37cc1292c7b2673abc28f97bdf5761c702c3460f2fbf6219440adac8531f47bf5086c42e42a17efc52038d044ecb78e9e9e12042bd2875296bb4fd"}}}}}}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000440)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)=""/186, 0xba}, 0x6}], 0x1, 0x20, &(0x7f00000004c0)={r2, r3+10000000}) 13.851500226s ago: executing program 2 (id=824): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = getpid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000240)={@loopback}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0x3) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x9, 0x104}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000180)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000140)="be38", 0x2}, {&(0x7f0000000040)="e5c580d58bbe7e2be37eb795a65ad9b623", 0x11}, {&(0x7f0000000480)="837e2cc9d818b75d334ec364cdea2b6161bc3ef39d79d488a162d84a76f2332b6d4c34b9bc03533e32031ec6a996da79709b43392b8c6c11f139d0c3687cd7df1a9f556c8e3dccdc04167861f921764e9f79fc1ce46ee5b4d789d93602369f7939be5f941c746869e5b7229c72eeb51dab0efb57b37d505660df000e14a61eb33bea173a3b913c56044647f2be2cabf99dea8744b3fe7adedd339904d2a94d9763bb7539a5a66bb2a9392957d60cc58b3cd980373f6182d350ca940c14ddd293cf9a", 0xc2}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000022000000000008000000b4ac713e51fb57d09c1726322bbe7a30fb723de4b86a738bea3a138c5099ea35d0d6e3d6c8cfb697a5820e038e47a142816e7b82457235d0048e4ef81252be4c4ec7205a5d72ca238b4c9fc9120708ebf3ca8c7bd76cee270405290e896731a89bd5f88ffb3fe6fed227f18d7316599368119976e1bcf8abb0727d11fe6693ed8f640ea7a5b627752fd61619b17151ae722efbce6575fe379aa3cffc1414bfb9108226a1133a943fae5a2b00000000000000000000000000000000738906", @ANYBLOB="c49c6922677c69dade68f8067019b8c57cba0ea0408e0c427d53b27fa7572a6107ee29910c903e88971f0c503ecb3bf2de5e84e88ae608be63f25672fef83ea8d513fb96384ffb89278823f885044167fe447a726044e88a1a84dd99beb47e9a42a477da0c10d76746325a81b3bd7479d1a01b1e180584dccf99394c54e322fa47a4a01a3479285dc7a0505c6b801b707f22079505768fe6f8fc12bcf96f61b153919cd8480915c363e7e65a1ceb88dfcce50be93a3e9c0f6e3011761e9a79b0b25a132f1a88db4948940f63cb1819ac829b8af5803589", @ANYRES16], 0x38}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) syz_fuse_handle_req(r7, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) timer_create(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 10.977839376s ago: executing program 1 (id=834): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 9.227639787s ago: executing program 2 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x300, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x51) msgget$private(0x0, 0x3ad) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc000, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 8.585481662s ago: executing program 2 (id=839): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) getpgid(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000003c0)={0x0, @reserved}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2c2cc0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0xf, &(0x7f00000013c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x800, 0xa7, &(0x7f0000001580)=""/167, 0x41000, 0xa, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x0, 0x100003, 0xffffffff, 0x89f}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[r3, r2, r4, r2, r3, r3, r3, r2, r3], 0x0, 0x10, 0xdff}, 0x94) mq_notify(r3, &(0x7f0000000040)={0x0, 0xe, 0x2, @tid=r0}) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') read$FUSE(r5, &(0x7f0000001e80)={0x2020}, 0x2062) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f00000001c0)={0x3, 0x1000, &(0x7f0000002000)="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"}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c06d1ff7de1259c2df5a", 0xd) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@getchain={0x24, 0x66, 0x601, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x16, 0x2}, {0x10, 0x7}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) write$evdev(r1, &(0x7f0000000100)=[{{0x0, 0x2710}, 0x15, 0x2}], 0xffffffffffffffd9) 8.551757002s ago: executing program 3 (id=840): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r2}, 0x20) bind$unix(r2, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 8.402607973s ago: executing program 3 (id=841): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x202, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0xc0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 8.391857573s ago: executing program 0 (id=842): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x224500, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0xfffffeffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x60, "b30b92"}}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'nat\x00', 0x75, "069a9eb2b1e50aba277641301bb6628d4611804e29e1ab0d7f4c6a12e8a7ee56946de34e12f846cbbcbacccf89cae32d369f8f7e5464afb9ebf6f007e1feebbd6bec060f9570cc313d49486b41d253fca94ce5a6cf6cbe9b6c5e606558eb786877aaaaa29bb8049774f8cf0a3e2d388c927666bd87"}, &(0x7f0000000100)=0x99) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000fdffffff000000001ac300008500000036000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r6, 0x25, 0x12, @val=@perf_event={0x5}}, 0x18) recvfrom$l2tp(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17, 0x21, &(0x7f0000000440)={0x2, 0x0, @initdev}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x5c, 0x2e, 0x100, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0x3, 0xe}, {0xa, 0x2}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x8}]}, 0x5c}}, 0x40014) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r4) 7.993949646s ago: executing program 1 (id=843): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x202, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0xc0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) (fail_nth: 1) 7.31535552s ago: executing program 4 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x300, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x51) msgget$private(0x0, 0x3ad) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc000, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 6.484481466s ago: executing program 4 (id=845): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x202, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W\xa9\xef\'\xe1\xd9[\xac^', 0x1) r2 = dup(r1) r3 = fanotify_init(0x10, 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) fanotify_mark(r3, 0x1, 0x4800102a, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x0, 0xffffffff, 0x1e}, 0x2c) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="c1090a000000000000001d1e01e8e51f", 0x10}], 0x1}, 0x0) 6.378280877s ago: executing program 0 (id=846): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x444}}, {0xe8, &(0x7f0000000340)=@string={0xe8, 0x3, "f225be7590d5273d1e55e95261b1e3feffebd328fed35560dc5eb5a138570eda5c5c87b7120c8799c8c199882576e330e19b53e1d19e18b0358fe1bc1b1c924aea2775c20d057b1799b4f123ee9a2e0acc36dda6d5f915e3784867a912fc57e9455ee6ee9ad4f57729a0f6d2dabb99a160ea34ee02c1b96099697602fbb9fe813fd1af051d0f0b537d47b19cfb34a55b51148e4dd8326be4d98bfc5ec6a8c265357dda0065a0dea00618efa1c03a5d9c9d98ba779bdb5afbd2106ef9b0acaa3f6d1674124bd037aa5621d2de668261dec6b492ca5f91d5fd856cd7f1c0e4130b6823726db152"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0xee, &(0x7f00000007c0)=@string={0xee, 0x3, "530905d8ff2a92c990b0989fa5d2ddfaffe2fbe075b6e155ee88661092608007b4b92912c23c0119aa306eee2a6898fbb97a8a86ab682b0507239d91460561fd4b262fd5fada4aad27df092765d924e35e1fcd69d2f241d9d6e60945be3451915fc22de5e6405b411da80627ae3b62e962cb28191a4d7699e958b6df47f0666098629e7da79480526d1719b5f6d4bd07fd6ad64dd9cf3e381a742b0e646cd2b3e9b63366efbaf7efdb4f591cc13cc54e2aa5e0f5d5b42dd41ea5309e1697326aaa7feaac18c632fc83e55e4469cb1ca472ec7365d47cac317f82d3df89bb6a2971226afe70390388458632f3"}}, {0x58, &(0x7f00000004c0)=@string={0x58, 0x3, "9228ab1ed333bd6ea5a20d13cf6d4ae9ce03c398f91783db4b4d8253ebe50c263a83b9df4253867345d8a9d3dcf7efe2eb4094545b4089a9737f615eeb95c01f45301df213fcbcfa8f21948bb948a5ac0b205e0858de"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}, {0x6a, &(0x7f00000005c0)=@string={0x6a, 0x3, "f1ff4879edc08aabf960fcf6d725c24872039d43e7715ee8ff9fa03a07b2c67dd1fdf16e1669f40364f8f3b44c686ef00beb1785d447e234d3f0ec91b873d932967348d9a7c86eb5aaca7503be8df00c500e8a2dd8536697d9656e30e28700f2d2bed5dd050371f3"}}, {0xf2, &(0x7f0000000640)=@string={0xf2, 0x3, "151d78dfeb8cad121120ae57ae9b1a076ebfb9670d353a48ce16846d6ca2571bc78fa008a85cf4cfe0cfe4224bc18ff65ad331bd851ecfc9c83c8c29e783f10ed71f306bdc355c9b7ec63b1d4d765cad3ce93a6f3f4184c6d074ad56976c97431dc80ac2f798d2cc3b8842ed2ab04b2c655cba19f13e14751f4817c321b1e74b46a7921946406ea0becac5a01949e87d21b73357e137d54175ef43fa3fbfd3ce9b3173f5db52aa2bd0bf8996cd88fac92d869ea728a5d59bf64bbb458656b2468f4c8e3f6b8616e5fa99d59eb8d9c5526418a47feca833a26692cc5c49b3fa96348a73e787973774d6d33beb87714bfc"}}]}) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa7a, &(0x7f0000000a00)="$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") r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x3d) rename(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='./bus\x00') r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x401, 0x190, 0x1, 0x2, 0xdd9f83, 0x4, 0x0, 0x7ffffffe, 0x8, 0x9, 0x5ed1, 0x10, 0x7, 0xb985, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x7, 0xa3}}) sendfile(r3, r3, 0x0, 0x800000009) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000100)=ANY=[@ANYRES8=r1]) 6.295720708s ago: executing program 1 (id=847): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 5.86003273s ago: executing program 2 (id=848): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r4, r3, 0x0) io_setup(0x1, &(0x7f0000000400)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r3, 0x0}]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0xd, 0xa, &(0x7f0000000300)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@map_fd={0x18, 0x2, 0x1, 0x0, r2}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sched_setscheduler(r10, 0x5, &(0x7f0000002200)=0x2) r11 = syz_open_dev$MSR(&(0x7f0000000200), 0x100000, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x185241, 0x22) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r12, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}}, 0x4000010) read$msr(r11, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r14 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r14, r13, &(0x7f00000000c0)=0x58, 0xa) 5.419229543s ago: executing program 3 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x300, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x51) msgget$private(0x0, 0x3ad) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc000, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 4.951529316s ago: executing program 4 (id=850): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (fail_nth: 1) 4.040917253s ago: executing program 1 (id=851): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000cdd000/0x4000)=nil, 0x4000}, 0x2}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000100), 0x0, 0x4000000) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x40000032, r4, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000300)={[{@uni_xlateno}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@fat=@nfs_nostale_ro}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@rodir}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@uni_xlateno}]}, 0x25, 0x365, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) socket$xdp(0x2c, 0x3, 0x0) 4.039477143s ago: executing program 3 (id=852): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r2}, 0x20) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) 3.451673436s ago: executing program 3 (id=853): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee4, 0x8031, r0, 0x4e04f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r1, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x18, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0xc) unshare(0x22020600) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(r4, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) 3.416942947s ago: executing program 2 (id=854): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0xffffffff], [], [0xfffffffffffffffc]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r10}) 3.081256779s ago: executing program 4 (id=855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4}) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x86fc, 0x2, 0x8000, 0x400252}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x9, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0xffffffff, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x8798, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (fail_nth: 1) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d92", 0x5}], 0x1) 2.9957438s ago: executing program 0 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1be14000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x51) msgget$private(0x0, 0x3ad) mknod$loop(&(0x7f0000000040)='./file0\x00', 0xc000, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 2.122602965s ago: executing program 3 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="88046fa3301e12b1dbed7c66a9a96b69"]}]}, 0x38}], 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0x200800, &(0x7f0000000e00)={[], [{@fowner_gt={'fowner>', r2}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'macse\x1b\x00'}}]}, 0xc, 0x96b9, &(0x7f000001b700)="$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") chdir(&(0x7f0000000240)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x42082, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x5, 0x1ff, 0x400000, 0x6}, 0x10) socket$kcm(0x10, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000240)={0x7, 0x0, '\x00', {0x0, @bt={0x9, 0x6, 0x0, 0x2, 0x1, 0x10000, 0xde, 0x0, 0x5, 0x800, 0xcf2f, 0x7f, 0xf5a, 0x2a3, 0x8, 0x19, {0x3ef, 0x3}, 0x5}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) 1.716662208s ago: executing program 0 (id=858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x1, r5, r4}) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x86fc, 0x2, 0x8000, 0x400252}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xa000, 0xfffd}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x4388, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x9, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0x40e660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0xffffffff, 0x71, 0xfffffff8, 0x7, 0x1, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x8000006, 0x3, 0xb83, 0x7, 0x5, 0x0, 0xf, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0xed2d, 0x4, 0x0, 0x5, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x8798, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x8], [0x400, 0x4, 0x1, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0xffffffff, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8001, 0x83, 0x80000003, 0x9, 0x43e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x8, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0xfffffff7, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x3, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d92", 0x5}], 0x1) 1.716206488s ago: executing program 4 (id=859): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x240080f5) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x6}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x204, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0xff) msgctl$IPC_SET(0x0, 0x1, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) 1.619568489s ago: executing program 1 (id=860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = memfd_create(&(0x7f0000000780)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe8]l\xa1s\b\xa5\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1\xbb\x05vH\xdd\x01?k\x97\xa5\xbf\x89#=2G\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xa6\x7f\xc0\xcck.5=\xcc\x10Y\xad^*;MVh\xd9\xcf )\x0e%\x84\x95bXy\x81;o\xc9\x94\xc5M\xaf\xdbr\xec\xf6', 0x0) fallocate(r1, 0x0, 0x0, 0x200401) fallocate(r1, 0x0, 0x0, 0x200401) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000065895340f010022067d7010203010902240001fc00000009046b00020a00000009058310000000000109058a"], 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) (async, rerun: 32) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000001640)=[{0x0, 0x38}, {&(0x7f0000000140)=""/249, 0xf0}], 0x2) (async) write$evdev(r5, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) r6 = socket(0x2a, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x20000004) (async, rerun: 64) syz_mount_image$sysv(&(0x7f0000000140), &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="ae7a0dadf24984174336c19bd4f6eb98b0c50f5a9bd5286d2e7f0e4f054a25414aa32fdeef450696d15e128704af022de14173ebb760e32e889e14da2357898d351e050f1f225943a3c36490490da55de4e8c8ab43db748d9f9b003303df9de176b1b3daf0236cbae146c6350db7b278a26de50afdfce6537d0db2e2bf4981b5867c58dd2482d0aed80e28cdfc25086a2ee544803ddea6f5114b1f40a2e0ab2d3521b833cbea05551041bca8bf1f55c4e1f71c12512edcbfe00ab970afffd12d82e24cc27a826f541121bf02e1676ca028699487710fd312eb", @ANYRES16=0x0], 0x1, 0x9e84, &(0x7f000000a180)="$eJw8mmP0J8fWcP+TiW3bTnZs27ZteweT5Nc2Ytu2bdu2bcy75rn3vmf1h/7Qq6p7n31qVVXXLQO8dYC3DfD2Ad4xwDsHeNcA7x7gPQO8d4D3DfD+AT4wwAcH+NAAHx7gIwN8dICPDfDxAT4xwCcH+NQAnx7gMwN8doDPDfD5Ab4wwBcH+NIAXx7gKwN8dYCvDfD1Ab4xwDcH+NYA3x7gOwN8d4DvDfD9AX4wwA8H+NEAPx7gJwP8dICfDfDzAX4x8gS/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8BjhzgUIDDAhwtwJEBjh7gGAGOGeBYAY4d4DgBjhvgeAGOH+AEAU4Y4EQBThzgJAFOGuBkAU4e4BQBThngVAFOHeA0AU4b4HQBTh/gDAHOGOBMAc4c4CwBzhrgbAHOHuAcAc4Z4FwBzh3gPAHOG+B8Ac4f4AIBLhjgQgEuHCABwxYJcNEAFwtw8QCXCHDJAJcKcOkAlwlw2QCXC3D5AFcIcMUAVwpw5QBXCXDVE4aGRvFYPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI0wGMDPC7A4wM8IcARAZ4Y4EkBnjzKhVEIAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7P7rzykBnhrgaQGeHuAZAZ4Z4FkBnh3gOQGeG+B5AZ4f4AUBXhjgRQFeHOAlAV4a4GUBXh7gFQFeGeBVAV4d4DUBXhvgdQFeH+ANAd4Y4E0B3hzgLQHeGuBtAd4e4B0B3hngXQHeHeA9Ad4b4H0B3h/gAwE+GOBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH++996HwpxWDjC0UIcHuLoIY4R4pghjhXi2CGOE+K4IY4X4vghThDihCFOFOLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhEuIiIS4a4mIhLh7iEiEuGeJSIS4d4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFDm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh4Z4WIiHh3hEiEeGeFSIR4d4TIiGeGyIx4V4fIgnhDgixBNDPCnEk0e9wwtDQ0GIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2Ip4R4aoinhXh6iGeEeGaIZ4V4dojnhHhuiOeFeH6IF4R4YYgXhXhxiJeEeGmIl4V4eYhXhHhliFeFeHWI14R4bYjXhXh9iDeEeOOo3G0+39BoQ0NDt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhThyrKGhoZX+7/q/eDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdGH/LlEF8JGevVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx31HfGuJQhMMiHC0aY2hoCEePcIwIx4xwrAjHjnCcCMeNcLwIx49wgggnjHCiCCeOcJIIJ41wsggnj3CKCKeMcKoIp45wmginjXC6CKePcIYIZ4xwpghnjnCWCGeNcLYIZ49wjgjnjHCuCOeOcJ4I541wvgjnj3CBCBeMcKEIF46QCBeJcNEIF4tw8QiXiHDJCJeKcOkIl4lw2QiXi3D5CFeIcMUIV4pw5QhXiXDVCFeLcPUI14hwzQjXinDtCNeJcN0I14tw/Qg3iHDDCDeKcOMIN4lw0wg3i3DzCLeIcMsIt4pw6wi3iXDbCLeLcPsId4hwxwh3inDnCHeJcNcId4tw9wj3iHDPCPeKcO8I94lw3wj3i3D/CA+I8MAID4rw4AgPifDQCA+L8PAIj4jwyAiPivDoCI+J0AiPjfC4CI+P8IQIR0R4YoQnRXhyhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+whPifDUCE+L8PQIz4jwzAjPivDsCM+J8NwIz4vw/AgviPDCCC+K8OIIL4nw0ggvi/DyCK+I8MoIr4rw6givifDaCK+L8PoIb4jwxghvivDmCG+J8NYIhw/h7RHeEeGdEd4V4d0R3hPhvRHD7ovw/ggfiPDBCB+Kxht6OMJHInw0wscifDzCJyJ8MsKnInw6wmcifDbC5yJ8PsIXInwxwpcifDnCVyJ8NcLXInw9wjcifDPCtyJ8O8J3Inw3wvcifD/CDyL8MMKPIvw4wk8i/DTCzyL8PMIvIvwywq8i/DoaZ+ibCL+N8LsIv4/whwh/jPCnCH+O8JcIf43wtwh/j/CPCP+M8K8I/47wnwj/jXDkSByKcViMo8U4PMbRYxwjxjFjHCvGsWMcJ8ZxYxwvxvFjnCDGCWOcKMaJY5wkxkljnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjJMZFYlw0xsViXDzGJWJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjTGY2M8LsbjYzwhxhExnhjjSTGeHOMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7GU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktivDTGy2K8PMYrYrwyxqtivDrGa2K8NsbrYrw+xhtivDHGm2K8OcZbYrw1xttivD3GO2K8M8a7Yrw7xntivDfG+2K8P8YHYnwwxodifDjGR2J8NMbHYnw8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg/i4f+dbeDHMX4S46cxfhbj5zF+EeOXMX4V49cxfjMqd6MeP3Fo6PsYf4jxxxh/ivHnGH+J8dcYf4vx9xj/iPHPGP+K8e8Y/4nx3xhHxjiU4LAER0tweIKjJzhGgmMmOFaCYyc4ToLjJjheguMnOEGCEyY4UYITJzjJwzhpgpMlOHmCUyQ4ZYJTJTh1gtMkOG2C0yU4fYIzJDhjgjMlOHOCsyQ4a4KzJTh7gnMkOGeCcyU4d4LzJDhvgvMlOH+CCyS4YIILJZzwX3AukuCiCS6W4OIJLpHgkgkuleDSCS6T4LIJLpfg8gmukOCKCa6U4MoJrpLgqgmuluDqCa6RMM7/2l47wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9EtwzGcO9Etw7wX0S3DfB/RLcP8EDEjwwwYMSPDjBQxI8NMHDEjw8wSMSPDLBoxI8OsFjEjTBYxM8LsHjEzwhwREJnpjgSQmenOAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BUxI8NcHTEjw9wTMSPDPBsxI8O8FzEjw3wfMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1waHheHuCdyR4Z4J3JXh3gvckeG+C9yV4f4IPJPhggg8l+HCCjyT4aIKPJfh4gk8M+68JCT6d4DMJPpvgcwk+n+ALCb6Y4EsJvpzgKwm+muBrCb6e4BsJvpngWwm+neA7Cb6b4HsJvp/gBwl+mOBHCX6c4CcJfprgZwl+nuAXCX6Z4FcJfp3gNwl+m+B3CX6f4A8J/pjgTwn+nOAvCf6a4G8J/p7gHwn+meBfCf6d4D8J/pvsOO6o8WYoxWEpjpbi8BRHT3GMFMdMcawUx05xnBTHTXG8FMdPcYIUJ0xxohQnTnGSFCdNcbIUJ09xihSnTHGqFKdOcZoUp01xuhSnT3GGFGdMcaYUZ05xlhRnTXG2FGdPcY4U50xxrhTnTnGeFOdNcb4U509xgRQXTHGhFBdOkRQXSXHRFBdLcfEUl0hxyRSXSnHpFJdJcdkUl0tx+RRXSHHFFFdKceUUV0lx1RRXS3H1FNdIcc0U10px7RTXSXHdFNdLcf0UN0hxwxQ3SnHjFDdJcdMUN0tx8xS3SHHLoSG3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nRFI9N8bgUj0/xhBRHpHhiiieleHKKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FE9J8dQUT0vx9BTPSPHMFM9K8ewUz0nx3BTPS/H8FC9I8cIUL0rx4hQvSfHSFC9L8fIUr0jxyhSvSvHqFK9J8doUr0vx+rGHhkY5fGOKN6V4c4q3pHhrireleHuKd6R4Z4p3pXh3ivekeG+K96V4f4oPpPhgig+l+HCKj6T4aIqPpfh4ik+k+GSKT6X4dIrPpPhsis+l+HyKL6T4Yoovpfhyiq+k+GqKr6X4eopvpPhmim+l+HaK76T4borvpfh+ih+k+GGKH6X4cYqfpPhpip+l+HmKX6T4ZYpfpfh1it+k+G2K36X4fYo/pPhjij+l+HOKv6T4a4q/pfh7in+k+GeKf6X4d4r/pPhviiNTHMpwWIajZTg8w9EzHCPDMTMcK8OxMxwnw3EzHC/D8TOcIMMJM5wow4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznGHksKFR/c6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGZLhIhkumuFiGS6e4RIZLpnhUhkuneEyGS6b4XIZLp/hChmumOFKGa6c/Wffe9UMV8tw9QzXyHDNDNfKcO0M18lw3QzXy3D9DDfIcMMMN8pw4ww3yXDTDDfLcPMMt8hwywy3ynDrDLfJcNsMt8tw+wx3yHDHDHfKcOcMd8lw1wx3y3D3DPfIcM8M98pw7wz3yXDfDPfLcP8MD8jwwAwPyvDgDA/J8NAMD8vw8AyPyPDIDI/K8OgMj8nQDI/N8LgMj8/whAxHZHhihidleHKGgwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMu+zj/z+PPTXD0zI8PcMzMjwzw7MyPDvDczI8N8PzMjw/wwsyvDDDizK8OMNLMrw0w8syvDzDKzK8MsOrMrw6w2syvDbD6zK8PsMbMrwxw5syvDnDWzK8NcPbMrw9wzsyvDPDuzK8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMnwyw6cyfDrDZzJ8NsPnMnw+wxcyfDHDlzJ8OcNXMnw1w9dm/i+ODN/M8K0M387wnQzfzfC9DN/P8IMMP8zwoww/zvCTDD/N8LMMP8/wiwy/zPCrDL/Oxvr/jL/L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/yPDPDP/K8O8M/8nw3wxHZjiU47AcR8txeI6j5zhGjmPmOFaOY+c4To7j5jhejuPnOEGOE+Y4UY4T5zhJjpPmOFmOk+c4RY5T5jhVjlPnOE2O0+Y4XY7T5zhDjjPmOFOOM+c4S46z5jhbjrPnOEeOc+Y4V45z5zhPjvPmOF/O6PPnuECOC+a4UI4L50iOi+S4aI6L5bh4jkvkuGSOS+W4dI7L5LhsjsvluHyOK+S4Yo4r5bhyjqvkuGqOq+W4eo5r5LhmjmvluHaO6+S4bo7r5bh+jhvkuGGOG/2X3yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkeneMxOZrjsTkel+PxOZ6Q44gcT8zxpBxPznGQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY5/jKTmemuNpOZ6e4xk5npnjWTmeneM5OZ6b43k5np/jBTlemONFOV6c4yU5XprjZTlenuMVOV6Z41U5Xp3jNTlem+N1OV6f4w053pjjTTnenOMtOd6a42053p7jHTnemeNdOd6d4z053pv/39rR+3N8IMcHc3wox4dzfCTHR3N8LMfHc3wixydzfCrHp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8I8c3c3wrx7dzfCfHd3N8L8f3c/wgxw9z/CjHj3P8JMdPc/wsx89z/CLHL3P8Ksevc/wmx29z/C7H73P8Iccfc/wpx59z/CXHX3P8Lcffc/wjxz/zYUN/5fh3jv/k+G+OI3McKnBYgaMVOLzA0Qsco8AxCxyrwLELHKfAcQscr8DxC5ygwAkLnKhg1GDkJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXCAFLlLgogUuVuDiBS5R4JIFLlXg0gUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmw4fcrMDNC9yiwC0L3KrArQvcpsBtC9yuwO0L3KHAHQvcqcCdC9ylwF0L3K3A3Qvco8A9C9yrwL0L3KfAfQvcr8D9CzygwAMLPKjAgws8pMBDCzyswMMLPKLAIws8qsCjCzymQAs8tsDjCjy+wBMKHFHgiQWeVODJBQ4KDAoMC4wKjAtMCkwLzArMCywKLAusCqwLbApsC+wK7As8pcBTCzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7h4b5QIEPFvhQgQ8X+EiBjxb4WIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBvxb4W4G/F/hHgX8W+FeBfxf4T4H/FjiywKESh5U4WonDSxy9xDFKHLPEsUocu8RxShy3xPFKHL/ECUqcsMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqc/397MSUuVOLCJVLiIiUuWuJiJS5e4hIlLlniUiUuXeIyJS5b4nIlLl/iCiWuWOJKJa5c4iolrlriaiWuXuIaJa5Z4lolrl3iOiWuW+J6Ja5f4gYlbljiRiVuXOImJW5a4mYlbl7iFiVuWeJWJW5d4jYlblvidiVuX+IOJe5Y4k4l7lziLiXuWuJuJe5e4h4l7lniXiXuXeI+Je5b4n4l7l/iASUeWOJBJR5c4iElHlriYSUeXuIRJR5Z4lElHl3iMSVa4rElHlfi8SWeUOKIEk8s8aQSTy5xUGJQYlhiVGJcYlJiWmJWYl4yVJRYlliVWJfYlNiW2JXYl3hKiaeWeFqJp5d4RolnlnhWiWeXeE6J55Z4Xonnl3hBiReWeFGJF5d4SYmXlnhZiZeXeEWJV5Z4VYlXl3hNideWeF2J15d4Q4k3lnhTiTeXeEuJt5Z4W4m3l3hHiXeWeFeJd5d4T4n3lnhfifeX+ECJD5b4UIkPl/jIqDoYwsdKfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Snx35LD/7/EHJX5Y4kclflziJyV+WuJnJX5e4he/jfxPlPh1id+U+G2J35X4fYk/lPhjiT+V+HOJv5T4a4m/lfh7iX+U+GeJf5X4d4n/lPhviaPaG6pwWIWjVTi8wtErHKPCMSscq8KxKxynwnErHK/C8SucoMIJK5yowokrnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGYcPDY3qe+YKZ6lw1gpnq3D2CueocM4K56pw7grnqXDeCuercP4KF6hwwQoXqnDhCqlwkQoXrXCxChevcIkKl6xwqQqXrnCZCpetcLkKl69whQpXrHClCleucJUKV61wtQpXr3CNCtescK0K165wnQrXrXC9CtevcIMKN6xwowo3rnCTCjetcLMKN69wiwq3rHCrCreucJsKt61wuwq3r3CHCnescKcKd65wlwp3rXC3CnevcI8K96xwrwr3rnCfCvetcL8K96/wgAoPrPCgCg+u8JAKD63wsAoPr/CICo+s8KgKj67wmAqt8NgKj6vw+ApPqHBEhSdWeFKFJ1c4qDCoMKwwqjCuMKkwrTCrMK+wqLCssKqwrrCpsK2wq7Cv8JQKT63wtApPr/CMCs+s8KwKz67wnBF4boXnVXh+hRdUeGGFF1V4cYWXVHhphZdVeHmFV1R4ZYVXVXh1hddUeG2F140c/n8O3VDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVPlHhkxU+VeHTFT5T4bMVPlfh8xW+UOGLFb5U4csVvlLhqxW+VuHrFb5R4ZsVvlXh2xW+U+G7Fb5X4fsVflDhhxV+VOHHFX5S4acVflbh5xV+UeGXFX5V4dcVflPhtxV+V+H3Ff5Q4Y8V/lThzxX+UuGvFf5W4e8V/lHhnxX+VeHfFf5T4b8VjqxwqMZhNY5W4/AaR69xjBrHrHGsGseucZx62NC4NY5X4/g1TlDjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1UuMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTUeXeMxNVrjsTUeV+PxNZ5Q44gaT6zxpFEeDI0cOagxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/GUGk+t8bQaT6/xjBrPrPGsGs+u8Zwaz63xvBrPr/GCGi+s8aIaL67xkhovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xtlE+Dw0N3VHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNT5R45M1PlXj0zU+U+OzNT5X4/M1vlDjizW+VOPLNb5S46s1vlbj6zW+UeObNb5V49s1vlPjuzW+V+P7NX5Q44c1flTjxzV+UuOnNX5W4+c1flHjlzV+VePXNX5T47c1flfj9zX+UOOPNf5U4881/lLjrzX+VuPvNf5R4581/lXj3zX+U+O/NY6scajBYQ2O1uDwBkdvcIwGx2xw7CEcu8FxGhy3wfEaHL/BCRqcsMGJGpy4wUkanLTByRqcvMEpGpyywakanLrBaRqctsHpGpy+wRkanLHBmRqcucFZGpy1wdkanL3BORqcs8G5Gpy7wXkanLfB+Rqcv8EFGlywwYUaXLhBGlykwUUbXKzBxRtcosElG1yqwaUbXKbBZRtcrsHlG1yhwRUbXKnBlRtcpcFVG1ytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHZv/8N25wV0a3LXB3RrcvcE9Gtyzwb0a3LvBfRrct8H9Gty/wQMaPLDBgxo8uMFDGjy0wcMaPLzBIxo8smHr8YeGPLrBYxq0wWMbPK7B4xs8ocERDSNGOXBSgyc3OGgwaDBsMGowbjBpMG0wazBvsGiwbLBqsG6wabBtsGuwb/CUBk9t8LQGT2/wjAbPbPCsBs9u8JwGz23wvAbPb/CC5j91OioubvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wltHx1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNjjU4rAWR2txeIujtzjGf+/HanHsFsdpcdwWx2tx/BYnaHHCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RZpcZEWF21xsRYXb3GJFpdscakWlx6Gy7S4bIvLtbh8O8wVWlyxxZVaXLnFVVpctcXVWly9xTVaXLPFtVpcu8V1Wly3xfVaXL/FDVrcsMWNWty4xU1a3LTFzVrcvMUtWtyyxa1a3LrFbVrctsXtWty+xR1a3LHFnVrcucVdWty1xd1a3L3FPVrcs8W9Wsbcu8V9Wty3xf1a3L/FA1o8sMWDWjy4xUNaPLTFw1o8fFROh/6zvjyqxaNbPKZFWzy2xeNaPL5lgxNaHNHiiS2e1P7HhUGLQYthi1GLcYtJi2mLWYt5i0WLZYtVOzSsbrFpsW2xa7Fv8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxohYvbvGSFi9t8bIWL2/xihavbPGqFq9u8ZoWr23xuhavb/GGFsds8aYWb27xlhZvbfG2Fm9v8Y4W72zxrhbvbvGeFu9t8b4W72/xgRYfbPGhFh9u8ZEWH23xsRYfb/GJFp9s8akWn27xmRafbfG5Fp9v8YUWX2zxpRZfbvGVFl9t8bUWX2/xjRbfbPGtFt9u8Z0W323xvRbfb/GDFj9s8aMWP27xkxY/bRkabWhoxc9b/KLFL1v8qsWvW/ymxW9b/K7F71v8ocUfW/ypxZ9b/KXFX1v8rcXfW/yjxT9b/KvFv1v8p8V/Wxw5KucdDutwtA6Hdzh6h2N0OGaHY3U4dofjdDhuh+N1OH6HE3Q4YYcTdThxh5N0OGmHk3U4eYdTdDhlh1N1OHWH03Q4bYfTdTh9hzN0OGOHM3U4c4ezdDhrh7N1OHuHc3Q4Z4dzdTh3h/N0OG+H83U4f4cLdLhghwt1uHCHdLhIh4t2uFiHi3e4RIdLdrhUh0t3uEyHy3a4XIfLd7hChyt2uFKHK3e4Soerdrhah6t347hGh2t2uFaHa3e4Tofrdvzv56sbdLhhhxt1uHGHm3S4aYebdbh5h1t0uGWHW3W4dYfbdLhth9t1uH2HO3S4Y4c7dbhzh7t0uGuHu3W4e4d7dLhnh3t1uHeH+3S4b4f7dbh/hwd0eGCHB3V4cIeHdHhoh4d1eHiHR3R4ZIdHdXh0h8d0aIfHdnhch8d3eEKHI07AEzs8qcOTOxx0GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hd4Soendnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYfXdnhdh9d3eEOHN3Z4U4c3d3hLh7d2eFuHt3d4R/cfz+/q8O4O7+nw3g7v6/D+Dh/o8MEOH+rw4Q4f6fDRDh/r8PEOn+jwyQ6f6vDpDp/p8NkOn+vw+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+rw7Q7f6fDdDt/r8P0OP+jwww4/6vDjDj/p8NMOP+vw8w6/6PDLDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcO/+jwzw7/6vDvDv/p8N8OR47i0uOwHkfrcXiPo/c4Ro9j9jhWj2P3OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3/znLPGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI/0uEiPi/a4WI+L97hEj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/a4Uo8r97hKj6v2uNr/jmL3uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9GiPx/Z4XI/Hj+Le44geT+zxpB5P7nHQY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/jKT2e2uNpPZ7e4xk9ntnjWT2e3eM5PZ7b43k9nt/jBT1e2ONFPV7c4yU9XtrjZT1e3uMVPV7Z41U9Xt3jNT1e2+N1PV7f4w093tjjTT3e3OMtPd7a42093t7jHT3e2eNdPd7d4z093tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e4xM9PtnjUz0+3eMzPT7b43M9Pt/jCz2+2ONLPb7c4ys9vtrjaz2+3uMbPb7Z41s9vt3jOz2+2+N7Pb7f4wc9ftjjRz1+3OMnPX7a42c9ft7jFz1+2eNXPX7d4zf/j4h3Dh78CPqtf5tsshtu7GRj68TOxrZt2zjBxvbva2Nj27Zt27b2rTzvc+/9d6qmpqfrdNdnenpmEL8dxO8G8ftB/GEQfxzEnwbx50H8ZRB/HcTfBvH3QfxjEP8cxL8G8e9B/GcQ/x3EsYM4EOCQAMcJcNwAhwY4XoDjBzgswOEBThDghAFOFODEAU4S4KQBjghwsgAnD3CKAKcMcKoApw5wmgCnDXC6AKcPcIYAZwxwpgBnDnCWAEcGOGuAswU4e4BzBDhngHMFA6PnDnCeAOcNcL4A5w9wgQAXDHChABcOcJEAFw2QvQYG/tvH4gEuEeCSAS4V4NIBLhPgsgEuF+DyAa4Q4IoBrhTgygGOCnCVAFcNcLUAVw9wjQDXDHCtANceOuA6Aa4b4HoBrh/gBgFuGOBGAW4c4CYBbhrgZgFuHuAWAW4Z4FYBbh3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhzgIQEeGuBhAR4e4BEBHhngUQEeHeAxAR4boAEeF+DxAZ4Q4IkBjg7wpABPDvCUAE8N8LQATw/wjADPDPCsAM8O8JwAzw3wvADPD/CCAC8M8KIALw7wkgAHAwb+YykMMAowDjAJMA0wCzAPsAiwDLAKsA6wCbANsAuwD3BMgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4B3B3hPgPcGeF+A9wf4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8G+FSATwf4TIDPBvhcgM8H+EKALwb4UoAvB/hKgK8G+FqArwf4RoBvBvhWgG8H+E6A7wb4XoDvB/hB8P/3830U4McBfhLgpwF+FuDnAX4R4JcBfhXg1wF+E+C3AX4X4PcB/hDgjwH+FODPAf4S4K8B/hbg7wH+EeCfAf4V4N8B/hPg2BE4NsCBEIeEOE6I44Y4NMTxQhw/xGEhDg9xghAnDHGiECcOcZIQJw1xRIiThTh5iFOEOGWIU4U4dYjThDhtiNOFOH2IM4Q4Y4gzhThziLOEODLEWUOcLcTZQ5wjxDlDnCvEuUOcJ8R5Q5wvxPlDXCDEBUNcKMSFQ1wkxEVDJMTFQlw8xCVCXDLEpUJcOsRlQlw2xOVCXD7EFUJcMcSVQlw5xFEhrhLiqiGuFuLqIa4R4pohrhXi2iGuE+K6Ia4X4vohbhDihiFuFOLGIW4S4qYhbhbi5iFuEeKWIW4V4tYhbhPitiFuF+L2Ie4Q4o4h7hTiziHuEuKuIe4W4u4h7hHiniHuFeLeIe4T4r4h7hfi/iEeEOKBIR4U4sEhHhLioSED/+dsckSIR4Z4VIhHh3hMiMeGaIjHhXh8iCeEeGKIo0M8KcSTQzwlxFNDPC3E00M8I8QzQzwrxLNDPCfEc0M8L8TzQ7wgxAtDvCjEi0O8JMTBEIMQwxCjEOMQkxDTELMQ8/94G/3/X2dXIdYhNiG2IXYh9iGOCfHSEC/7XzavCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7wjxzhDvCvHuEO8J8d4Q7wvx/hAfCPHBEB8K8eEQHwnx0RAfC/HxEJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8I8cMQPwrx4xA/CfHTED8L8fMQvwjxyxC/CvHrEL8J8dsQvwvx+xB/CPHHEH8K8ecQfwnx1xB/C/H3EP8I8c8Q/wrx7xD/CfHfEMeGOBDhkAjHiXDcCIdGOF6E40c4LMLhEU4Q4YQRThThxBFOEuGkEY6IcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghHRjhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aIREuFiEi0e4RIRLRrhUhEtHuEyEy0a4XITLR7hChCtGuFKEK0c4KsJVIlw1wtUiXD3CNSJcM8K1Ilw7wnUiXDfC9SJcP8INItwwwo0i3DjCTSLcNMLNItw8wi0i3DLCrSLcOsJtItw2wu0i3D7CHSLcMcKdItw5wl0i3DXC3SLcPcI9Itwzwr0i3DvCfSLcN8L9Itw/wgMiPDDCgyI8OMJDIjw0wsMiPDzCIyI8MsKjIjw6wmMiPDZCIzwuwuMjPCHCEyMcHeFJEZ4c4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEQ5GGEQYRhhFGEeYRJhGmEWYR1hEWEZYRVhH2ETYRthF2Ec4JsJLI7wswssjvCLCKyO8KsKrI7wmwmsjvC7C6yO8IcIbI7wpwpsjvCXCWyO8LcLbI7wjwjsjvCvCuyO8J8J7I7wvwvsjfCDCByN8KMKHI3wkwkcjfCzCxyN8IsInI3wqwqcjfCbCZyN8LsLnI3whwhcjfCnClyN8JcJXI3wtwtcjfCPCNyN8K8K3I3wnwncjfC/C9yP8IMIPI/wowo8j/CTCTyP8LMLPI/wiwi8j/CrCryP8JsJvI/wuwu8j/CHCHyP8KcKfI/wlwl8j/C3C3yP8I8I/I/wrwr8j/CfCfyMcG+FAjENiHCfGcWMcGuN4MY4f47AYh8c4QYwTxjhRjBPHOEnMkEljHBHjZDFOHuMUMU4Z41QxTh3jNDFOG+N0MU4f4wwxzhjjTDHOHOMsMY6McdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGIlxsRgXj3GJGJeMcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnFUjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8S4ZYxbxbh1jNvEuG2M28W4fYw7xLhjjDvFuHOMu8S4a4y7xbh7jHvEuGeMe8W4d4z7xLhvjPvFuH+MB8R4YIwHxXhwjIfEeGiMh8V4eIxHxHhkjEfFeHSMx8R4bIzGeFyMx8d4Qownxjg6xpNiPDnGU2I8NcbTYjw9xjNiPDPGs2I8O8ZzYjw3xvNiPD/GC2K8MMaLYrw4xktiHIwxiDGMMYoxjjGJMY0xizGPsYixjLGKsY6xibGNsYuxj3FMjJfGeFmMl8d4RYxXxnhVjFfHeE2M18Z4XYzX/2fDrnhjjDfFeHOMt8R4a4y3xXh7jHfEeGeMd8V4d4z3xHhvjPfFeH+MD8T4YIwPxfhwjI/E+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4xjYxxIcEiC4yQ4boJDExwvwfETHJbg8AQnSHDCBCdKcOIEJ0lw0gRHJDhZgpMnOEWCUyY4VYJTJzhNgtMmOF2C0yc4Q4IzJjhTgjMnOEuCIxOcNcHZEpw9wTkSnDPBuRKcO8F5Epw3wfkSnD/BBRJcMMGFElw4wUUSXDRBElwswcUTXCLBJRNcKsGlE1wmwWUTXC7BgaFD/u/bqZUSXDnBUaMGXCXBVRNcLcHVE1wjwTUTXCvBtRNcJ8F1E1wvwfUT3CDBDRPcKMGNE9wkwU0T3CxhyOYJbpHglgluleDWCW6T4LYJbpfg9gnukOCOCe6U4M4J7pIM/7927Z7gHgnumeBeCe6d4D4J7pvgfgnun+AByZgJD0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03QBI9L8PgET0jwxARHJ3hSgicneEqCpyZ4WoKnJ3hGgmcmeFaCZyd4ToLnJnhegucneEGCFyZ4UYIXJ3hJgoMJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gmOSfDSBC9L8PIEr0jwygSvSvDqBK9J8NoEr0vw+gRvSPDGBG9K8OYEb0nw1gRvS/D2BO9I8M4E70rw7gTvSfDeBO9L8P4EH0jwwQQfSvDhBB9J8NEEH0vw8QSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9I8MsEv0rw6wS/SfDbBL9L8PsEf0jwxwR/SvDnBH9J8NcEf0vw9wT/SPDPBP9K8O8E/0nw3wTH/hcTKQ5JcXiK46Y4NMXxUhw/xWH/Oz5BihOmOFGKE6c4SYqTpjgixclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVIcmeKsKc6W4uwpzpHinCnOleLcKc6T4rwpzpfi/CkukOKCKS6U4sIpLpLioimS4mIpLp7iEikumeJSKS6d4jIpLpvicikun+IKKa6Y4koprpziqBRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUTfG4FI9P8YQUT0xxdIonpXhyiqekeGqKp6V4eopnpHhmimeleHaK56R4bornpXh+ihekeGGKF6V4cYqXpDiYYpBimGKUYpxikmKaYpZinmKRYplilWKdYpNim2KXYp/imBQvTfGyFC9P8YoUr0zxqhSvTvGaFK9N8boUr0/xhhRvTPGmFG9O8ZYUb03xthRvT/GOFO9M8a4U707xnhTvTfG+FO9P8YEUH0zxoRQfTvGRFB9N8bEUH0/xiRSfTPGpFJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9N8bcUf0/xjxT/TPGvFP9O8Z8U/01xbIoDGQ7JcJwMx81waIbjZTh+hsMyHJ7hBBlOmOFEGU6c4SQZTprhiAwny3DyDKfIcMoMp8pw6gznfHRgYNoMp8tw+gxnyHDGDGfKcOYMZ8lwZIazZjhbhrNnOMd/8zKcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTMkw8UyXDzDJTJcMsOlMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDURmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvhnul+H+GR6Q4YEZHpThwRkekuGhGR6W4eEZHpHhkRkeleHRGR6T4bEZmuFxGR6f4QkZnpjh6AxPyvDkDE/J8NQMT8vw9AzPyPDMDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyXAwwyDDMMMowzjDJMM0wyzDPMMiwzLDKsM6wybDNsMuwz7DMRlemuFlGV6e4RUZXpnhVRleneE1GV6b4XUZXp/hDRnemOFNGd6c4S0Z3prhbRnenuEdGd6Z4V0Z3p3hPRnem+F9Gd6f4QMZPpjhQxk+nOEjGT6a4WMZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvh2AwHchyS4zg5jpvj0BzHy3H8HIflODzHCXKcMMeJcpw4x0lynDTHETlOluPkOU6R45Q5TpXj1DlOk+O0OU6X4/Q5zpDjjDnOlOPMOc6S48gcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNkRwXy3HxHJfIcckcl8px6RyXyXHZHJfLcfkcV8hxxRxXynHlHEfluEqOq+a4Wo6r57hGjmvmuFaOa+e4To7r5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4xeD/yvkct85xmxy3zXG7HLfPcYccd8xxpxx3znGXHHfNcbccd89xjxz3zHGvHPfOcZ8c981xvxz3z/GAHA/M8aAcD87xkBwPzfGwHA/P8Ygcj8zxqByPzvGYHI/N0RyPy/H4HE/I8cQcR+d4Uo4n53hKjqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6DOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5jsnx0hwvy/HyHK/I8cocr8rx6hyvyfHaHK/L8focb8jxxhxvyvHmHG/J8dYcb8vx9hzvyPHOHO/K8e4c78nx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHB/L8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8cx+Y4UOCQAscpcNwChxY4XoHjFziswOEFTlDghAVOVODEBU5S4KQFjihwsgInL3CKAqcscKoCpy5wmgKnLXC6AqcvcIYCZyxwpgJnLnCWAkcWOGuBsxU4e4FzFDhngXMVOHeB8xQ4b4HzFTh/gQsUuGCBCxW4cIGLFLhogRS4WIGLF7hEgUsWuFSBSxe4TIHLFrhcgcsXuEKBKxa4UoErFziqwFUKXLXA1QpcvcA1ClyzwLUKXLvAdQpct8D1Cly/wA0K3LDAjQrcuMBNCty0wM0K3LzALQrcssCtCty6wG0K3LbA7QrcvsAdCtyxwJ0K3LnAXQrctcDdCty9wD0K3LPAvQrcu8B9Cty3wP0K3L/AAwo8sMCDCjy4wEMKPLTAwwo8vMAjCjyywKMKPLrAYwo8tkALPK7A4ws8ocATCxxd4EkFnlzgKQWeWuBpBZ5e4BkFnlngWQWeXeA5BZ5b4HkFnl/gBQVeWOBFBV5c4CUFDhYYFBgWGBUYF5gUmBaYFZgXWBRYFlgVWBfYFNgW2BXYFzimwEsLvKzAywu8osArC7yqwKsLvKbAawu8rsDrC7yhwBsLvKnAmwu8pcBbC7ytwNsLvKPAOwu8q8C7C7ynwHsLvK/A+wt8oMAHC3yowIcL/LjARwt8rMDHC3yiwCcLfKrApwt8psBnC3yuwOcLfKHAFwt8qcCXC3ylwFcLfK3A1wt8o8A3C3yrwLeHDgz8F3PvFvhege8X+EGBHxb40f+u/UmBnxb4WYGfF/hFgV8W+FWBXxf4TYHfFvhdgd8X+EOBPxb4U4E/F/hLgb8W+FuBvxf4R4F/FvhXgX8X+E+B/xY4tsCBEoeUOE6J45Y4tMTxShy/xGElDi9HOkGJE5Y4UYkTlzhJiZOWOKLEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+HPY/ta0ZS5ypxJlLnKXEkSXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLloiJS5W4uIlLlHikiUuVeLSJS5T4rIlLlfi8iWuUOKKJa5U4soljipxlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfl37NixHl7iESUeWeJRJR5d4jElHluiJR5X4vElnlDiiSWOLvGkEk8u8ZQSTy3xtBJPL/GMEs8s8awSzy7xnBLPLfG8Es8v8YISLyzxohIvLvGSEgdLDEoMS4xKjEtMSkxLzErMSyxKLEusSqxLbEpsS+xK7EscU+KlJV5W4uUlXlHileMNDPzH6tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SU+UOKDJT5U4sMlPlLioyU+VuLjJT5R4pMlPlXi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi6yW+UeKbJb5V4tslvlPiuyW+V+L7JX5Q4oclflTixyV+UuKnJX5W4uclflHilyV+VeLXJX5T4rclflfi9yX+UOKPJf5U4s8l/lLiryX+VuLvJf5R4p8l/lXi3yX+U+K/JY4tcaDCIRWOU+G4FQ6tcLwKx69wWIXDK5ygwgkrnKjCiSucpMJJKxxR4WQVTl7hFBVOWeFUFU5d4TQVTlvhdBUODAyM/k8Oz1jhTBXOXOEsFY6scNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+6v/V7heqcOEKF6lw0QqpcLEKF69wiQqXrHCpCpeucJkKl61wuQqXr3CFClescKUKV65wVIWrVLhqhatVuHqFa1S4ZoVrVbh2hetUuG6F61W4foUbVLhhhRtVuHGFm1S4aYWbVbh5hVtUuGWFW1W4dYXbVLhthdtVuH2FO1S4Y4U7VbhzhbtUuGuFu1W4e4V7VLhnhXtVuHeF+1S4b4X7Vbh/hQdUeGCFB1V4cIWHVHhohYdVeHiFR1R4ZIVHVXh0hcdUeGyFVnhchcdXeEKFJ1Y4usKTKjy5wlOq//cP9ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhYIVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hWMqvLTCyyq8vMIrKryywqsqvLrCayq8tsLrKry+whsqvLHCmyq8ucJbKry1wtsqvL3COyq8s8K7Kry7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wucqfL7CFyp8scKXKny5wlcqfLXC1yp8vcI3KnyzwrcqfLvCdyp8t8L3Kny/wg8q/LDCjyr8uMJPKvy0ws8q/LzCLyr8ssKvKvy6wm8q/LbC7yr8vsIfKvyxwp8q/LnCXyr8tcLfKvy9wj8q/LPCvyr8u8J/Kvy3wrH/xWaNQ2ocp8Zxaxxa43g1jl/jsBqH1zhBjRPWOFGNE9c4SY2T1jiixslqnLzGKWqcssapapy6xmlqnLbG6WqcvsYZapyxxplqnLnGWWocWeOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojVS42I1Ll7jEjUuWeNSNS5d4zI1LlvjcjUuX+MKNa5Y40o1rlzjqBpXqXHVGlercfUa16hxzRrXqnHtGtepcd0a16tx/Ro3qHHDGjeqceMaN6lx0xo3q3HzGreoccsat6px6xq3qXHbGrercfsad6hxxxp3qnHnGnepcdcad6tx9xr3qHHPGveqce8a96lx3xr3q3H/Gg+o8cAaD6rx4BoPqfHQGg+r8fAaj6jxyBqPqvHoGo+p8dgarfG4Go+v8YQaT6xxdI0n1XhyjafUeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1DhYY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jmBovrfGyGi+v8Yoar6zxqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaH6/xiRqfrPGpmtf/T4/lszU+V+PzNb5Q44s1vlTjyzW+UuOrNb5W4+s1vlHjmzW+VePbNb5T47s1vlfj+zV+UOOHNX5U48c1flLjpzV+VuPnNX5R45c1flXj1zV+U+O3NX5X4/c1/lDjjzX+VOPPNf5S4681/lbj7zX+UeOfNf5V4981/lPjvzWOrXGgwSENjtPguA0ObXC8BsdvcFiDwxucoMEJG5yowYkbnKTBSRsc0eBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNjmxw1gZna3D2BudocM4G52pw7gbnaXDeBudrcP4GF2hwwQYXanDhBhdpcNEGaXCxBhdvcIkGl2xwqQaXbnCZBpdtcLkGl29whQZXbHClBlducFSDqzS4aoOrNbh6g2s0uGaDazW4doPrNLhug+s1uH6DGzS4YYMbNbhxg5s0uGmDmzUM/4+NLRrcssGtGty6wW0a3LbB7RrcvsEdGtyxwZ0a3LnBXRrctcHdGty9wT0a3LPBvRrcu8F9Gty3wf0a3L/BAxo8sMGDGjy4wUMaPLTBwxo8vMEjGjyywaMaPLrBYxo8tkEbPK7B4xs8ocETGxzd4EkNntzgKQ2e2uBpDZ7e4BkNntngWQ2e3eA5DZ7b4HkNnt/gBQ1e2OBFDV7c4CUNDjYYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYNzimwUsbvKzByxu8osErG7yqwasbvKbBaxu8rsHrG7yhwRsbvKnBmxu8pcFbG7ytwdsbvKPBOxu8q8G7G7ynwXsbvK/B+xt8oMEHG3yowYcbfKTBRxt8rMHHG3yiwScbfKrBpxt8psFnm//SwJD/0UovNPhigy81+HKDrzT4aoOvNfh6g280+GaDbzX4doPvNPhug+81+H6DHzT4YYMfNfhxg580+GmDnzX4eYNfNPhlg181+HWD3zT4bYPfNfh9gz80+GODPzX4c4O/NPhrg781+HuDfzT4Z4N/Nfh3g/80+G+DYxscaHFIi+O0OG6LQ1scr8XxWxzW4vAWJ2hxwhYnanHiFidpcdIWR7Q4WYuTtzhFi1O2OFWLU7d4zaQ4bYvTtTh9izO0OGOLM7U4c4uztDiyxVlbnK3F2Vuco8U5W5yrxblbnKfFeVucr8X5W1ygxQVbXKjFhVtcpMVFW6TFxVpcvMUlWlyyxaVaXLrFZVpctsXlWly+xRVaXLHFlVpcucVRLa7S4qotrtbi6i2u0eKaLa7V4totw9Zpcd0W12tx/RY3aHHDFjdqceMWN2lx0xY3a3HzFrdoccsWt2px6xa3aXHbFrcbGLXjf77eocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbPKbFY1u0xeNaPL7FE1o8scXRLZ7U4sktntLiqS2e1uLpLZ7R4pktntXi2S2e0+K5LZ7X4vktXtDihS1e1OLFLV7S4mCLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12LfYtj2pFe2uJlLV7e4hUtXtniVS1e/R9bLV7b4nUtXt/iDS3e2OJNLd7c4i0t3tribS3e3uIdLd7Z4l0t3t3iPS3e2+J9Ld7f4gMtPtjiQy0+3OIjLT7a4mMtPt7iEy0+2eJTLT7d4jMtPtvicy0+3+ILLb7Y4kvt+P+TD15p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9o8cMWP2rx4xY/afHTFj9r8fMWv2jxyxa/avHrFr9p8dsWv2vx+xZ/aPHHFn9q8ecWf2nx1xZ/a/H3Fv9o8c8W/2rx7xb/afHfFse2ONDhkA7H6XDcDod2OF6H43c4rMPhHU7Q4YQdTtThxB1O0uGkHY7ocLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5Hdjhrh7N1OHuHc3Q4Z4dzdTh3h/N0OG+H83U4f4cLdLhghwt1uHCHi3S4aId0uFiHi3e4RIdLdrhUh0t3uEyHy3a4XIfLd7hChyt2uFKHK3c4qsNVOly1w9U6XL3DNTpcs8O1Oly7w3U6XLfD9Tpcv8MNOtyww4063LjDTTrctMPNOty8wy063LLDrTrcusNtOty2w+063L7DHTrcscOdOty5w1063LXD3TrcvcM9Otyzw7063LvDfTrct8P9Oty/wwM6PLDDgzo8uMNDOjy0w8M6PLzDIzo8ssOjOjy6w2M6PLZDOzyuw+M7PKHDEzsc3eFJHZ7c4SkdntrhaR2e3uEZHZ7Z4Vkdnt3hOR2e2+F5HZ7f4QUdXtjhRR1e3OElHQ52GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hc4psNLO7ysw8s7vKLDKzu8qsOrO7ymw2s7vK7D6zu8ocMbO7ypw5s7vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDfzsc2+FAj0N6HKfHcXsc2uN4PY7f47Aeh/c4QY8T9jhRjxP3OEmPk/Y4osfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6HNnjrD3O1uPsPc7R45w9ztXj3D3O0+O8Pc7X4/w9LtDjgj0u1OPCPS7S46I90uNiPS7e4xI9LtnjUj0u3eMyPS7b43I9Lt/jCj2u2ONKPa7c46geV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf3RAwP/+WzDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx3x7363H/Hg/o8cAeD+rx4B4P6fHQHg/r8fAej+jxyB6P6vHoHo/p8dge7fG4Ho/v8YQeT+xxdI8n9Xhyj6f0eGqPp/V4eo9n9Hhmj2f1eHaP5/R4bo/n9Xh+jxf0eGGPF/V4cY+X9DjYY9Bj2GPUY9xj0mPaY9Zj3mPRY9lj1WPdY9Nj22PXY9/jmB4v7fGyHi/v8Yoer+zxqh6v7vGaHq/t8boer+/xhh5v7PGmHm/u8ZYeb+3xth5v7/GOHu/s8a4e7+7xnh7v7fG+Hu/v8YEeHxwyMPCfLx7u8ZEeH+3xsR4f7/GJHp/s8aken+7xmR6f7fG5Hp/v8YUeX+zxpR5f7vGVHl/t8bUeX+/xjR7f7PGtHt/u8Z0e3+3xvR7f7/GDHj/s8aMeP+7xkx4/7fGzHj/v8Ysev+zxqx6/7vGbHr/t8bsev+/xhx5/7PGnHn/u8Zcef+3xtx5/7/GPHv/s8a8e/+7xnx7/7XFsjwNjcMgYHGcMjjsGh47B8cbg+GNw2BgcPgYnGIMTjsGJxuDEY3CSMTjpGBwxBicbw/9H1DkHcXY0a3izsW3sxsYTOxvbtm3jiW3bOjZ+sW3btu29tffLd+9fp46qut7ut6enZ6bbSQOcLMDJA5wiwCkDnCrAqQOcJsBpA5wuwOkDnCHAGQOcKcBhAQ4PcOYAZwlw1gBnC3D2AOcIcM4A5wpw7gDnCXDegN//rYTsAgEuGOBCARLgwgEuEuCiAS4W4OIBLhHgkgEuFeDSAS4T4LIBLhfg8gGuEOCIAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqAAN8OgAjwnw2ACPC/D4AE8I8MQATwrw5ABPCfDUAE8L8PQAzwjwzADPCvDsAM8J8NwAzwvw/AAvCPDCAC8K8OIALwnw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsABwHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+9S8fvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8JcGSAQ0IcLcShIY4e4hghjhniWCGOHeI4IY4b4nghjh/iBCFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCEOC3F4iDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIiEuHCIi4S4aIiLhbh4iEuEuGSIS4W4dIjLhLhsiMuFuHyIK4Q4IsQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCpEQzw6xGNCPDbE40I8PsQTQjwxxJNCPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcQgxDDEKMQ4xCTENMQsxDzEIsQyxCrEOsQmxDbELsQ+xEGIt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjPhfh8iC+E+GKIL4X4coivhPhqiK+F+HqIb4T4Zohvhfh2iO+E+G6I74X4fogfhPhhiB+F+HGIn4T4aYifhfh5iF+E+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hPhniH+F+HeI/4Q4MsQhEY4W4dAIR49wjAjHjHCsCMeOcJwIx41wvAjHj3CCCCeMcKIIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCIdFODzCmSOcJcJZI5wtwtkjnCPCOSOcK8K5I5wnwnkjnC/C+SNcIMIFI1woQiJcOMJFIlw0wsUiXDzCJSJcMsKlIlw6wmUiXDbC5SJcPsIVIhwR4YoRrhThyhGuEuGqEa4W4eoRrhHhmhGuFeHaEa4T4boRrhfh+hFuEOGGEW4U4cYRbhLhphFuFuHmEW4R4ZYRbhXh1hFuE+G2EW4X4fYR7hDhjhHuFOHOEe4S4a4R7hbh7hHuEeGeEe4V4d4R7hPhvhHuF+H+ER4Q4YERHhThwREeEuGhER4W4eERHhHhkREeFaERHh3hMREeG+FxER4f4QkRnhjhSRGeHOEpEZ4a4WkRnh7hGRGeGeFZEZ4d4TkRnhvheRGeH+EFEV4Y4UURXhzhJRFeGuFlEV4e4RURXhnhVRFeHeE1EV4b4XURXh/hDRHeGOFNEd4cYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hIMJbIrw1wtsivD3COyK8M8K7Irw7wnsivDfC+yK8P8IHInwwwocifDjCRyJ8NMLHInw8wicifDLCpyJ8OsJnInw2wucifD7CFyJ8McKXInw5wlcifDXC1yJ8PcI3InwzwrcifDvCdyJ8N8L3Inw/wg+iof/p/x3hxxF+EuGnEX4W4ecRfhHhlxF+FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8R/hXh3xH+E+HICIfEOFqMQ2McPcYxYhwzxrFiHDvGcWIcN8bxYhw/xglinDDGiWKcOMZJYpw0xslinDzGKWKcMsapYpw6xmlinDbG6WKcPsYZYpwxxpliHBbj8BhnjnGWGGeNcbYYZ49xjhjnjHGuGOeOcZ4Y541xvhhH/tv1e8EYF4qRGBeOcZEYF41xsRgXj3GJGJeMcakYl45xmRiXjXG5GJePcYUYR8S4YowrxbhyjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8Q45N9avFvHuE2M28a4XYzbx7hDjDvGuFOMO8e4S4y7xrhbjLvHuEfM8XvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjMZ4dIzHxHhsjMfFeHyMJ8R4YownxXhyjKfEeGqMp8V4eoxnxHhmjGfFeHaM58R4boznxXh+jBfEeGGMF8V4cYyXxHhpjJfFeHmMV8R4ZYxXxXh1jNfEeG2M18V4fYw3xHhjjDfFeHOMQYxhjFGMcYxJjGmMWYz5KJrEWMZYxVjH2MSMPepZF2Mf4yDGW2K8NcbbYrw9xjtivDPGu2K8O8Z7Yrw3xvtivD/GB2J8MMaHYnw4xkdifDTGx2J8PMYnYnwyxqdifDrGZ2J8NsbnYnw+xhdifDHGl2J8OcZXYnw1xtdifD3GN2J8M8a3Ynw7xndifDfG92J8P8YPYvwwxo9i/DjGT2L8NMbPYvw8xi9i/DLGr2L8OsZvYvw2xu9i/D7GH2L8McafYvw5xl9i/DXG32L8PcY/Yvwzxr9i/DvGf0bxaJRtJjhagkMTHD3BMRIcM8GxEhw7wXESHDfB8RIcP8EJEpwwwYkSnDjBSRKcNMHJEpw8wSlG/fvvJompE5wmwWkTnC7B6ROcIcEZE5wpwWEJDk9w5gRnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKkAQXTnCRBBdNcLEEF09wiQSXTHCpBJdOcJkEl01wuQSXT3CFBEckuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH3Cfw/+u1OCOye4S4K7JrhbgrsnuEeCeya4V4J7J7hPgvsmuF+C+yd4QIIHJnhQggcneEiChyZ4WIKHJ3hEgkcmeFSCJnh0gsf8i+lxCR6f4AkJnpjgSQmenOApCZ6a4GkJnp7gGQmemeBZCZ6d4DkJnpvgeQmen+AFCV6Y4EUJXpzgJQlemuBlCV6e4BUJXpngVQleneA1CV6b4HUJXp/gDQnemOBNCd6cYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gIMFbErw1wdsSvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYeS//S0fCTBRxN8LMHHE3wiwScTfCrBpxN8JsFnE3wuwecTfCHBFxN8KcGXE3wlwVcTfC3B1xN8I8E3E3wrwbcTfCfBdxN8L8H3E/wgwQ8T/CjBjxP8JMFPE/wswc8T/CLBLxP8KsGvE/wmwW8T/C7B7xP8IcEfE/wpwZ8T/CXBXxP8LcHfE/wjwT8T/CvBvxP8J8GRCQ5JcbQUh6Y4eopjpDhmimOlOHaK46Q4borjpTh+ihOkOGGKE6U4cYqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOCzF4SnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpkuLCKS6S4qIpLpbi4ikukeKSKS6V4tIpLpPisikul+LyKa6Q4ogUV0xxpRRXTnGVFFdNcbUUV09xjRTXTHGtlHHWTnGdFNdNcb0U109xgxQ3THGjFDdOcZMUN00ZMgrXzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCpFUzw6xWNSPDbF41I8PsUTUjwxxZNSPDnFU1I8NcXTUka5cs9I8cwUz0rx7BTPSfHcFM9L8fwUL0jxwhQvSvHiFC9J8dIUL0vx8hSvSPHKFK9K8eoUr0nx2hSvS/H6FG9I8cYUb0rx5hSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FAcp3pLirSneluLtKd6R4p0p3pXi3Snek+K9Kd6X4v0pPpDigyk+lOLDKT6S4qMpPpbi4yk+kf468skUn0rx6RSfSfHZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cOUcf87HnyS4qcpfpbi5yl+keKXKX6V4tcpfpPityl+l+L3Kf6Q4o8p/pTizyn+kuKvKf6W4u8p/pHinyn+leLfKf6T4sgUh2Q4WoZDMxw9wzEyHDPDsTIcO8NxMhw3w/EyHD/DCTKcMMOJMpw4w0kynDTDyTKcPMMpMpwyw6kynDrDaTKcNsPpMpw+wxkynDHDmTIcluHwDGfOcJYMZ81wtgxnz3CODOfMcK4M585wngznzXC+DOfPcIH/HgfIkAwXznCRof+5XyzDxTNcIsMlM1wqw6UzXCbDZTNcLsPlM1whwxEZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGZrh0Rkek+GxGR6X4fEZnpDhiRmelOHJGZ6S4akZnpbh6RmekeGZGZ6V4dkZnpPhuRmel+H5GV6Q4YUZXpThxRlekuGlGV6W4eUZXpHhlRleleHVGV6T4bUZXpfh9RnekOGNGd6U4ZB/I6IwwyjDOMMkwzTDLMM8wyLDMsMqwzrDJsM2wy7DPsNBhrdkeGuGt2V4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9l+HiGT2T4ZIZPZfh0hs9k+GyGz42S+T18IcMXM3wpw5czfCXDVzN8LcPXM3wjwzczfCvDtzN8J8N3M3wvw/cz/GAIfpjhRxl+nOEnGX6a4WcZfp7hFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/GY4cJXuOo+U4NMfRcxwjxzFzHCvHsXMcJ8dxcxwvx/FznCDHCXOcKMeJc5wkx0lznCzHyXOcIscpc5wqx6lznCbHaXOcLsfpc5whxxlznCnHYTkOz3HmHGfJcdYcZ8tx9hznyHHOHOfKce4c58n/fx49f44L5LhgjgvlSI4L57hIjovmuFiOi+e4RI5L5rhUjkvnuEyOy+a4XI7L57hCjiNyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8Z/RRvnzLHLfKcesct8lx2xy3y3H7HHfIccccd8px53/x3jXH3XLcPcc9hg9xzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rRHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBxPzfG0HE/P8Ywcz8zxrBzPzvGcHM/N8bwcz8/xghwvzPGiHC/O8ZIcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzjHIMcwxyjHOMckxzTHLMc+xyLHMscrHGlLn2OTY5tjl2Oc4yPGWHG/N8bYx8PYc78jxzhzvyvHuHO/J8d4c78vx/hwfyPHBHB/K8eEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL8Zpbsh+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T44jR3GqwNEKHFrg6AWOUeCYBY5V4NgFjlPguAWOV+D4BU5Q4IQFTlTgxAX+U+CkBU5W4OQFTlHglAVOVeDUBU5T4LQFTlfg9AXOUOCMBc5U4LAChxc4c4GzFDhrgbMVOHuBcxQ4Z4FzFTh3gfMUOG+B8xU4f4ELFLhggQsVSIELF7hIgYsWuFiBixe4RIFLFrhUgUsXuEyByxa4XIHLF7hCgSMKXLHAlQpcucBVCly1wNUKXL3ANQpcs8C1Cly7wHUKXLfA9Qpcv8ANCtywwI0K3LjATQrctMDNCty8wC0K3LLArQrcusBtCty2wO0K3L7AHQrcscCdCty5wF0K3LXA3QrcvcA9CtyzwL0K3LvAfQrct8D9Cty/wAMKPLDAgwo8uMBDCjy0wMMKPLzAIwo8ssCjCrTAows8psBjCzyuwOMLPKHAEws8qcCTCzylwFMLPK3A0ws8o8AzCzyrwLMLPKfAcws8r8DzC7ygwAsLvKjAiwu8pMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLDAoMC4wKjAtMCkyL/42NzQssCiwLrAqsC2yKif43d94V2Bc4KPCWAm8t8LYCby/wjgLvLPCuAu8u8J4C7y3wvgLvL/CBAh8s8KECHy7wkQIfLfCxAh8v8IkCnyzwqQKfLvCZAp8t8LkCnx+F5RB8scCXCny5wFcKfLXA1wp8vcA3CnyzwLcKfLvAdwp8t8D3Cny/wA8K/LDAjwr8uMBPCvy0wM8K/LzALwr8ssCvCvy6wG8K/LbA7wr8vsAfCvyxwJ8K/LnAXwr8tcDfCvy9wD8K/LPAvwr8+1/ejixwSImjlTi0xNFLHKPEMUscq8SxSxynxHFLHK/E8UucoMQJS5yoxIlLnKTESUucrMTJS5yixClLnKrEqUucpsRpS5yuxOlLnKHEGUucqcRhJQ4vceYSZylx1hJnK3H2Eucocc4S5ypx7hLnKXHeEucrcf4SFyhxwRIXKpESFy5xkRIXLXGxEhcvcYkSlyxxqRKXLnGZEpctcbkSly9xhRJHlLhiiSuVuHKJq5S4aomrlbh6iWuUuGaJa5W4donrlLhuieuVuH6JG5S4YYkblbhxiZuUuGmJm5W4eYlblLhliVuVuHWJ25S4bYnblbh9iTuUuGOJO5W4c4m7lLhribuVuHuJe5S4Z4l7lbh3ifuUuG+J+5W4f4kHlHhgiQeVeHCJh5R4aImHlXh4iUeUeGSJR5VoiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5d4SomnlnhaiaeXeEaJZ5Z4Volnl3hOieeWeF6J55d4QYkXlnhRiReXeEmJl5Z4WYmXl3hFiVeWeFWJV5d4TYnXlnhdideXeEOJN5Z4U4k3lxiUGJYYlRiXmJSYlpiVmJdYlFiWWJVYl9iU2JbYlfjy/Dgo8ZYSby3xthJvL/GOEu8s8a4S7y7xnhLvLfG+Eu8v8YESHyzxoRIfLvGREh8t8bESHy/xiRKfLPGpEp8u8ZkSny3xuRKfL/GFEl8s8aVRMpT4Somvlvhaia+X+EaJb5b4Volvl/hOie+W+F6J75f4QYkflvhRiR+X+EmJn5b4WYmfl/hFiV+W+FWJX5f4TYnflvhdid+X+EOJP5b4U4k/l/hLib+W+FuJv5f4R4l/lvhXiX+X+E+JI0scUuFoI8ceMuo6eoVjVDhmhWNVOHaF41Q4boXjVTh+hRNUOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOKzC4RXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVUuHCFS5S4aIVLlbh4hUuUeGSFS5V4dIVLlPhshUuV+HyFa5Q4YgKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwq1E4/5uy2LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqtMKjKzymwmMrPK7C4ys8ocITKzypwpMrPKXCUys8rcLTKzyjwjMrPKvCsys8p8JzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmysMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsKxxUeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71dj/V/dhY8q/LjCTyr8tMLPRo78z6sKv6zwqwq/rvCbCr+t8LsKv6/whwp/rPCnCn+u8JcKf63wtwp/r/CPCv+s8K8K/67wnwpHVjikxtFqHFrj6DWOUeOYNY5V49g1jlPjuDWOV+P4NU5Q44Q1TlTjxDVDJqlx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnFYjcNrnLnGWWqctcbZapy9xjlqnLPGuWqcu8Z5apy3xvlqnL/GBWpcsMaFaqTGhWtcpMZFa1ysxsVrXKLGJWtcqsala1ymxmVrXK7G5WtcocYRNa5Y40o1rlzjKjWuWuNqNa5e4xo1rlnjWjWuXeM6Na5b43o1rl/jBjVuWONGNW5c4yY1blrjZjVuXuMWNW5Z41Y1bl3jNjVuW+N2NW5f4w417ljjTjXuXOMuNe5a42417l7jHjXuWeNeNe5d4z417lvjfjXuX+MBNR5Y40E1HlzjITUeWuNhNR5e4xE1HlnjUTVa49E1HlPjsfV/YtZRuj+hxhPr/1+3PaXGU2s8rcbTazyjxjNrPKvGs2s8p2bYKLs5r8bza7ygxgtrvKjGi2u8pMZLa7ysxstrvKLGK2u8qsara7ymxmtrvK7G62u8ocYba7ypxptrDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gsc1HhLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjQ/W+FCND9f4SI2P1vhYjY/X+ESNT9b4VI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb8P/VexNf5V4981/lPjyBqHNDhag0MbHL3BMRocs8GxGhy7wXEaHLfB8Rocv8EJGpywwYkanLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGhzW4PAGZ25wlgZnbXC2BmdvcI4G52xwrgbnbnCeBudtcL4G529wgQYXbHChBmlw4QYXaXDRBhdrcPEGl2hwyQaXanDpBpdpcNkGl2tw+QZXaHBEgys2uFKDKze4SoOrNrhag6s3uEaDaza4VoNrN7hOg+s2uF6D6ze4QYMbNrhRgxs3uEmDmza4WYObN7hFg1s2uFWDWze4TYP/jBw5crsGt29whwZ3bHCnBnducJcGd21wtwZ3b3CPBvdscK8G925wnwb3bXC/Bvdv8IAGD2zwoAYPbvCQBg9t8LAGD2/wiAaPbPCoBh1lB2MO8ZgGj23wuAaPb/CEBk9s8KQGT27wlAZPbfC0Bk9v8IwGz2zwrAbPbvCcBs9t8LwGz2/wggYvbPCiBi9u8JIGL23wsgYvb8b4v7HtqgavbvCaBq9t8LoGr2/whgZvbPCm/37a/CdvGjUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYNzho8JYGb23wtgZvb/COBu9s+C8TvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHG3yswccbfKLBJxt8qsGnG3ymwWcbfK7B5xt8ocEXG3ypwZcbfKXBVxt8rcHXG3yjwTcbfKvBtxt8p8F3G3yvwfcb/KDBD5sxJx6F08cNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N+jbLDBkQ0OaXG0Foe2OHqLY7Q4ZotjtTh2i+O0OG6L47U4fosTtDhhixO1OHGLk7Q4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztTisxeEtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLdLiwi0u0uKiLS7W4uItLtHiki0u1eLSLS7T4rItLtfi8i2u0OKIFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb32f+uaDdmgxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqRVs8usVjWjy2xeNaPL7FE1o8scWTWjy5xVNaPLXF01o8vcUzWjyzxbNaPLvFc1o8t8XzWjy/xQtavLDFi1q8uMVLWry0xctavLzFK1q8ssWrWry6xWtavLbF61q8vsUbWryxxZtavLnFoMWwxajFuMWkxbTFrMW8xaLFssWqxbrFpsW2xa7FvsVBi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1+HiLT7T4ZItPtfh0i8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWL37T4bYvftfh9iz+0+GOLP7X4c4u/tPhri7+1+HuLf7T4Z4t/tfh3i/+0OHKUDXc4WodDOxy9wzE6HLPDsToce5QX7nDcDsfrcPwOJ+hwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pwWIfDO5y5w1k6nLXD2TqcvcM5Opyzw7k6nLvDeTqct8P5Opy/wwU6XLDDhTqkw4U7XKTDRTtcrMPFO1yiwyU7XKrDpTtcpsNlO1yuw+U7XKHDER2u2OFKHa7c4Sodrtrhah2u3uEaHa7Z4Vodrt3hOh2u2+F6Ha7f4QYdbtjhRh1u3OEmHW7a4WYdbt7hFh1u2eFWHW7d4TYdbtvhdh1u3+EOHe7Y4U4d7tzhLh3u2uFuHe7e4R4d7tnhXh3u3eE+He7b4X4d7t/hAR0e2OFBHR7c4SEdHtrhYR0e3uERHR7Z4VEd2uHRHR7T4bEdHtfh8R2e0OGJHZ7U4ckdntLhqR2e1uHpHZ7R4ZkdntXh2R2e0+G5HZ7X4fkdXtDhhR1e1OHFHV7S4aUdXtbh5R1e0eGVHV7V4dUdXtPhtR1e1+H1Hd7Q4Y0d3tThzR0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh32HQ46vKXDWzu8rcPbO7yjwzs7vKvDuzu8p8N7O7yvw/s7fKDDBzt8qMOHO3ykw0c7fKzDxzt8osMnO3yqw6c7fKbDZzt8rsPnO3yhwxc7fKnDlzt8pcNXO3ytw9c7fKPDNzt8q8O3O3ynw3c7fK/D9zv8oMMPO/yow487/KTDTzv8rMPPO/yiwy87/KrDrzv8psNvO/yuw+87/KHDHzv8qcOfO/ylw187/K3D3zv8o8M/O/yrw787/KfDkR0O6XG0Hof2OHqPY/Q4Zo9j9Th2j+P0OG6P4/U4fo8T9DhhjxP1OHGPk/Q4aY+T9Th5j1P0OGWPU/U4dY/T9Dhtj9P1OH2PM/Q4Y48z9Tisx+E9ztzjLD3O2uNsPc7e4xw9ztnjXD3O3eM8Pc7b43w9zt/jAj0u2ONCPdLjwj0u0uOiPS7W4+I9LtHjkj0u1ePSPS7T47I9Ltfj8j2u0OOIHlfscaUeV+5xlR5X7XG1HlfvcY0e1+xxrR7X7nGdHtftcb0e1+9xgx437HGjHjfucZMeN+1xsx4373GLHrfsOWEUzlv3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe47AvXrcu8d9ety3x/163L/HA3o8sMeDejy4x0N6PLTHw3o8vMcjejyyx6N6tMejezymx2N7PK7H43s8occTezypx5N7PKXHU3s8rcfTezyjxzN7PKvHs3s8p8dzezyvx/N7vKDHC3u8qMeLe7ykx0t7vKzHy3u8oscre7yqx6t7vKbHa3u8rsfre7yhxxt7vKnHm3sMegx7jHqMe0x6THvMesx7LHose6x6rHtsemx77Hrsexz0eEuPt/Z4W4+393hHj3f2eFePd/csyJAh3tvjfT3e3+MDPT7Y40M9PtzjIz0+2uNjPT7e4xM9Pvnf8qg9PtPjsz0+1+Pz/dD/m+O81OPLPb7S46v9H+lrPb7e4xs9vtnjWz2+3eM7Pb7b43s9vt/jBz1+2ONHPX7c4yc9ftrjZz1+3uMXPX7Z41c9ft3jNz1+2+N3PX7f4w89/tjjTz3+3OMvPf7a4289/t7jHz3+2eNfPf7d4z89juxxyABHG+DQAY4+wDEGOOYAxxrg2AMcZ4DjDnC8AY4/wAkGOOEAJxrgxAOcZICTDnCyAU4+wCkGOOUApxrg1AOcZoDTDnC6AU4/wBkGOOMAZxrgsAEOH+DMA5xlgLMOcLYBzj7AOQY45wDnGuDcA5xngPMO/n9/2AIDXHCACw2QAS48wEUGuOgAFxvg4gNcYoBLDnCpAS49wGUGuOwAlxvg8gNcYYAjBrjiAFca4MoDXGWAqw5wtQGuPsA1BrjmANca4NoDXGeA6w5wvQGuP8ANBrjhADca4MYD3GSA/0PUO/iBdWzvu0maNKlt23hq27ZtM+VTpLZS23abbaO229S2kTK5n/7OOff7B+w9S+9grXfWbB3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhzgIQEeGuBhAR4e4BEBHhng8ACPCvDoAI8J8NgAjwvw+AAN8IQATwzwpABPDnBEgKcEeGqApwV4eoBnBHhmgGcFeHaA5wR4boDnBXh+gBcEeGGAFwV4cYCXBDgywEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwMcFWAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2Af4GMBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwGODvDtAN8J8N0A3wvw/QA/CPDDAD8K8OMAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwtwTIC/B/hHgH8G+FeAfwf4T4BjAxz3L55CHBjioBDHC3FwiENCHD/EoSEOC3GCECcMcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDHGmEGcOcZYQZw1xthBnD3GOEOcMca4Q5w5xnhDnDXG+EOcPcYEQFwxxoRAXDnGREBcNcbEQFw+REJcIcckQlwpx6YH/JQqGuFyIy4e4QogrhrhSiCuHuEqIq4a4Woirh7hGiGuGuFaIa4e4TojrhrheiOuHuEGIG4a4UYgbh7hJiJuGuFmIm4e4RYhbhrhViFuHuE2I24a4XYjbh7hDiDuGuFOIO4e4S4i7hrhbiLuHuEeIe4a4V4h7h7hPiPuGuF+I+4d4QIgHhnhQiAeHeEiIh44cOsfw/+p5RIhHhjg8xKNCPDrEY0I8NsTjQjw+REM8IcQTQzwpxJNDHBHiKSGeGuJpIZ4e4hkhnhniWSGeHeI5IZ4b4nkhnh/iBSFeGOJFIV4c4iUhjgzx0hAvC/Hycf+R6coQrwrx6hCvCfHaEK8L8foQbwjxxhBvCvHmEG8J8dYQbwvx9hDvCPHOEO8K8e4Q7wnx3hDvC/H+EB8I8cEQHwrx4RAfCfHREEeFGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2If4WIiPh/hEiE+G+FSIT4f4TIjPhvhciM+H+EKIL4b4Uogvh/hKiK+G+FqIr4f4RohvhvhWiKNDfDvEd0J8N8T3Qnw/xA9C/PC/GPs4xE9C/DTEz0L8PMQvQvwyxK9C/DrEb0L8NsTvQvw+xB9C/DHEn0L8OcRfQvw1xN9CHBPi7yH+EeKfIf4V4t8h/hPi2BDHhTggwoERDopwvAgHRzgkwvEjHBrhsAgniHDCCCeKcOIIJ4lw0ggni3DyCKeIcMoIp4pw6giniXDaCKeLcPoIZ4hwxghninDmCGeJcNYIZ4tw9gjniHDOCOeKcO4I54lw3gjni3D+CBeIcMEIF4pw4QgXiXDRCBeLcPEIiXCJCJeMcKkIl45wmQiXjXC5CJePcIUIV4xwpQhXjnCVCFeNcLUIV49wjQjXjHCtCNeOcJ0I141wvQjXj3CDCDeMcKMIN45wkwg3jXCzCDcfMMwtItzyf/vDCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICIdHeFSER0d4TITHRnhchMdHaIQnRHhihCf9a/8BOCLCUyI8NcLTIjw9wjMiPDPCsyI8O8JzIjw3wvMiPD/CCyK8MMKLIrw4wksiHBnhpRFeFuHlEV4R4ZURXhXh1RFeE+G1EV4X4fUR3hDhjRHeFOHNEd4S4a0R3hbh7RHeEeGdEd4V4d0R3hPhvRHeF+H9ET4Q4YMRPhThwxE+EuGjEY6KMIgwjDCKMI4wiTCNMIswj7CIsIywirCOsImwjbCLsI/wsQgfj/CJCJ+M8KkIn47wmQifjfC5CJ+P8IUIX4zwpQhfjvCVCF+N8LUIX4/wjQjfjPCtCEdH+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0T4ZYRfRfh1hN9E/3dH6PsIf4jwxwh/ivDnCH+J8NcIf4twTIS/R/hHhH9G+FeEf0f4T4RjIxwX4YAYB8Y4KMbxYhwc45AYx49xaIzDYpwgxgljnCjGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcYZY5wpxpljnCXGWWOcLcbZY5wjxjljnCvGuWOcJ8Z5Y5wvxvljXCDGBWNcKMaFY1wkxkVjXCzGxWMkxiViXDLGpWJcOsZlYlw2xuViXD7GFWJcMcaVYlw5xlViXDXG1WJcPcY1YlwzxrViXDvGdWJcN8b1Yv5H23HDGDeKceMYN4lx0xg3i3HzGLeIccsYt4px639t99+Ptotx+xh3iHHHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGIfHeFSMR8d4TIzHxnhcjMfHaIwnxHhijCfFeHKMI2I8JcZTYzwtxtNjPCPGM2M8K8azYzwnxnNjPC/G82O8IMYLY7woxotjvCTGkTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a46gYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xgfi/HxmIH/LUf6VIxPx/hMjM/G+Nz/5vkYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGEfH+HaM78T4bozvxfh+POT/zxt8FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W45gYf4/xjxj/jPGvGP+O8Z8Yx8Y4LsYBCQ5McFCC4yU4OMEhCY6f4NAEhyU4QYITJjhRghMnOEmCkyY4WYKTJzhFglMmOFWCUyc4TYLTJjhdgtMnOEOCMyY4U4IzJzhLgrMmOFuCsyc4R4JzJjhXgnMnOE+C8yY4X4LzJ7hAggsmuFCCCye4SIKLJrhYgosnSIJLJLhkgksluHSCyyS4bILLJbh8giskuGKCKyW4coKrJLhqgqsluHqCayS4ZoJrJbh2guskuG6C6yW4foIbJLhhghsluHGCmyS4aYKbJbh5glskuGWCWyW4dYLbJLhtgtsluH2COyS4Y4I7JbhzMt7/8/muCe6W4O4J7pH8p5f8XgnuneA+Ce6b4H4J7p/gAQkemOBBCR6c4CEJHprgYQkenuARCR6Z4PAEj0rw6ASPSfDYBI9L8PgETfCEBE9M8KQET05wRIKnJHhqgqcleHqCZyR4ZoJnJXh2guckeG6C5yV4foIXJHhhghcleHGClyQ4MsFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvOV/nRASvD3BOxK8M8G7Erw7wXsSvDfB+xK8P8EHEnwwwYcSfDjBRxJ8NMFRCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJPpbg4wk+keCTCT6V4NMJPpPgswk+l+DzCb6Q4IsJvpTgywm+kuCrCb6W4OsJvpHgmwm+leDoBN9O8J0E303wvQTfT/CDBD9M8KMEP07wkwQ/TfCzBD9P8IsEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwTHJPh7gn8k+GeCfyX4d4L/JDg2wXEJDkhxYIqDUhwvxcEpDklx/BSHpjgsxQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNWXIv2PPnuIcKc6Z4lwpzp3iPCnOm+J8Kc6f4gIpLpjiQikunOIiKS6a4mIpLp4iKS6R4pIpLpXi0ikuk+KyKS6X4vIprpDiiimulOLKKa6S4qoprpbi6imukeKaKa6V4toprpPiuimul+L6KW6Q4oYpbpTixilukuKmKW6W4uYpbpHililuleLWKW6T4rYpbpfi9inukI47eccUd0px5xR3SXHXFHdLcfcU90hxzxT3SnHvFPdJcd8U90tx/xQPSPHAFA9K8eAUD0nx0BQPS/HwFI9I8cgUh6d4VIpHp3hMisemeFyKx6doiiekeGKKJ6V4coojUjwlxVNTPC3F01M8I8UzUzwrxbNTPCfFc1M8L8XzU7wgxQtTvCjFi1O8JMWRKV6a4mUpXp7iFSlemeJVKV6d4jUpXpvidSlen+INKd6Y4k0p3pziLSnemuJtKd6e4h0p3pniXSneneI9Kd6b4n0p3p/iAyk+mOJDKT6c4iMpPpriqBSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FB9L8fEUn0jxyRSfSvHpFJ9J8dkUn0vx+RRfSPHFFF9K8eUUX0nx1RRfS/H1FN9I8c0U30pxdIpvp/hOiu+m+F6K76f4QYofpvhRih+n+EmKn6b4WYqfp/hFil+m+FWKX6f4TYrfpvhdit+n+EOKP6b4U4o/p/hLir+m+FuKY1L8PcU/Uvwzxb9S/DvFf1Icm+K4FAdkODDDQRmOl+HgDIdkOH6GQzMcluEEGU6Y4UQZTpzhJBlOmuFkGU6e4RQZTpnhVBlOneE0GU6b4XQZTp/hDBnOmOFMGc6c4SwZzprhbBnOnuEcGc6Z4VwZzp3hPBnOm+F8Gc6f4QIZLpjhQhkunOEiGS6a4WIZLp4hg3CJDJfMcKkMl85wmQyXzXC5DJfPcIUMV8xwpQxXznCVDFfNcLUMV89wjQzXzHCtDNfOcJ0M181wvQzXz3CDDDfMcKMMN85wkww3zXCzDDfPcIsMt8xwqwy3znCbDLfNcLsMt89whwx3zHCnDHfOcJcMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzHB4hkdleHSGx2R4bIbHZXh8hmZ4QoYnZnhShidnOCLDUzI8NcPTMjw9wzMyPDPDszI8O8NzMjw3w/MyPD/DCzK8MMOLMrw4w0syHJnhpRleluHlGV6R4ZUZXpXh1Rlek+G1GV6X4fUZ3pDhjRnelOHNGd6S4a0Z3pbh7RnekeGdGd6V4d0Z3pPhvRnel+H9GT6Q4YMZPpThwxk+kuGjGY7KMMgwzDDKMM4wyTDNMMswz7DIsMywyrDOsMmwzbDLsM/wsQwfz/CJDJ/M8KkMn87wmQyfzfC5DJ/P8IUMX8zwpQxfzvCVDF/N8LUMX8/wjQzfzPCtDEdn+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYZfZfh1ht9k+G2G32X4fYY/ZPhjhj9l+HOGv2T4a4a/ZTgmw98z/CPDPzP8K8O/M/wnw7EZjstwQI4DcxyU43g5Ds5xSI7j5zg0x2E5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOZLjEjkumeNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40H5oAEH53hIjofmeFiOh+d4RI5H5jg8x6NyPDrHY3I8NsfjBgwe8K+fzfGEHE/M8aQcT85xRI6n5HhqjqfleHqOZ+R4Zo5n5Xh2jufkeG6O5+V4fo4X5HhhjhfleHGOl+Q4MsdLc7wsx8tzvCLHK3O8Kserc7wmx2tzvC7H63O8Iccbc7wpx5tzvCXHW3O8Lcfbc7wjxztzvCvHu3O8J8d7c7wvx/tzfCDHB3N8KMeHc3wkx0dzHJVjkGOYY5RjnGOSY5pjlmOeY5FjmWOVY51jk2ObY5djn+NjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5js7x7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/LcUyOv+f4R45/5vhXjn/n+E+OY3Mcl+OAAgcWOKjA8QocXOCQAscvcGiBwwqcoMAJC5yowIkLnKTASQucrMDJC5yiwCkLnKrAqQucpsBpC5yuwOkLnKHAGQucqcCZC5ylwFkLnK3A2Quco8A5C5yrwLkLnKfAeQucr8D5C1ygwAULXKjAhQtcpMBFC1yswMULpMAlClyywKUKXLrAZQpctsDlCly+wBUKXLHAlQpcucBVCly1wNUKXL3ANYr/46mvXeA6Ba5b4HoFrl/gBgVuWOBGBW5c4CYFblrgZgVuXuAWBW5Z4FYFbl3gNgVuW+B2BW5f4A4F7ljgTgXuXOAuBe5a4G4F7l7gHgXuWeBeBe5d4D4F7lvgfgXuXzBm3LhxHljgQQUeXOAhBR5a4GEFHl7gEQUeWeDwAo8q8OgCjynw2AKPK/D4Ai3whAJPLPCkAk8ucESBpxR4aoGnFXh6gWcUeGaBZxV4doHnFHhugecVeH6BFxR4YYEXFXhxgZcUOLLASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHCxxVYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF/gYwU+XuATBT5Z4FMFPl3gMwU+W+BzBT5f4AsFvljgSwW+XOArBb5a4GsFvl7gGwW+WeBbBY4u8O0C3ynw3QLfK/D9Aj8o8MMCPyrw4wI/KfDTAj8r8PMCvyjwywK/KvDrAr8p8NsCvyvw+wJ/KPDHAn8q8OcCfynw1wJ/K3BMgb8X+EeBfxb4V4F/F/hPgWMLHFfggBIHljioxPFKHFzikBLHL3FoicNKnKDECUucqMSJS5ykxElLnKzEyUucosQpS5yqxKlLnKbEaUucrsTpS5yhxBlLnKnEmUucpcRZS5ytxNlLnKPEOUucq8S5S5ynxHlLnK/E+UtcoMQFS1yoxIVLXKTERUtcrMTFS6TEJUpcssSlSly6xGVKXLbE5UpcvsQVSlyxxJVKXLnEVUpctcTVSly9xDVKXLPEtUpcu8R1Sly3xPVKXL/EDUrcsMSNSty4xE1K3LTEzUrcvMQtStyyxK1K3LrEbUrctsTtSty+xB1K3LHEnUrcucRdSty1xN1K3L3EPUrcs8S9Sty7xH1K3LfE/Urcv8QDSjywxINKPLjEQ0o8tMTDSjy8xCNKPLLE4SUeVeLRJR5T4rElHlfi8SVa4gklnljiSSWeXOKIEk8p8dQSTyvx9BLPKPHMEs8q8ewSzynx3BLPK/H8Ei8o8cISLyrx4hIvKXFkiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4l3l3hPifeWeF+J95f4QIkPlvhQiQ+X+EiJj5Y4qsSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xMdKfLzEJ0p8ssSnSny6HDD4f+vDcyU+X+ILJb5Y4kslvlziKyW+WuJrJb5e4hslvlniWyWOLvHtEt8p8d0S3yvx/RI/KPHDEj8q8eMSPynx0xI/K/HzEr8o8csSvyrx6xK/KfHbEr8r8fsSfyjxxxJ/KvHnEn8p8dcSfytxTIm/l/hHiX+W+FeJf5f4T4ljSxxX4oAKB1Y4qMLxKhxc4ZAKx69waIXDKpygwgkrnKjCiSucpMJJK5yswskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxSukwiUqXLLCpSpcusJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywuEVHlXh0RUeU+GxFR5X4fEVWuEJFZ5Y4UkVnlzhiApPqfDUCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6lwZIWXVnhZhZdXeEWFV1Z4VYVXV3hNhddW/K8s6g0V3ljhTRXeXOEtFd5a4W0V3l7hHRXeWeFdFd5d4T0V3lvhfRXeX+EDFT5Y4UMVPlzhIxU+WuGoCoMKwwqjCuMKkwrTCrMK8wqLCssKqwrrCpsK2wq7CvsKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqnB0hW9X+M6/eBsxYMB7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFY6p8PcK/6jwzwr/qvDvCv+pcGyF4yocUOPAGgfVOF6Ng2scUuP4NQ6tcViNE9Q4YY0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jdS4RI1L1rhUjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rjRv/YYgJvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHA9dMAhNR5a42E1Hl7jETUeWePwGo+q8egaj6nx2BqPq/H4Gq3xhBpPrPGkGk+ucUSNp9R4ao2n1Xh6jWfUeGaNZ9V4do3n1HhujefVeH6NF9R4YY0X1XhxjZfUOLLGS2u8rMbLa7yixitrvKrGq2u8psZra7yuxutrvKHGG2u8qcaba7ylxltrvK3G22u8o8Y7a7yrxrtrvKfGe2u8r8b7a3ygxgdrfKjGh2t8pMZHaxxVY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jYzU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNY6u8e0a36nx3Rrfq/H9Gj+o8cMaP6rx4xo/qfHTGj+r8fMav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q3FMjb/X+EeNf9b4V41/1/hPjWNrHFfjgAYHNjiowfEaHNzgkAbHb3Bog8ManKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG6TBJRpcssGlGly6wWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLB4Q0e1eDRDR7T4LENHtfg8Q36X31PbPCkBk9ucESDpzR4aoOnNXh6g2c0eGaDZzV4doPnNHhug+c1eH6DFzR4YYMXNXhxg5c0OLLBSxu8rMHLG7yiwSsbvKrBqxu8psFrG7yuwesbvKHBGxu8qcGbG7ylwVsbvK3B2xu8o8E7G7yrwbsbvKfBexu8r8H7G3ygwQcbfKjBhxt8pMFHGxzVYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gYw0+3uATDT7Z4FMNPt3gMw0+2+BzDT7f4AsNvtjgSw2+3OArDb7a4GsNvt7gGw2+2eBbDY5u8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2hG+2WDXzX4dYPfNPhtg981+H2DPzT4Y4M/Nfhzg780+GuDvzU4psHfG/yjwT8b/KvBvxv8p8GxDY5rcECLA1sc1OJ4LQ5ucUiL47c4tMVhLU7Q4oQtTtTixC1O0uKkLU7W4uQtTtEO+3/noqlanLrFaVqctsXpWpy+xRlanLHFmVqcucVZWpy1xdlanL3FOVqcs8W5Wpy7xXlanLfF+Vqcv8UFWlywxYVaXLjFRVpctMXFWly8RVpcosUlW1yqxaVbXKbFZVtcrsXlW1yhxRVbXKnFlVtcpcVVW1ytxdVbXKPFNVtcq8W1W1ynxXVbXK/F9VvcoMUNW9yoxY1b3KTFTVvcrMXNW9yixS1b3KrFrVvcpsVtW9yuxe1b3KHFHVvcqcWdW9ylxV1b3K3F3Vvco8U9W9yrxb1b3KfFfVvcr8X9WzygxQNbPKjFg1s8pMVDWzysxcNbPKLFI1sc3uJRLR7d4jEtHtvicS0e36ItntDiiS2e1OLJLY5o8ZQWT23xtBZPb/GMFs9s8awWz27xnBbPbfG8Fs9v8YIWL2zxopa50hYvaXFki5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLd7Z4V4t3t3hPi/e2eF+L97f4QIsPtvhQiw+3+EiLj7Y4qsWgxXB8jFqMW0xa/FfOrMW8xaLFssWqxbrFpsW2xa7FvsXHWny8xSdafLLFp1p8usVnWny2xedafL7FF1p8scWXWny5xVdafLXF11p8vcU3WnyzxbdaHN3i2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKv/8bXgAEDxrT4e4t/tPhni3+1+HeL/7Q4tsVxLQ7ocGCHgzocr8PBHQ7pcPwOh3Y4bNy4/zy31eFEHU7c4SQdTtrhZB1O3uEUHU7Z4VQdTt3hNB1O2+F0HU7f4QwdztjhTB3O3OEsHc7a4Wwdzt7hHB3O2eFcHc7d4TwdztvhfB3O3+ECHS7Y4UIdLtzhIh0u2uFiHS7eIR0u0eGSHS7V4dIdLtPhsh0u1+HyHa7Q4YodrtThyh2u0uGqHa7W4eodrtHhmh2u1eHaHa7T4bodrtfh+h1u0OGGHW7U4cYdbtLhph1u1uHmHW7R4ZYdbtXh1h1u0+G2HW7X4fYd7tDhjh1jd+pw5w536XDXDnfrcPcO9+hwzw736nDvDvfpcN8O9+tw/w4P6PDADg/q8OAOD+nw0A4P6/DwDo/o8MgOh3d4VIdHd3hMh8d2eFyHx3dohyd0eGKHJ3V4cocjOjylw1M7PK3D0zs8o8MzOzyrw7M7PKfDczs8r8PzO7ygwws7vKjDizu8pMORHV7aMdu/cXJ5h1d0eGWHV3V4dYfXdHhth9d1eH2HN3R4Y4c3dXhzh7f8N95u6/D2Du/o8M4O7+rw7g7v6fDeDu/r8P4OH+jwwQ4f6vDhDh/p8NEOR3UYdBh2GHUYd5h0mHaYdZh3WHRYdlh1WHfYdNh22HXYd/hYh493+ESHT3b4VIdPd/jMvzj5bwLj+Q5f6PDFDl/q8OUOX+nw1Q5f6/D1Dt/o8M0O3+pwdIdvd/hOh+92+F6H73f4QYcfdvhRhx93+EmHn3b4WYefd/hFh192+FWHX3f4TYffdvhdh993+EOHP3b4U4c/d/hLh792+FuHYzr8vcM/Ovyzw786/LvDfzoc2+G4Dgf0OLDHQT2O1+PgHof0OH6PQ3sc1uMEPU7Y40Q9TtzjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0/X/ypNP1OH2PM/Q4Y48z9Thzj7P0OGuPs/U4e49z9Dhnj3P1OHeP8/Q4b4/z9Th/jwv0uGCPC/W4cI+L9Lhoj4v1uHiP9LhEj0v2uFSPS/e4TI/L9rhcj8v3uEKPK/6r23/9t0qPq/a4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4Uc//fuGmPW7W4+Y9btHjlj1u1ePWPW7T47Y9btfj9j3u0OOOPe7U48497tLjrj3u1uPuPe7R45497tXj3j3u0+O+Pe7X4/49HtDjgT0e1OPBPR7S46E9Htbj4T0e0eORPQ7v8agej+7xmB6P7fG4Ho/v0R5P6PHEHk/q8eQeR/R4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPI3u8tMfLery8xyt6vLLHq3q8usdrery2x+t6vL7HG3q8scebery5x1t6vLXH23q8vcc7eryzx7t6vLvHe3q8t8f7ery/xwd6fLDHh3p8uMdHeny0x1E9/n8BAAD//6ySuqI=") (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 559.546946ms ago: executing program 0 (id=861): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r1, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 411.443707ms ago: executing program 4 (id=862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept$packet(r1, 0x0, 0x0) (fail_nth: 1) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 0s ago: executing program 0 (id=863): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r2}, 0x20) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 271.305029][ T6777] [ 271.566713][ T6777] [ 271.566713][ T6777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.566713][ T6777] [ 271.634709][ T6780] loop3: detected capacity change from 0 to 32768 [ 271.809805][ T6772] loop2: detected capacity change from 0 to 32768 [ 271.824094][ T6777] [ 271.824094][ T6777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.824094][ T6777] [ 271.848737][ T6780] [ 271.848737][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.848737][ T6780] [ 271.868574][ T6780] [ 271.868574][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.868574][ T6780] [ 271.877540][ T6777] [ 271.877540][ T6777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.877540][ T6777] [ 271.879624][ T6780] [ 271.879624][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.879624][ T6780] [ 271.900042][ T6780] [ 271.900042][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.900042][ T6780] [ 271.910556][ T6780] [ 271.910556][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.910556][ T6780] [ 271.923403][ T106] [ 271.923403][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.923403][ T106] [ 271.976050][ T4534] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.996435][ T107] [ 271.996435][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 271.996435][ T107] [ 272.135204][ T6780] [ 272.135204][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.135204][ T6780] [ 272.145760][ T6780] [ 272.145760][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.145760][ T6780] [ 272.156313][ T6780] [ 272.156313][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.156313][ T6780] [ 272.166844][ T6780] [ 272.166844][ T6780] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.166844][ T6780] [ 272.183452][ T107] [ 272.183452][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.183452][ T107] [ 272.234105][ T4266] [ 272.234105][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.234105][ T4266] [ 272.601433][ T4266] [ 272.601433][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 272.601433][ T4266] [ 273.537182][ T4277] [ 273.537182][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.537182][ T4277] [ 273.617596][ T4277] [ 273.617596][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.617596][ T4277] [ 273.842672][ T6794] loop0: detected capacity change from 0 to 32768 [ 273.859583][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 273.868720][ T6789] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 273.886782][ T6794] [ 273.886782][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.886782][ T6794] [ 273.902708][ T6794] [ 273.902708][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.902708][ T6794] [ 273.913249][ T6794] [ 273.913249][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.913249][ T6794] [ 273.924254][ T6794] [ 273.924254][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.924254][ T6794] [ 273.934752][ T6794] [ 273.934752][ T6794] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.934752][ T6794] [ 273.946052][ T6794] FAULT_INJECTION: forcing a failure. [ 273.946052][ T6794] name failslab, interval 1, probability 0, space 0, times 0 [ 273.958884][ T6794] CPU: 1 PID: 6794 Comm: syz.0.609 Not tainted syzkaller #0 [ 273.961342][ T107] [ 273.961342][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 273.961342][ T107] [ 273.966335][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 273.986826][ T6794] Call Trace: [ 273.990117][ T6794] [ 273.993053][ T6794] dump_stack_lvl+0x168/0x22e [ 273.997744][ T6794] ? show_regs_print_info+0x12/0x12 [ 274.002967][ T6794] ? load_image+0x3b0/0x3b0 [ 274.007497][ T6794] ? __might_sleep+0xd0/0xd0 [ 274.012104][ T6794] ? __lock_acquire+0x7c50/0x7c50 [ 274.017200][ T6794] should_fail_ex+0x399/0x4d0 [ 274.021945][ T6794] should_failslab+0x5/0x20 [ 274.026469][ T6794] slab_pre_alloc_hook+0x59/0x310 [ 274.031489][ T6794] ? file_end_write+0x156/0x250 [ 274.036333][ T6794] kmem_cache_alloc+0x56/0x2f0 [ 274.041090][ T6794] ? getname_flags+0xb7/0x500 [ 274.045768][ T6794] getname_flags+0xb7/0x500 [ 274.050269][ T6794] do_sys_openat2+0xcf/0x490 [ 274.054857][ T6794] ? do_sys_open+0xe0/0xe0 [ 274.059269][ T6794] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 274.065242][ T6794] ? lock_chain_count+0x20/0x20 [ 274.070098][ T6794] __x64_sys_openat+0x135/0x160 [ 274.074957][ T6794] do_syscall_64+0x4c/0xa0 [ 274.079365][ T6794] ? clear_bhb_loop+0x60/0xb0 [ 274.084031][ T6794] ? clear_bhb_loop+0x60/0xb0 [ 274.088698][ T6794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 274.094582][ T6794] RIP: 0033:0x7fb3d2d8f6c9 [ 274.098992][ T6794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.118607][ T6794] RSP: 002b:00007fb3d3bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.127029][ T6794] RAX: ffffffffffffffda RBX: 00007fb3d2fe5fa0 RCX: 00007fb3d2d8f6c9 [ 274.135003][ T6794] RDX: 0000000000143042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 274.142974][ T6794] RBP: 00007fb3d3bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 274.150937][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.158903][ T6794] R13: 00007fb3d2fe6038 R14: 00007fb3d2fe5fa0 R15: 00007ffea424b7a8 [ 274.166877][ T6794] [ 274.169965][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.227287][ T6801] [ 274.227287][ T6801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.227287][ T6801] [ 274.320946][ T6801] [ 274.320946][ T6801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.320946][ T6801] [ 274.386843][ T6801] [ 274.386843][ T6801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.386843][ T6801] [ 274.570778][ T6801] [ 274.570778][ T6801] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.570778][ T6801] [ 274.609295][ T107] [ 274.609295][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.609295][ T107] [ 274.644217][ T4266] [ 274.644217][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.644217][ T4266] [ 274.673972][ T4266] [ 274.673972][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.673972][ T4266] [ 276.415220][ T6795] loop2: detected capacity change from 0 to 32768 [ 276.462736][ T6795] [ 276.462736][ T6795] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.462736][ T6795] [ 276.516116][ T6793] netlink: 36 bytes leftover after parsing attributes in process `syz.2.610'. [ 276.526185][ T6793] [ 276.526185][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.526185][ T6793] [ 276.536737][ T6793] [ 276.536737][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.536737][ T6793] [ 276.547247][ T6793] [ 276.547247][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.547247][ T6793] [ 276.557811][ T6793] [ 276.557811][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.557811][ T6793] [ 276.569861][ T107] [ 276.569861][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 276.569861][ T107] [ 276.572156][ T6830] FAULT_INJECTION: forcing a failure. [ 276.572156][ T6830] name failslab, interval 1, probability 0, space 0, times 0 [ 276.947643][ T6793] non-latin1 character 0x3ff found in JFS file name [ 276.954667][ T6793] mount with iocharset=utf8 to access [ 276.963342][ T6830] CPU: 0 PID: 6830 Comm: syz.3.619 Not tainted syzkaller #0 [ 276.970654][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 276.980718][ T6830] Call Trace: [ 276.983999][ T6830] [ 276.986939][ T6830] dump_stack_lvl+0x168/0x22e [ 276.991639][ T6830] ? show_regs_print_info+0x12/0x12 [ 276.996845][ T6830] ? load_image+0x3b0/0x3b0 [ 277.001362][ T6830] ? __might_sleep+0xd0/0xd0 [ 277.005962][ T6830] ? __lock_acquire+0x7c50/0x7c50 [ 277.010995][ T6830] should_fail_ex+0x399/0x4d0 [ 277.015683][ T6830] should_failslab+0x5/0x20 [ 277.020195][ T6830] slab_pre_alloc_hook+0x59/0x310 [ 277.025230][ T6830] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 277.030958][ T6830] __kmem_cache_alloc_node+0x4f/0x260 [ 277.036341][ T6830] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 277.042071][ T6830] __kmalloc+0xa0/0x240 [ 277.046243][ T6830] tomoyo_realpath_from_path+0xdf/0x5d0 [ 277.051811][ T6830] tomoyo_path_number_perm+0x1e3/0x600 [ 277.057278][ T6830] ? tomoyo_path_number_perm+0x1b6/0x600 [ 277.062918][ T6830] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 277.068382][ T6830] ? ksys_write+0x1bd/0x240 [ 277.072893][ T6830] ? common_file_perm+0x171/0x1c0 [ 277.077956][ T6830] ? __fget_files+0x28/0x4d0 [ 277.082565][ T6830] security_file_ioctl+0x6c/0xa0 [ 277.087518][ T6830] __se_sys_ioctl+0x48/0x170 [ 277.092117][ T6830] do_syscall_64+0x4c/0xa0 [ 277.096535][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 277.101211][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 277.105901][ T6830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.111800][ T6830] RIP: 0033:0x7fb96d58f6c9 [ 277.116221][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.135828][ T6830] RSP: 002b:00007fb96b7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.144257][ T6830] RAX: ffffffffffffffda RBX: 00007fb96d7e6090 RCX: 00007fb96d58f6c9 [ 277.152235][ T6830] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 277.160213][ T6830] RBP: 00007fb96b7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 277.168189][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.176169][ T6830] R13: 00007fb96d7e6128 R14: 00007fb96d7e6090 R15: 00007ffe49e98188 [ 277.184159][ T6830] [ 277.187241][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.241488][ T6793] [ 277.241488][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.241488][ T6793] [ 277.252037][ T6793] [ 277.252037][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.252037][ T6793] [ 277.263081][ T6793] [ 277.263081][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.263081][ T6793] [ 277.273581][ T6793] [ 277.273581][ T6793] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.273581][ T6793] [ 277.292511][ T107] [ 277.292511][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.292511][ T107] [ 277.411464][ T6839] ialloc: diAlloc returned -5! [ 277.467553][ T6830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 278.220851][ T6849] FAULT_INJECTION: forcing a failure. [ 278.220851][ T6849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.234641][ T6849] CPU: 1 PID: 6849 Comm: syz.4.624 Not tainted syzkaller #0 [ 278.241949][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.252014][ T6849] Call Trace: [ 278.255302][ T6849] [ 278.258237][ T6849] dump_stack_lvl+0x168/0x22e [ 278.262930][ T6849] ? show_regs_print_info+0x12/0x12 [ 278.268147][ T6849] ? load_image+0x3b0/0x3b0 [ 278.272672][ T6849] ? __lock_acquire+0x7c50/0x7c50 [ 278.277713][ T6849] should_fail_ex+0x399/0x4d0 [ 278.282410][ T6849] _copy_from_user+0x2c/0x170 [ 278.287101][ T6849] iovec_from_user+0x143/0x360 [ 278.291884][ T6849] __import_iovec+0x6d/0x500 [ 278.296488][ T6849] ? __fget_files+0x44a/0x4d0 [ 278.301183][ T6849] import_iovec+0x6f/0xa0 [ 278.305539][ T6849] do_preadv+0x1bd/0x330 [ 278.309806][ T6849] ? do_writev+0x410/0x410 [ 278.314251][ T6849] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 278.320256][ T6849] ? lock_chain_count+0x20/0x20 [ 278.325126][ T6849] ? lockdep_hardirqs_on+0x94/0x140 [ 278.330342][ T6849] do_syscall_64+0x4c/0xa0 [ 278.334779][ T6849] ? clear_bhb_loop+0x60/0xb0 [ 278.339465][ T6849] ? clear_bhb_loop+0x60/0xb0 [ 278.344149][ T6849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.350047][ T6849] RIP: 0033:0x7f63b618f6c9 [ 278.354466][ T6849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.374169][ T6849] RSP: 002b:00007f63b43f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 278.382592][ T6849] RAX: ffffffffffffffda RBX: 00007f63b63e5fa0 RCX: 00007f63b618f6c9 [ 278.390576][ T6849] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 278.398558][ T6849] RBP: 00007f63b43f6090 R08: 0000000000000004 R09: 0000000000000000 [ 278.406534][ T6849] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.414520][ T6849] R13: 00007f63b63e6038 R14: 00007f63b63e5fa0 R15: 00007ffe4e4f34f8 [ 278.422511][ T6849] [ 278.466874][ T4264] [ 278.466874][ T4264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.466874][ T4264] [ 278.549025][ T4264] [ 278.549025][ T4264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 278.549025][ T4264] [ 278.657847][ T6851] netlink: 80 bytes leftover after parsing attributes in process `syz.0.625'. [ 281.641156][ T6890] loop4: detected capacity change from 0 to 32768 [ 281.654714][ T6890] [ 281.654714][ T6890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.654714][ T6890] [ 281.701926][ T6885] [ 281.701926][ T6885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.701926][ T6885] [ 281.713234][ T6885] [ 281.713234][ T6885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.713234][ T6885] [ 281.724312][ T6885] [ 281.724312][ T6885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.724312][ T6885] [ 281.740405][ T6885] [ 281.740405][ T6885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.740405][ T6885] [ 281.823420][ T4278] [ 281.823420][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.823420][ T4278] [ 281.847030][ T6896] FAULT_INJECTION: forcing a failure. [ 281.847030][ T6896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.857886][ T4278] [ 281.857886][ T4278] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 281.857886][ T4278] [ 281.887778][ T6896] CPU: 1 PID: 6896 Comm: syz.1.637 Not tainted syzkaller #0 [ 281.895115][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 281.905184][ T6896] Call Trace: [ 281.908471][ T6896] [ 281.911408][ T6896] dump_stack_lvl+0x168/0x22e [ 281.916106][ T6896] ? show_regs_print_info+0x12/0x12 [ 281.921318][ T6896] ? load_image+0x3b0/0x3b0 [ 281.925837][ T6896] ? __lock_acquire+0x7c50/0x7c50 [ 281.930874][ T6896] ? snprintf+0xd7/0x120 [ 281.935133][ T6896] should_fail_ex+0x399/0x4d0 [ 281.939832][ T6896] _copy_to_user+0x2c/0x130 [ 281.944351][ T6896] simple_read_from_buffer+0xe3/0x150 [ 281.949745][ T6896] proc_fail_nth_read+0x19a/0x210 [ 281.954787][ T6896] ? proc_fault_inject_write+0x2f0/0x2f0 [ 281.960430][ T6896] ? fsnotify_perm+0x248/0x550 [ 281.965209][ T6896] ? proc_fault_inject_write+0x2f0/0x2f0 [ 281.970854][ T6896] vfs_read+0x2c0/0x920 [ 281.975026][ T6896] ? kernel_read+0x1e0/0x1e0 [ 281.979622][ T6896] ? do_sys_openat2+0x1fe/0x490 [ 281.984490][ T6896] ? kmem_cache_free+0xf7/0x290 [ 281.989349][ T6896] ? do_sys_openat2+0x1fe/0x490 [ 281.994226][ T6896] ? __fdget_pos+0x2b5/0x360 [ 281.998833][ T6896] ksys_read+0x143/0x240 [ 282.003093][ T6896] ? vfs_write+0x960/0x960 [ 282.007534][ T6896] ? lockdep_hardirqs_on+0x94/0x140 [ 282.012747][ T6896] do_syscall_64+0x4c/0xa0 [ 282.017177][ T6896] ? clear_bhb_loop+0x60/0xb0 [ 282.021861][ T6896] ? clear_bhb_loop+0x60/0xb0 [ 282.026547][ T6896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.032447][ T6896] RIP: 0033:0x7f3c4238e0dc [ 282.036868][ T6896] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 282.056484][ T6896] RSP: 002b:00007f3c432c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.064889][ T6896] RAX: ffffffffffffffda RBX: 00007f3c425e5fa0 RCX: 00007f3c4238e0dc [ 282.072857][ T6896] RDX: 000000000000000f RSI: 00007f3c432c80a0 RDI: 0000000000000004 [ 282.080818][ T6896] RBP: 00007f3c432c8090 R08: 0000000000000000 R09: 0000000000000000 [ 282.088789][ T6896] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 282.096756][ T6896] R13: 00007f3c425e6038 R14: 00007f3c425e5fa0 R15: 00007ffd7b6f05a8 [ 282.104734][ T6896] [ 282.387205][ T6902] loop4: detected capacity change from 0 to 64 [ 282.446678][ T6902] hfs: invalid btree extent records (0 size) [ 282.459906][ T6881] loop0: detected capacity change from 0 to 32768 [ 282.481951][ T6902] hfs: unable to open catalog tree [ 282.488641][ T6902] hfs: can't find a HFS filesystem on dev loop4 [ 282.511029][ T6881] [ 282.511029][ T6881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.511029][ T6881] [ 282.545212][ T6902] device veth0 entered promiscuous mode [ 282.564680][ T6881] [ 282.564680][ T6881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.564680][ T6881] [ 282.587000][ T6881] [ 282.587000][ T6881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.587000][ T6881] [ 282.602163][ T6902] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 282.620874][ T6881] [ 282.620874][ T6881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.620874][ T6881] [ 282.677758][ T6881] [ 282.677758][ T6881] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 282.677758][ T6881] [ 283.377875][ T4266] [ 283.377875][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.377875][ T4266] [ 283.412542][ T4266] [ 283.412542][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.412542][ T4266] [ 283.517798][ T6894] loop2: detected capacity change from 0 to 32768 [ 283.624090][ T6894] [ 283.624090][ T6894] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 283.624090][ T6894] [ 283.802039][ T6894] FAULT_INJECTION: forcing a failure. [ 283.802039][ T6894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.841825][ T6900] loop3: detected capacity change from 0 to 32768 [ 283.868788][ T125] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 283.899993][ T6894] CPU: 0 PID: 6894 Comm: syz.2.636 Not tainted syzkaller #0 [ 283.907310][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.917365][ T6894] Call Trace: [ 283.920646][ T6894] [ 283.923586][ T6894] dump_stack_lvl+0x168/0x22e [ 283.928277][ T6894] ? show_regs_print_info+0x12/0x12 [ 283.933482][ T6894] ? load_image+0x3b0/0x3b0 [ 283.937996][ T6894] ? __lock_acquire+0x7c50/0x7c50 [ 283.943035][ T6894] should_fail_ex+0x399/0x4d0 [ 283.947725][ T6894] _copy_from_user+0x2c/0x170 [ 283.952413][ T6894] iovec_from_user+0x143/0x360 [ 283.957193][ T6894] __import_iovec+0x6d/0x500 [ 283.961795][ T6894] ? __fget_files+0x44a/0x4d0 [ 283.966487][ T6894] import_iovec+0x6f/0xa0 [ 283.970829][ T6894] do_pwritev+0x1c0/0x340 [ 283.975174][ T6894] ? do_preadv+0x330/0x330 [ 283.979613][ T6894] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 283.985603][ T6894] ? lock_chain_count+0x20/0x20 [ 283.990483][ T6894] ? lockdep_hardirqs_on+0x94/0x140 [ 283.995700][ T6894] ? __x64_sys_pwritev2+0xba/0x100 [ 284.000830][ T6894] do_syscall_64+0x4c/0xa0 [ 284.005259][ T6894] ? clear_bhb_loop+0x60/0xb0 [ 284.009948][ T6894] ? clear_bhb_loop+0x60/0xb0 [ 284.014639][ T6894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.020541][ T6894] RIP: 0033:0x7fa02218f6c9 [ 284.024967][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.044580][ T6894] RSP: 002b:00007fa022f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 284.053120][ T6894] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218f6c9 [ 284.061143][ T6894] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000004 [ 284.069133][ T6894] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 284.077113][ T6894] R10: 0000000000005412 R11: 0000000000000246 R12: 0000000000000001 [ 284.085097][ T6894] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 284.093092][ T6894] [ 284.096148][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.115382][ T6900] JBD2: Ignoring recovery information on journal [ 284.191582][ T4264] [ 284.191582][ T4264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.191582][ T4264] [ 284.293338][ T4264] [ 284.293338][ T4264] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 284.293338][ T4264] [ 284.503402][ T125] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 284.846449][ T125] usb 2-1: config 220 has an invalid descriptor of length 199, skipping remainder of the config [ 284.858572][ T6900] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 284.895397][ T125] usb 2-1: config 220 has no interface number 2 [ 284.977055][ T125] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 285.051980][ T125] usb 2-1: config 220 interface 0 has no altsetting 0 [ 285.073142][ T6926] loop4: detected capacity change from 0 to 128 [ 285.092481][ T125] usb 2-1: config 220 interface 76 has no altsetting 0 [ 285.137532][ T125] usb 2-1: config 220 interface 1 has no altsetting 0 [ 285.181378][ T6926] overlayfs: failed to resolve './file1/file0': -2 [ 285.186496][ T6924] loop0: detected capacity change from 0 to 40427 [ 285.189256][ T4534] udevd[4534]: incorrect ext4 checksum on /dev/loop4 [ 285.200147][ T6924] F2FS-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 285.252328][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 285.263014][ T125] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 285.369960][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.527524][ T125] usb 2-1: Product: syz [ 285.608501][ T125] usb 2-1: Manufacturer: syz [ 285.685113][ T125] usb 2-1: SerialNumber: syz [ 286.054743][ T6929] loop2: detected capacity change from 0 to 40427 [ 286.078772][ T6929] F2FS-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 286.223460][ T6936] FAULT_INJECTION: forcing a failure. [ 286.223460][ T6936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.236700][ T6936] CPU: 0 PID: 6936 Comm: syz.2.646 Not tainted syzkaller #0 [ 286.244002][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.254070][ T6936] Call Trace: [ 286.257353][ T6936] [ 286.260286][ T6936] dump_stack_lvl+0x168/0x22e [ 286.264976][ T6936] ? show_regs_print_info+0x12/0x12 [ 286.270180][ T6936] ? load_image+0x3b0/0x3b0 [ 286.274695][ T6936] ? __lock_acquire+0x7c50/0x7c50 [ 286.279728][ T6936] ? snprintf+0xd7/0x120 [ 286.283982][ T6936] should_fail_ex+0x399/0x4d0 [ 286.288701][ T6936] _copy_to_user+0x2c/0x130 [ 286.293221][ T6936] simple_read_from_buffer+0xe3/0x150 [ 286.298619][ T6936] proc_fail_nth_read+0x19a/0x210 [ 286.303661][ T6936] ? proc_fault_inject_write+0x2f0/0x2f0 [ 286.309313][ T6936] ? fsnotify_perm+0x248/0x550 [ 286.314089][ T6936] ? proc_fault_inject_write+0x2f0/0x2f0 [ 286.319733][ T6936] vfs_read+0x2c0/0x920 [ 286.323901][ T6936] ? kernel_read+0x1e0/0x1e0 [ 286.328503][ T6936] ? __fget_files+0x28/0x4d0 [ 286.333101][ T6936] ? __fget_files+0x44a/0x4d0 [ 286.337797][ T6936] ? __fdget_pos+0x2ae/0x360 [ 286.342394][ T6936] ? ksys_read+0x71/0x240 [ 286.346733][ T6936] ksys_read+0x143/0x240 [ 286.350986][ T6936] ? vfs_write+0x960/0x960 [ 286.355409][ T6936] ? lockdep_hardirqs_on+0x94/0x140 [ 286.360626][ T6936] do_syscall_64+0x4c/0xa0 [ 286.365050][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 286.369735][ T6936] ? clear_bhb_loop+0x60/0xb0 [ 286.374431][ T6936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.380329][ T6936] RIP: 0033:0x7fa02218e0dc [ 286.384748][ T6936] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.404360][ T6936] RSP: 002b:00007fa0203f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.412786][ T6936] RAX: ffffffffffffffda RBX: 00007fa0223e6180 RCX: 00007fa02218e0dc [ 286.420773][ T6936] RDX: 000000000000000f RSI: 00007fa0203f60a0 RDI: 0000000000000007 [ 286.428753][ T6936] RBP: 00007fa0203f6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.436733][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.444704][ T6936] R13: 00007fa0223e6218 R14: 00007fa0223e6180 R15: 00007ffec5c06dc8 [ 286.452694][ T6936] [ 286.455770][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.783372][ T125] usb 2-1: selecting invalid altsetting 0 [ 286.808278][ T125] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 286.837656][ T125] usb 2-1: No valid video chain found. [ 286.928611][ T125] usb 2-1: selecting invalid altsetting 0 [ 286.990299][ T125] usbtest: probe of 2-1:220.1 failed with error -22 [ 287.041814][ T125] usb 2-1: USB disconnect, device number 19 [ 287.114268][ T6941] loop4: detected capacity change from 0 to 40427 [ 287.126676][ T6941] F2FS-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 288.437612][ T4417] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 288.674425][ T4417] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 288.701738][ T4417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 288.725855][ T6946] loop3: detected capacity change from 0 to 32768 [ 288.757943][ T6946] [ 288.757943][ T6946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.757943][ T6946] [ 288.770276][ T4417] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 288.800133][ T4417] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.813895][ T6946] [ 288.813895][ T6946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.813895][ T6946] [ 288.826071][ T4417] usb 3-1: Product: syz [ 288.839878][ T4417] usb 3-1: Manufacturer: syz [ 288.867512][ T4417] usb 3-1: SerialNumber: syz [ 288.881828][ T6939] loop0: detected capacity change from 0 to 32768 [ 288.889716][ T6946] [ 288.889716][ T6946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.889716][ T6946] [ 288.908699][ T4417] usb 3-1: config 0 descriptor?? [ 288.913909][ T6946] [ 288.913909][ T6946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.913909][ T6946] [ 288.926096][ T4417] hub 3-1:0.0: bad descriptor, ignoring hub [ 288.970951][ T6946] [ 288.970951][ T6946] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.970951][ T6946] [ 288.973260][ T6939] [ 288.973260][ T6939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 288.973260][ T6939] [ 288.999334][ T4417] hub: probe of 3-1:0.0 failed with error -5 [ 289.024769][ T4417] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 289.052845][ T6939] [ 289.052845][ T6939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.052845][ T6939] [ 289.065559][ T4417] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 289.097760][ T6939] [ 289.097760][ T6939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.097760][ T6939] [ 289.185573][ T6939] [ 289.185573][ T6939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.185573][ T6939] [ 289.210719][ T4417] usbtouchscreen: probe of 3-1:0.0 failed with error -22 [ 289.218471][ T6939] [ 289.218471][ T6939] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.218471][ T6939] [ 289.260639][ T4277] [ 289.260639][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.260639][ T4277] [ 289.281079][ T4417] usb 3-1: USB disconnect, device number 12 [ 289.307728][ T4277] [ 289.307728][ T4277] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.307728][ T4277] [ 289.382994][ T6962] [ 289.382994][ T6962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.382994][ T6962] [ 289.428178][ T6962] [ 289.428178][ T6962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.428178][ T6962] [ 289.471707][ T6962] [ 289.471707][ T6962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.471707][ T6962] [ 289.498748][ T6962] [ 289.498748][ T6962] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.498748][ T6962] [ 289.600300][ T106] [ 289.600300][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.600300][ T106] [ 289.660758][ T4266] [ 289.660758][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.660758][ T4266] [ 289.731947][ T4266] [ 289.731947][ T4266] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 289.731947][ T4266] [ 289.765978][ T6967] FAULT_INJECTION: forcing a failure. [ 289.765978][ T6967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.779249][ T6967] CPU: 0 PID: 6967 Comm: syz.3.661 Not tainted syzkaller #0 [ 289.786548][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.796614][ T6967] Call Trace: [ 289.799908][ T6967] [ 289.802840][ T6967] dump_stack_lvl+0x168/0x22e [ 289.807614][ T6967] ? show_regs_print_info+0x12/0x12 [ 289.812823][ T6967] ? load_image+0x3b0/0x3b0 [ 289.817340][ T6967] ? __lock_acquire+0x7c50/0x7c50 [ 289.822374][ T6967] ? verify_lock_unused+0x140/0x140 [ 289.827592][ T6967] should_fail_ex+0x399/0x4d0 [ 289.832277][ T6967] _copy_from_user+0x2c/0x170 [ 289.836937][ T6967] ___sys_sendmsg+0x155/0x290 [ 289.841604][ T6967] ? __sys_sendmsg+0x270/0x270 [ 289.846362][ T6967] ? __lock_acquire+0x7c50/0x7c50 [ 289.851375][ T6967] ? __fdget+0x17c/0x200 [ 289.855609][ T6967] __se_sys_sendmsg+0x19e/0x270 [ 289.860443][ T6967] ? __x64_sys_sendmsg+0x80/0x80 [ 289.865387][ T6967] ? lockdep_hardirqs_on+0x94/0x140 [ 289.870579][ T6967] do_syscall_64+0x4c/0xa0 [ 289.874988][ T6967] ? clear_bhb_loop+0x60/0xb0 [ 289.879643][ T6967] ? clear_bhb_loop+0x60/0xb0 [ 289.884301][ T6967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.890175][ T6967] RIP: 0033:0x7fb96d58f6c9 [ 289.894577][ T6967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.914345][ T6967] RSP: 002b:00007fb96b7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.922740][ T6967] RAX: ffffffffffffffda RBX: 00007fb96d7e5fa0 RCX: 00007fb96d58f6c9 [ 289.930690][ T6967] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 289.938642][ T6967] RBP: 00007fb96b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.946601][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.954550][ T6967] R13: 00007fb96d7e6038 R14: 00007fb96d7e5fa0 R15: 00007ffe49e98188 [ 289.962515][ T6967] [ 289.965540][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.491073][ T6978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.536419][ T6980] loop3: detected capacity change from 0 to 2048 [ 290.580126][ T6980] loop3: p1 < > p4 [ 290.582496][ T6976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.587638][ T6980] loop3: p4 size 8388608 extends beyond EOD, truncated [ 290.721388][ T6978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.824637][ T6976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.886269][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 290.905831][ T4534] udevd[4534]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 290.923919][ T6978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.026959][ T6976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.113461][ T6984] FAULT_INJECTION: forcing a failure. [ 291.113461][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.128511][ T6984] CPU: 1 PID: 6984 Comm: syz.1.668 Not tainted syzkaller #0 [ 291.135830][ T6984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.145896][ T6984] Call Trace: [ 291.149179][ T6984] [ 291.152107][ T6984] dump_stack_lvl+0x168/0x22e [ 291.156786][ T6984] ? show_regs_print_info+0x12/0x12 [ 291.161976][ T6984] ? load_image+0x3b0/0x3b0 [ 291.166472][ T6984] ? __lock_acquire+0x7c50/0x7c50 [ 291.171488][ T6984] ? snprintf+0xd7/0x120 [ 291.175723][ T6984] should_fail_ex+0x399/0x4d0 [ 291.180396][ T6984] _copy_to_user+0x2c/0x130 [ 291.184887][ T6984] simple_read_from_buffer+0xe3/0x150 [ 291.190251][ T6984] proc_fail_nth_read+0x19a/0x210 [ 291.195261][ T6984] ? proc_fault_inject_write+0x2f0/0x2f0 [ 291.200887][ T6984] ? fsnotify_perm+0x248/0x550 [ 291.205640][ T6984] ? proc_fault_inject_write+0x2f0/0x2f0 [ 291.211255][ T6984] vfs_read+0x2c0/0x920 [ 291.215413][ T6984] ? kernel_read+0x1e0/0x1e0 [ 291.219989][ T6984] ? __fget_files+0x28/0x4d0 [ 291.224565][ T6984] ? __fget_files+0x44a/0x4d0 [ 291.229239][ T6984] ? __fdget_pos+0x2ae/0x360 [ 291.233817][ T6984] ? ksys_read+0x71/0x240 [ 291.238137][ T6984] ksys_read+0x143/0x240 [ 291.242375][ T6984] ? vfs_write+0x960/0x960 [ 291.246779][ T6984] ? lockdep_hardirqs_on+0x94/0x140 [ 291.251982][ T6984] do_syscall_64+0x4c/0xa0 [ 291.256392][ T6984] ? clear_bhb_loop+0x60/0xb0 [ 291.261055][ T6984] ? clear_bhb_loop+0x60/0xb0 [ 291.265715][ T6984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.271596][ T6984] RIP: 0033:0x7f3c4238e0dc [ 291.275996][ T6984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 291.295587][ T6984] RSP: 002b:00007f3c432c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 291.303990][ T6984] RAX: ffffffffffffffda RBX: 00007f3c425e5fa0 RCX: 00007f3c4238e0dc [ 291.311949][ T6984] RDX: 000000000000000f RSI: 00007f3c432c80a0 RDI: 0000000000000003 [ 291.319903][ T6984] RBP: 00007f3c432c8090 R08: 0000000000000000 R09: 0000000000000000 [ 291.327857][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.335814][ T6984] R13: 00007f3c425e6038 R14: 00007f3c425e5fa0 R15: 00007ffd7b6f05a8 [ 291.343784][ T6984] [ 291.668972][ T6978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.884032][ T6976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.135743][ T6978] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.183461][ T6978] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.214159][ T6976] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.256779][ T6978] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.281423][ T6976] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.305787][ T6978] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.334822][ T6976] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.467647][ T6976] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.112479][ T7001] loop3: detected capacity change from 0 to 32768 [ 293.653166][ T7001] XFS (loop3): Mounting V5 Filesystem [ 293.953293][ T7001] XFS (loop3): Ending clean mount [ 294.357891][ T7038] FAULT_INJECTION: forcing a failure. [ 294.357891][ T7038] name failslab, interval 1, probability 0, space 0, times 0 [ 294.445769][ T7038] CPU: 0 PID: 7038 Comm: syz.3.673 Not tainted syzkaller #0 [ 294.453098][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.463161][ T7038] Call Trace: [ 294.466442][ T7038] [ 294.469375][ T7038] dump_stack_lvl+0x168/0x22e [ 294.474065][ T7038] ? show_regs_print_info+0x12/0x12 [ 294.479277][ T7038] ? load_image+0x3b0/0x3b0 [ 294.483807][ T7038] ? __might_sleep+0xd0/0xd0 [ 294.488413][ T7038] ? __lock_acquire+0x7c50/0x7c50 [ 294.493449][ T7038] should_fail_ex+0x399/0x4d0 [ 294.498144][ T7038] should_failslab+0x5/0x20 [ 294.502657][ T7038] slab_pre_alloc_hook+0x59/0x310 [ 294.507690][ T7038] kmem_cache_alloc+0x56/0x2f0 [ 294.512459][ T7038] ? getname_flags+0xb7/0x500 [ 294.517153][ T7038] getname_flags+0xb7/0x500 [ 294.521679][ T7038] user_path_at_empty+0x28/0x60 [ 294.526542][ T7038] path_setxattr+0xae/0x280 [ 294.531062][ T7038] ? simple_xattr_list_add+0xf0/0xf0 [ 294.536363][ T7038] ? lock_chain_count+0x20/0x20 [ 294.541236][ T7038] __x64_sys_setxattr+0xb7/0xd0 [ 294.546109][ T7038] do_syscall_64+0x4c/0xa0 [ 294.550534][ T7038] ? clear_bhb_loop+0x60/0xb0 [ 294.555224][ T7038] ? clear_bhb_loop+0x60/0xb0 [ 294.559913][ T7038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.565809][ T7038] RIP: 0033:0x7fb96d58f6c9 [ 294.570235][ T7038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.589854][ T7038] RSP: 002b:00007fb96b7d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 294.594708][ T7012] loop4: detected capacity change from 0 to 32768 [ 294.598265][ T7038] RAX: ffffffffffffffda RBX: 00007fb96d7e6090 RCX: 00007fb96d58f6c9 [ 294.598279][ T7038] RDX: 0000200000001400 RSI: 00002000000001c0 RDI: 0000200000000200 [ 294.598290][ T7038] RBP: 00007fb96b7d5090 R08: 0000000000000001 R09: 0000000000000000 [ 294.598300][ T7038] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000001 [ 294.598309][ T7038] R13: 00007fb96d7e6128 R14: 00007fb96d7e6090 R15: 00007ffe49e98188 [ 294.598333][ T7038] [ 294.598408][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.653528][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.780502][ T7046] FAULT_INJECTION: forcing a failure. [ 294.780502][ T7046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.793704][ T7046] CPU: 1 PID: 7046 Comm: syz.0.681 Not tainted syzkaller #0 [ 294.800995][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.811053][ T7046] Call Trace: [ 294.814333][ T7046] [ 294.817269][ T7046] dump_stack_lvl+0x168/0x22e [ 294.821955][ T7046] ? show_regs_print_info+0x12/0x12 [ 294.827159][ T7046] ? load_image+0x3b0/0x3b0 [ 294.831674][ T7046] ? __lock_acquire+0x7c50/0x7c50 [ 294.836878][ T7046] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 294.842868][ T7046] ? verify_lock_unused+0x140/0x140 [ 294.848081][ T7046] should_fail_ex+0x399/0x4d0 [ 294.852771][ T7046] _copy_from_user+0x2c/0x170 [ 294.857455][ T7046] ___sys_sendmsg+0x155/0x290 [ 294.862136][ T7046] ? __sys_sendmsg+0x270/0x270 [ 294.866942][ T7046] ? __fdget+0x17c/0x200 [ 294.871193][ T7046] __se_sys_sendmsg+0x19e/0x270 [ 294.876052][ T7046] ? __x64_sys_sendmsg+0x80/0x80 [ 294.880995][ T7046] ? lockdep_hardirqs_on+0x94/0x140 [ 294.886209][ T7046] ? __x64_sys_sendmsg+0x4b/0x80 [ 294.891155][ T7046] do_syscall_64+0x4c/0xa0 [ 294.895570][ T7046] ? clear_bhb_loop+0x60/0xb0 [ 294.900251][ T7046] ? clear_bhb_loop+0x60/0xb0 [ 294.904929][ T7046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.910829][ T7046] RIP: 0033:0x7fb3d2d8f6c9 [ 294.915247][ T7046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.934860][ T7046] RSP: 002b:00007fb3d3b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.943279][ T7046] RAX: ffffffffffffffda RBX: 00007fb3d2fe6180 RCX: 00007fb3d2d8f6c9 [ 294.951257][ T7046] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 294.959227][ T7046] RBP: 00007fb3d3b91090 R08: 0000000000000000 R09: 0000000000000000 [ 294.967200][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.975175][ T7046] R13: 00007fb3d2fe6218 R14: 00007fb3d2fe6180 R15: 00007ffea424b7a8 [ 294.983162][ T7046] [ 294.988128][ T4275] Bluetooth: hci4: command 0x0405 tx timeout [ 295.255161][ T4277] XFS (loop3): Unmounting Filesystem [ 295.447673][ T7012] XFS (loop4): Mounting V5 Filesystem [ 295.525690][ T7012] XFS (loop4): Ending clean mount [ 296.594305][ T7076] loop0: detected capacity change from 0 to 512 [ 296.616858][ T7076] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 296.654645][ T7076] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 296.687237][ T7076] EXT4-fs error (device loop0): __ext4_get_inode_loc:4513: comm syz.0.691: Invalid inode table block 1 in block_group 0 [ 296.744591][ T7076] EXT4-fs (loop0): get root inode failed [ 296.771968][ T7076] EXT4-fs (loop0): mount failed [ 296.869929][ T4278] XFS (loop4): Unmounting Filesystem [ 297.056601][ T7087] FAULT_INJECTION: forcing a failure. [ 297.056601][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 297.113282][ T7087] CPU: 0 PID: 7087 Comm: syz.3.695 Not tainted syzkaller #0 [ 297.120619][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.130685][ T7087] Call Trace: [ 297.133967][ T7087] [ 297.136900][ T7087] dump_stack_lvl+0x168/0x22e [ 297.141599][ T7087] ? show_regs_print_info+0x12/0x12 [ 297.146818][ T7087] ? load_image+0x3b0/0x3b0 [ 297.151348][ T7087] ? __might_sleep+0xd0/0xd0 [ 297.155954][ T7087] ? __lock_acquire+0x7c50/0x7c50 [ 297.161006][ T7087] should_fail_ex+0x399/0x4d0 [ 297.165703][ T7087] should_failslab+0x5/0x20 [ 297.170225][ T7087] slab_pre_alloc_hook+0x59/0x310 [ 297.175263][ T7087] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 297.180998][ T7087] __kmem_cache_alloc_node+0x4f/0x260 [ 297.186366][ T7087] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 297.192089][ T7087] __kmalloc+0xa0/0x240 [ 297.196246][ T7087] tomoyo_realpath_from_path+0xdf/0x5d0 [ 297.201796][ T7087] tomoyo_path_number_perm+0x1e3/0x600 [ 297.207252][ T7087] ? tomoyo_path_number_perm+0x1b6/0x600 [ 297.212880][ T7087] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 297.218334][ T7087] ? ksys_write+0x1bd/0x240 [ 297.222835][ T7087] ? common_file_perm+0x171/0x1c0 [ 297.227881][ T7087] ? __fget_files+0x28/0x4d0 [ 297.232475][ T7087] security_file_ioctl+0x6c/0xa0 [ 297.237414][ T7087] __se_sys_ioctl+0x48/0x170 [ 297.241997][ T7087] do_syscall_64+0x4c/0xa0 [ 297.246404][ T7087] ? clear_bhb_loop+0x60/0xb0 [ 297.251073][ T7087] ? clear_bhb_loop+0x60/0xb0 [ 297.255741][ T7087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.261625][ T7087] RIP: 0033:0x7fb96d58f6c9 [ 297.266030][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.285635][ T7087] RSP: 002b:00007fb96b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.294042][ T7087] RAX: ffffffffffffffda RBX: 00007fb96d7e5fa0 RCX: 00007fb96d58f6c9 [ 297.302003][ T7087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 297.309967][ T7087] RBP: 00007fb96b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 297.317928][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.325887][ T7087] R13: 00007fb96d7e6038 R14: 00007fb96d7e5fa0 R15: 00007ffe49e98188 [ 297.333858][ T7087] [ 297.336990][ C0] vkms_vblank_simulate: vblank timer overrun [ 297.352315][ T7087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.546077][ T7092] loop2: detected capacity change from 0 to 256 [ 297.632865][ T7092] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 297.700735][ T7092] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 297.773478][ T7092] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 298.267226][ T7106] device veth0_to_bond entered promiscuous mode [ 298.955899][ T7115] FAULT_INJECTION: forcing a failure. [ 298.955899][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.969303][ T7115] CPU: 0 PID: 7115 Comm: syz.0.701 Not tainted syzkaller #0 [ 298.976593][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.986648][ T7115] Call Trace: [ 298.989927][ T7115] [ 298.992862][ T7115] dump_stack_lvl+0x168/0x22e [ 298.997551][ T7115] ? show_regs_print_info+0x12/0x12 [ 299.002754][ T7115] ? load_image+0x3b0/0x3b0 [ 299.007266][ T7115] ? __lock_acquire+0x7c50/0x7c50 [ 299.012299][ T7115] ? verify_lock_unused+0x140/0x140 [ 299.017509][ T7115] should_fail_ex+0x399/0x4d0 [ 299.022195][ T7115] _copy_from_user+0x2c/0x170 [ 299.026894][ T7115] ___sys_sendmsg+0x155/0x290 [ 299.031587][ T7115] ? __sys_sendmsg+0x270/0x270 [ 299.036377][ T7115] ? __lock_acquire+0x7c50/0x7c50 [ 299.041426][ T7115] ? __fdget+0x17c/0x200 [ 299.045694][ T7115] __se_sys_sendmsg+0x19e/0x270 [ 299.050558][ T7115] ? __x64_sys_sendmsg+0x80/0x80 [ 299.055517][ T7115] ? lockdep_hardirqs_on+0x94/0x140 [ 299.060728][ T7115] do_syscall_64+0x4c/0xa0 [ 299.065158][ T7115] ? clear_bhb_loop+0x60/0xb0 [ 299.069845][ T7115] ? clear_bhb_loop+0x60/0xb0 [ 299.074530][ T7115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.080425][ T7115] RIP: 0033:0x7fb3d2d8f6c9 [ 299.084857][ T7115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.104487][ T7115] RSP: 002b:00007fb3d3b91038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.112912][ T7115] RAX: ffffffffffffffda RBX: 00007fb3d2fe6180 RCX: 00007fb3d2d8f6c9 [ 299.120897][ T7115] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000007 [ 299.128887][ T7115] RBP: 00007fb3d3b91090 R08: 0000000000000000 R09: 0000000000000000 [ 299.136866][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.144836][ T7115] R13: 00007fb3d2fe6218 R14: 00007fb3d2fe6180 R15: 00007ffea424b7a8 [ 299.152849][ T7115] [ 299.155990][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.274048][ T7132] loop3: detected capacity change from 0 to 512 [ 300.369687][ T7137] FAULT_INJECTION: forcing a failure. [ 300.369687][ T7137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.397455][ T7137] CPU: 0 PID: 7137 Comm: syz.2.710 Not tainted syzkaller #0 [ 300.404784][ T7137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 300.414846][ T7137] Call Trace: [ 300.418129][ T7137] [ 300.421067][ T7137] dump_stack_lvl+0x168/0x22e [ 300.425765][ T7137] ? show_regs_print_info+0x12/0x12 [ 300.430980][ T7137] ? load_image+0x3b0/0x3b0 [ 300.435513][ T7137] ? __lock_acquire+0x7c50/0x7c50 [ 300.440554][ T7137] ? snprintf+0xd7/0x120 [ 300.444814][ T7137] should_fail_ex+0x399/0x4d0 [ 300.449516][ T7137] _copy_to_user+0x2c/0x130 [ 300.454033][ T7137] simple_read_from_buffer+0xe3/0x150 [ 300.459426][ T7137] proc_fail_nth_read+0x19a/0x210 [ 300.464463][ T7137] ? proc_fault_inject_write+0x2f0/0x2f0 [ 300.470112][ T7137] ? fsnotify_perm+0x248/0x550 [ 300.474883][ T7137] ? proc_fault_inject_write+0x2f0/0x2f0 [ 300.480525][ T7137] vfs_read+0x2c0/0x920 [ 300.484696][ T7137] ? kernel_read+0x1e0/0x1e0 [ 300.489297][ T7137] ? __fget_files+0x28/0x4d0 [ 300.493899][ T7137] ? __fget_files+0x44a/0x4d0 [ 300.498594][ T7137] ? __fdget_pos+0x2ae/0x360 [ 300.503192][ T7137] ? ksys_read+0x71/0x240 [ 300.507534][ T7137] ksys_read+0x143/0x240 [ 300.511794][ T7137] ? vfs_write+0x960/0x960 [ 300.516224][ T7137] ? lockdep_hardirqs_on+0x94/0x140 [ 300.521438][ T7137] do_syscall_64+0x4c/0xa0 [ 300.525871][ T7137] ? clear_bhb_loop+0x60/0xb0 [ 300.530558][ T7137] ? clear_bhb_loop+0x60/0xb0 [ 300.535244][ T7137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.541144][ T7137] RIP: 0033:0x7fa02218e0dc [ 300.545566][ T7137] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 300.565190][ T7137] RSP: 002b:00007fa022f64030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.573619][ T7137] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218e0dc [ 300.581600][ T7137] RDX: 000000000000000f RSI: 00007fa022f640a0 RDI: 0000000000000005 [ 300.589582][ T7137] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 300.597570][ T7137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.605555][ T7137] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 300.613557][ T7137] [ 300.616600][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.638588][ T7132] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 300.654922][ T7132] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.666075][ T27] audit: type=1326 audit(1762793041.310:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 300.688076][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.713192][ T27] audit: type=1326 audit(1762793041.350:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 300.735205][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.756971][ T7132] EXT4-fs error (device loop3): ext4_get_first_dir_block:3594: inode #12: comm syz.3.708: directory missing '.' [ 300.794559][ T7132] EXT4-fs (loop3): Remounting filesystem read-only [ 300.848290][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 300.859406][ T27] audit: type=1326 audit(1762793041.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 300.867486][ T6142] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 300.896129][ T27] audit: type=1326 audit(1762793041.530:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 300.991061][ T27] audit: type=1326 audit(1762793041.530:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 301.037823][ T6142] usb 5-1: device descriptor read/64, error -71 [ 301.062965][ T27] audit: type=1326 audit(1762793041.540:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 301.094844][ T27] audit: type=1326 audit(1762793041.540:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 301.112766][ T7158] FAULT_INJECTION: forcing a failure. [ 301.112766][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 301.213273][ T27] audit: type=1326 audit(1762793041.540:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 301.374427][ T6142] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 301.383115][ T7158] CPU: 0 PID: 7158 Comm: syz.2.716 Not tainted syzkaller #0 [ 301.390423][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.400466][ T7158] Call Trace: [ 301.403734][ T7158] [ 301.406651][ T7158] dump_stack_lvl+0x168/0x22e [ 301.411323][ T7158] ? show_regs_print_info+0x12/0x12 [ 301.416508][ T7158] ? load_image+0x3b0/0x3b0 [ 301.421011][ T7158] ? __might_sleep+0xd0/0xd0 [ 301.425592][ T7158] ? __lock_acquire+0x7c50/0x7c50 [ 301.430626][ T7158] should_fail_ex+0x399/0x4d0 [ 301.435324][ T7158] should_failslab+0x5/0x20 [ 301.439824][ T7158] slab_pre_alloc_hook+0x59/0x310 [ 301.444839][ T7158] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 301.450554][ T7158] __kmem_cache_alloc_node+0x4f/0x260 [ 301.455921][ T7158] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 301.461635][ T7158] __kmalloc+0xa0/0x240 [ 301.465789][ T7158] tomoyo_realpath_from_path+0xdf/0x5d0 [ 301.471335][ T7158] tomoyo_path_number_perm+0x1e3/0x600 [ 301.476783][ T7158] ? tomoyo_path_number_perm+0x1b6/0x600 [ 301.482404][ T7158] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 301.487965][ T7158] ? __fget_files+0x28/0x4d0 [ 301.492552][ T7158] security_file_ioctl+0x6c/0xa0 [ 301.497478][ T7158] __se_sys_ioctl+0x48/0x170 [ 301.502090][ T7158] do_syscall_64+0x4c/0xa0 [ 301.506506][ T7158] ? clear_bhb_loop+0x60/0xb0 [ 301.511176][ T7158] ? clear_bhb_loop+0x60/0xb0 [ 301.515849][ T7158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.521737][ T7158] RIP: 0033:0x7fa02218f6c9 [ 301.526145][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.545737][ T7158] RSP: 002b:00007fa022f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.554137][ T7158] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218f6c9 [ 301.562093][ T7158] RDX: 00002000000003c0 RSI: 000000004008af30 RDI: 0000000000000003 [ 301.570047][ T7158] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 301.578001][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.585956][ T7158] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 301.593925][ T7158] [ 301.596990][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.797586][ T6142] usb 5-1: device descriptor read/64, error -71 [ 301.827557][ T27] audit: type=1326 audit(1762793041.540:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 301.862040][ T27] audit: type=1326 audit(1762793041.540:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2d8f6c9 code=0x7ffc0000 [ 301.887719][ T7158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 302.016743][ T6142] usb usb5-port1: attempt power cycle [ 302.231583][ T7157] syz.3.715 (7157): drop_caches: 2 [ 302.677557][ T6142] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 302.728096][ T6142] usb 5-1: device descriptor read/8, error -71 [ 302.737265][ T7170] kvm: emulating exchange as write [ 302.987587][ T4417] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 303.017528][ T6142] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 303.108037][ T6142] usb 5-1: device descriptor read/8, error -71 [ 303.162620][ T7186] FAULT_INJECTION: forcing a failure. [ 303.162620][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 303.180979][ T4417] usb 1-1: unable to get BOS descriptor or descriptor too short [ 303.194854][ T7186] CPU: 0 PID: 7186 Comm: syz.2.724 Not tainted syzkaller #0 [ 303.198442][ T4417] usb 1-1: not running at top speed; connect to a high speed hub [ 303.202171][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.202215][ T7186] Call Trace: [ 303.202222][ T7186] [ 303.224471][ T4417] usb 1-1: config 81 has an invalid interface number: 159 but max is 0 [ 303.226170][ T7186] dump_stack_lvl+0x168/0x22e [ 303.226200][ T7186] ? show_regs_print_info+0x12/0x12 [ 303.242404][ T6142] usb usb5-port1: unable to enumerate USB device [ 303.244249][ T7186] ? load_image+0x3b0/0x3b0 [ 303.244280][ T7186] ? __might_sleep+0xd0/0xd0 [ 303.252240][ T4417] usb 1-1: config 81 has no interface number 0 [ 303.255064][ T7186] ? __lock_acquire+0x7c50/0x7c50 [ 303.255089][ T7186] ? mark_lock+0x94/0x320 [ 303.255112][ T7186] should_fail_ex+0x399/0x4d0 [ 303.259769][ T4417] usb 1-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 303.265802][ T7186] should_failslab+0x5/0x20 [ 303.265826][ T7186] slab_pre_alloc_hook+0x59/0x310 [ 303.265843][ T7186] ? mark_lock+0x94/0x320 [ 303.265863][ T7186] ? fuse_perform_write+0x2dc/0x1d40 [ 303.271004][ T4417] usb 1-1: config 81 interface 159 has no altsetting 0 [ 303.275164][ T7186] __kmem_cache_alloc_node+0x4f/0x260 [ 303.275191][ T7186] ? fuse_perform_write+0x2dc/0x1d40 [ 303.275210][ T7186] __kmalloc+0xa0/0x240 [ 303.284143][ T4417] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 303.290852][ T7186] fuse_perform_write+0x2dc/0x1d40 [ 303.290879][ T7186] ? ktime_get_coarse_real_ts64+0x36/0x120 [ 303.290897][ T7186] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 303.290932][ T7186] ? fuse_direct_IO+0x1270/0x1270 [ 303.290948][ T7186] ? current_time+0x18e/0x2a0 [ 303.290982][ T7186] ? __file_remove_privs+0x5b0/0x5b0 [ 303.291004][ T7186] ? generic_write_checks+0xc5/0x100 [ 303.291029][ T7186] fuse_file_write_iter+0xbd7/0x1200 [ 303.291057][ T7186] ? fuse_file_read_iter+0x5f0/0x5f0 [ 303.291085][ T7186] ? rcu_read_lock_any_held+0xb0/0x120 [ 303.291104][ T7186] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 303.291120][ T7186] ? end_current_label_crit_section+0x14b/0x170 [ 303.291145][ T7186] ? common_file_perm+0x171/0x1c0 [ 303.291171][ T7186] vfs_write+0x44c/0x960 [ 303.301941][ T4417] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.304970][ T7186] ? file_end_write+0x250/0x250 [ 303.305001][ T7186] ? __fget_files+0x44a/0x4d0 [ 303.312614][ T4417] usb 1-1: Product: syz [ 303.317177][ T7186] ? __fdget_pos+0x2ae/0x360 [ 303.317201][ T7186] ? ksys_write+0x71/0x240 [ 303.322981][ T4417] usb 1-1: Manufacturer: syz [ 303.327827][ T7186] ksys_write+0x143/0x240 [ 303.327855][ T7186] ? __ia32_sys_read+0x80/0x80 [ 303.327879][ T7186] ? lockdep_hardirqs_on+0x94/0x140 [ 303.332432][ T4417] usb 1-1: SerialNumber: syz [ 303.341018][ T7186] do_syscall_64+0x4c/0xa0 [ 303.341039][ T7186] ? clear_bhb_loop+0x60/0xb0 [ 303.341056][ T7186] ? clear_bhb_loop+0x60/0xb0 [ 303.341073][ T7186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.341089][ T7186] RIP: 0033:0x7fa02218f6c9 [ 303.341105][ T7186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.341117][ T7186] RSP: 002b:00007fa022f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.341135][ T7186] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218f6c9 [ 303.341146][ T7186] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000004 [ 303.341157][ T7186] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 303.341168][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.341179][ T7186] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 303.341205][ T7186] [ 303.341260][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.500444][ T125] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 303.572707][ T7175] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 303.941062][ T7175] loop0: detected capacity change from 0 to 128 [ 303.993438][ T7175] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 304.009626][ T125] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.030636][ T125] usb 4-1: not running at top speed; connect to a high speed hub [ 304.041824][ T7198] loop4: detected capacity change from 0 to 128 [ 304.054202][ T125] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 304.071878][ T7175] hpfs: filesystem error: improperly stopped [ 304.090328][ T125] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 304.102917][ T7175] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 304.114779][ T7198] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.141880][ T125] usb 4-1: config 2 has no interface number 0 [ 304.152630][ T7175] hpfs: You really don't want any checks? You are crazy... [ 304.163047][ T7198] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 304.203940][ T125] usb 4-1: config 2 has no interface number 1 [ 304.220146][ T7175] hpfs: hpfs_map_sector(): read error [ 304.225608][ T7175] hpfs: code page support is disabled [ 304.225992][ T125] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 304.233861][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 304.248584][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 304.254516][ T7175] hpfs: filesystem error: unable to find root dir [ 304.297456][ T7175] hpfs: hpfs_map_4sectors(): unaligned read [ 304.316484][ T125] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 304.355214][ T125] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 304.505206][ T125] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 304.563478][ T125] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.615372][ T125] usb 4-1: config 2 interface 212 has no altsetting 0 [ 304.663001][ T125] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 304.759823][ T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.811619][ T125] usb 4-1: Product: syz [ 304.835454][ T125] usb 4-1: Manufacturer: syz [ 304.844480][ T125] usb 4-1: SerialNumber: syz [ 305.400315][ T125] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input13 [ 305.453194][ T125] usb 4-1: USB disconnect, device number 16 [ 305.453215][ C1] xpad 4-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.658836][ T4417] kobil_sct 1-1:81.159: KOBIL USB smart card terminal converter detected [ 305.695732][ T4417] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 305.804896][ T4417] usb 1-1: USB disconnect, device number 16 [ 305.896517][ T7218] FAULT_INJECTION: forcing a failure. [ 305.896517][ T7218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.910212][ T4417] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 305.937434][ T7218] CPU: 0 PID: 7218 Comm: syz.2.736 Not tainted syzkaller #0 [ 305.944758][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.952245][ T4417] kobil_sct 1-1:81.159: device disconnected [ 305.954806][ T7218] Call Trace: [ 305.954817][ T7218] [ 305.966907][ T7218] dump_stack_lvl+0x168/0x22e [ 305.971593][ T7218] ? show_regs_print_info+0x12/0x12 [ 305.976784][ T7218] ? load_image+0x3b0/0x3b0 [ 305.981282][ T7218] ? __lock_acquire+0x7c50/0x7c50 [ 305.986294][ T7218] ? verify_lock_unused+0x140/0x140 [ 305.991484][ T7218] should_fail_ex+0x399/0x4d0 [ 305.996151][ T7218] _copy_from_user+0x2c/0x170 [ 306.000821][ T7218] ___sys_recvmsg+0x12b/0x510 [ 306.005521][ T7218] ? __sys_recvmsg+0x270/0x270 [ 306.010290][ T7218] ? __fget_files+0x44a/0x4d0 [ 306.014963][ T7218] ? __fdget+0x17c/0x200 [ 306.019205][ T7218] ? do_recvmmsg+0x176/0x7d0 [ 306.023792][ T7218] do_recvmmsg+0x359/0x7d0 [ 306.028199][ T7218] ? file_end_write+0x156/0x250 [ 306.033045][ T7218] ? __sys_recvmmsg+0x280/0x280 [ 306.037889][ T7218] ? vfs_write+0x56f/0x960 [ 306.042331][ T7218] ? mutex_unlock+0x10/0x10 [ 306.046845][ T7218] ? __fget_files+0x44a/0x4d0 [ 306.051551][ T7218] __x64_sys_recvmmsg+0x18d/0x240 [ 306.056586][ T7218] ? do_recvmmsg+0x7d0/0x7d0 [ 306.061164][ T7218] ? lockdep_hardirqs_on+0x94/0x140 [ 306.066360][ T7218] do_syscall_64+0x4c/0xa0 [ 306.070767][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 306.075429][ T7218] ? clear_bhb_loop+0x60/0xb0 [ 306.080103][ T7218] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.085987][ T7218] RIP: 0033:0x7fa02218f6c9 [ 306.090389][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.109986][ T7218] RSP: 002b:00007fa022f64038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 306.118408][ T7218] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218f6c9 [ 306.126387][ T7218] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 306.134358][ T7218] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 306.142320][ T7218] R10: 0000000000000406 R11: 0000000000000246 R12: 0000000000000001 [ 306.150278][ T7218] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 306.158246][ T7218] [ 306.161365][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.947454][ T125] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 307.217583][ T125] usb 2-1: Using ep0 maxpacket: 16 [ 307.232918][ T125] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 307.243254][ T125] usb 2-1: config 0 has no interface number 0 [ 307.252398][ T125] usb 2-1: config 0 interface 22 has no altsetting 0 [ 307.271010][ T125] usb 2-1: New USB device found, idVendor=bb6f, idProduct=9304, bcdDevice=b9.26 [ 307.291016][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.301590][ T125] usb 2-1: Product: syz [ 307.307494][ T125] usb 2-1: Manufacturer: syz [ 307.312283][ T125] usb 2-1: SerialNumber: syz [ 307.324924][ T125] usb 2-1: config 0 descriptor?? [ 307.337455][ T125] usb-storage 2-1:0.22: USB Mass Storage device detected [ 307.826846][ T7228] bridge0: port 3(hsr0) entered blocking state [ 307.856993][ T7228] bridge0: port 3(hsr0) entered disabled state [ 307.907323][ T7228] device hsr0 entered promiscuous mode [ 307.952377][ T7228] bridge0: port 3(hsr0) entered blocking state [ 307.959349][ T7228] bridge0: port 3(hsr0) entered forwarding state [ 308.151285][ T125] usb 2-1: USB disconnect, device number 20 [ 308.470836][ T7254] FAULT_INJECTION: forcing a failure. [ 308.470836][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 308.483622][ T7254] CPU: 0 PID: 7254 Comm: syz.1.745 Not tainted syzkaller #0 [ 308.490926][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 308.500965][ T7254] Call Trace: [ 308.504233][ T7254] [ 308.507148][ T7254] dump_stack_lvl+0x168/0x22e [ 308.511814][ T7254] ? show_regs_print_info+0x12/0x12 [ 308.517008][ T7254] ? load_image+0x3b0/0x3b0 [ 308.521506][ T7254] ? __might_sleep+0xd0/0xd0 [ 308.526081][ T7254] ? __lock_acquire+0x7c50/0x7c50 [ 308.531096][ T7254] should_fail_ex+0x399/0x4d0 [ 308.535765][ T7254] should_failslab+0x5/0x20 [ 308.540254][ T7254] slab_pre_alloc_hook+0x59/0x310 [ 308.545263][ T7254] kmem_cache_alloc+0x56/0x2f0 [ 308.550008][ T7254] ? getname_flags+0xb7/0x500 [ 308.554669][ T7254] getname_flags+0xb7/0x500 [ 308.559167][ T7254] do_sys_openat2+0xcf/0x490 [ 308.563745][ T7254] ? up_read+0x20/0x20 [ 308.567797][ T7254] ? do_sys_open+0xe0/0xe0 [ 308.572194][ T7254] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 308.578159][ T7254] ? lock_chain_count+0x20/0x20 [ 308.583000][ T7254] __x64_sys_openat+0x135/0x160 [ 308.587837][ T7254] do_syscall_64+0x4c/0xa0 [ 308.592233][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 308.596893][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 308.601551][ T7254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.607428][ T7254] RIP: 0033:0x7f3c4238df10 [ 308.611824][ T7254] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 308.631504][ T7254] RSP: 002b:00007f3c432a6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 308.639903][ T7254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c4238df10 [ 308.647861][ T7254] RDX: 0000000000000000 RSI: 00007f3c432a6c10 RDI: 00000000ffffff9c [ 308.655815][ T7254] RBP: 00007f3c432a6c10 R08: 0000000000000000 R09: 0023647261632f69 [ 308.663768][ T7254] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 308.671719][ T7254] R13: 00007f3c425e6128 R14: 00007f3c425e6090 R15: 00007ffd7b6f05a8 [ 308.679680][ T7254] [ 308.682722][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.197604][ T4417] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 309.769303][ T4417] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 309.817468][ T4417] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.832663][ T4417] usb 4-1: config 0 has no interface number 0 [ 309.840534][ T4417] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 310.132946][ T7272] FAULT_INJECTION: forcing a failure. [ 310.132946][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 310.145727][ T7272] CPU: 0 PID: 7272 Comm: syz.2.753 Not tainted syzkaller #0 [ 310.153026][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.163222][ T7272] Call Trace: [ 310.166489][ T7272] [ 310.169406][ T7272] dump_stack_lvl+0x168/0x22e [ 310.174078][ T7272] ? show_regs_print_info+0x12/0x12 [ 310.179266][ T7272] ? load_image+0x3b0/0x3b0 [ 310.183763][ T7272] ? __might_sleep+0xd0/0xd0 [ 310.188348][ T7272] ? __lock_acquire+0x7c50/0x7c50 [ 310.193361][ T7272] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 310.198984][ T7272] should_fail_ex+0x399/0x4d0 [ 310.203654][ T7272] should_failslab+0x5/0x20 [ 310.208144][ T7272] slab_pre_alloc_hook+0x59/0x310 [ 310.213158][ T7272] kmem_cache_alloc+0x56/0x2f0 [ 310.217906][ T7272] ? getname_flags+0xb7/0x500 [ 310.222573][ T7272] getname_flags+0xb7/0x500 [ 310.227068][ T7272] __x64_sys_mkdir+0x5b/0x80 [ 310.231645][ T7272] do_syscall_64+0x4c/0xa0 [ 310.236050][ T7272] ? clear_bhb_loop+0x60/0xb0 [ 310.240712][ T7272] ? clear_bhb_loop+0x60/0xb0 [ 310.245377][ T7272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.251253][ T7272] RIP: 0033:0x7fa02218f6c9 [ 310.255670][ T7272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.275260][ T7272] RSP: 002b:00007fa022f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 310.283659][ T7272] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218f6c9 [ 310.291617][ T7272] RDX: 0000000000000000 RSI: 0000000000000082 RDI: 00002000000020c0 [ 310.299574][ T7272] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 310.307530][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.315483][ T7272] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 310.323449][ T7272] [ 310.326524][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.341107][ T4417] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 310.370651][ T4417] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.374957][ T7265] loop0: detected capacity change from 0 to 4096 [ 310.406102][ T4417] usb 4-1: config 0 interface 52 has no altsetting 0 [ 310.441773][ T4417] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 310.491597][ T4417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 310.522748][ T7276] FAULT_INJECTION: forcing a failure. [ 310.522748][ T7276] name failslab, interval 1, probability 0, space 0, times 0 [ 310.533309][ T4417] usb 4-1: SerialNumber: syz [ 310.562807][ T7276] CPU: 0 PID: 7276 Comm: syz.2.755 Not tainted syzkaller #0 [ 310.570137][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.573461][ T4417] usb 4-1: config 0 descriptor?? [ 310.580184][ T7276] Call Trace: [ 310.580195][ T7276] [ 310.580204][ T7276] dump_stack_lvl+0x168/0x22e [ 310.580229][ T7276] ? show_regs_print_info+0x12/0x12 [ 310.580246][ T7276] ? load_image+0x3b0/0x3b0 [ 310.580269][ T7276] ? __might_sleep+0xd0/0xd0 [ 310.580290][ T7276] ? __lock_acquire+0x7c50/0x7c50 [ 310.580311][ T7276] should_fail_ex+0x399/0x4d0 [ 310.580338][ T7276] should_failslab+0x5/0x20 [ 310.580358][ T7276] slab_pre_alloc_hook+0x59/0x310 [ 310.580376][ T7276] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 310.635271][ T7276] __kmem_cache_alloc_node+0x4f/0x260 [ 310.640667][ T7276] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 310.646407][ T7276] __kmalloc+0xa0/0x240 [ 310.650585][ T7276] tomoyo_realpath_from_path+0xdf/0x5d0 [ 310.656163][ T7276] tomoyo_path_number_perm+0x1e3/0x600 [ 310.661650][ T7276] ? tomoyo_path_number_perm+0x1b6/0x600 [ 310.667292][ T7276] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 310.672749][ T7276] ? ksys_write+0x1bd/0x240 [ 310.677252][ T7276] ? common_file_perm+0x171/0x1c0 [ 310.682292][ T7276] ? __fget_files+0x28/0x4d0 [ 310.686876][ T7276] security_file_ioctl+0x6c/0xa0 [ 310.691805][ T7276] __se_sys_ioctl+0x48/0x170 [ 310.696382][ T7276] do_syscall_64+0x4c/0xa0 [ 310.700787][ T7276] ? clear_bhb_loop+0x60/0xb0 [ 310.705448][ T7276] ? clear_bhb_loop+0x60/0xb0 [ 310.710111][ T7276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 310.715995][ T7276] RIP: 0033:0x7fa02218f6c9 [ 310.720401][ T7276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.739996][ T7276] RSP: 002b:00007fa022f64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.748394][ T7276] RAX: ffffffffffffffda RBX: 00007fa0223e5fa0 RCX: 00007fa02218f6c9 [ 310.756350][ T7276] RDX: 0000000000000000 RSI: 00000000000054a0 RDI: 0000000000000003 [ 310.764305][ T7276] RBP: 00007fa022f64090 R08: 0000000000000000 R09: 0000000000000000 [ 310.772263][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.780222][ T7276] R13: 00007fa0223e6038 R14: 00007fa0223e5fa0 R15: 00007ffec5c06dc8 [ 310.788194][ T7276] [ 310.791321][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.807997][ T4417] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 310.827020][ T4417] synaptics_usb: probe of 4-1:0.52 failed with error -5 [ 310.867625][ T7276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 312.228451][ T4330] usb 4-1: USB disconnect, device number 17 [ 312.361226][ T7289] loop0: detected capacity change from 0 to 4096 [ 312.388676][ T7289] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 312.397193][ T7289] ntfs3: loop0: Failed to load $AttrDef -> 0 [ 313.359262][ T7310] FAULT_INJECTION: forcing a failure. [ 313.359262][ T7310] name failslab, interval 1, probability 0, space 0, times 0 [ 313.371970][ T7310] CPU: 0 PID: 7310 Comm: syz.0.763 Not tainted syzkaller #0 [ 313.379262][ T7310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.389324][ T7310] Call Trace: [ 313.392608][ T7310] [ 313.395546][ T7310] dump_stack_lvl+0x168/0x22e [ 313.400241][ T7310] ? show_regs_print_info+0x12/0x12 [ 313.405447][ T7310] ? load_image+0x3b0/0x3b0 [ 313.409970][ T7310] ? __might_sleep+0xd0/0xd0 [ 313.414588][ T7310] ? __lock_acquire+0x7c50/0x7c50 [ 313.419627][ T7310] should_fail_ex+0x399/0x4d0 [ 313.424321][ T7310] should_failslab+0x5/0x20 [ 313.428837][ T7310] slab_pre_alloc_hook+0x59/0x310 [ 313.433856][ T7310] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 313.439569][ T7310] __kmem_cache_alloc_node+0x4f/0x260 [ 313.444928][ T7310] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 313.450632][ T7310] __kmalloc+0xa0/0x240 [ 313.454778][ T7310] tomoyo_realpath_from_path+0xdf/0x5d0 [ 313.460323][ T7310] tomoyo_path_number_perm+0x1e3/0x600 [ 313.465766][ T7310] ? tomoyo_path_number_perm+0x1b6/0x600 [ 313.471398][ T7310] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 313.476841][ T7310] ? ksys_write+0x1bd/0x240 [ 313.481331][ T7310] ? common_file_perm+0x171/0x1c0 [ 313.486366][ T7310] ? __fget_files+0x28/0x4d0 [ 313.490950][ T7310] security_file_ioctl+0x6c/0xa0 [ 313.495877][ T7310] __se_sys_ioctl+0x48/0x170 [ 313.500454][ T7310] do_syscall_64+0x4c/0xa0 [ 313.504860][ T7310] ? clear_bhb_loop+0x60/0xb0 [ 313.509519][ T7310] ? clear_bhb_loop+0x60/0xb0 [ 313.514189][ T7310] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.520241][ T7310] RIP: 0033:0x7fb3d2d8f6c9 [ 313.524651][ T7310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.544241][ T7310] RSP: 002b:00007fb3d3bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.552639][ T7310] RAX: ffffffffffffffda RBX: 00007fb3d2fe5fa0 RCX: 00007fb3d2d8f6c9 [ 313.560599][ T7310] RDX: 0000200000000200 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 313.568555][ T7310] RBP: 00007fb3d3bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 313.576509][ T7310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.584464][ T7310] R13: 00007fb3d2fe6038 R14: 00007fb3d2fe5fa0 R15: 00007ffea424b7a8 [ 313.592445][ T7310] [ 313.595508][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.602248][ T7310] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.481976][ T7323] loop3: detected capacity change from 0 to 1024 [ 315.488931][ T7323] hfsplus: unable to parse mount options [ 315.532013][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 316.140752][ T7331] x_tables: duplicate entry at hook 1 [ 316.223998][ T7333] FAULT_INJECTION: forcing a failure. [ 316.223998][ T7333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.252200][ T7333] CPU: 0 PID: 7333 Comm: syz.3.770 Not tainted syzkaller #0 [ 316.259534][ T7333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 316.269598][ T7333] Call Trace: [ 316.272880][ T7333] [ 316.275810][ T7333] dump_stack_lvl+0x168/0x22e [ 316.280500][ T7333] ? show_regs_print_info+0x12/0x12 [ 316.285707][ T7333] ? load_image+0x3b0/0x3b0 [ 316.290224][ T7333] ? __lock_acquire+0x7c50/0x7c50 [ 316.295260][ T7333] ? mutex_unlock+0x10/0x10 [ 316.299771][ T7333] should_fail_ex+0x399/0x4d0 [ 316.304462][ T7333] _copy_to_user+0x2c/0x130 [ 316.308979][ T7333] rng_dev_read+0x3c5/0x710 [ 316.313510][ T7333] ? hwrng_yield+0x20/0x20 [ 316.317950][ T7333] ? common_file_perm+0x171/0x1c0 [ 316.322992][ T7333] ? fsnotify_perm+0x39b/0x550 [ 316.327771][ T7333] ? hwrng_yield+0x20/0x20 [ 316.332210][ T7333] vfs_read+0x2c0/0x920 [ 316.336379][ T7333] ? kernel_read+0x1e0/0x1e0 [ 316.340989][ T7333] ? __fget_files+0x28/0x4d0 [ 316.345589][ T7333] ? __fget_files+0x44a/0x4d0 [ 316.350287][ T7333] ? __fdget_pos+0x1d4/0x360 [ 316.354884][ T7333] ? ksys_read+0x71/0x240 [ 316.359224][ T7333] ksys_read+0x143/0x240 [ 316.363467][ T7333] ? vfs_write+0x960/0x960 [ 316.367916][ T7333] ? lockdep_hardirqs_on+0x94/0x140 [ 316.373112][ T7333] do_syscall_64+0x4c/0xa0 [ 316.377522][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 316.382187][ T7333] ? clear_bhb_loop+0x60/0xb0 [ 316.386852][ T7333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.392735][ T7333] RIP: 0033:0x7fb96d58f6c9 [ 316.397137][ T7333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.416729][ T7333] RSP: 002b:00007fb96b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.425133][ T7333] RAX: ffffffffffffffda RBX: 00007fb96d7e5fa0 RCX: 00007fb96d58f6c9 [ 316.433093][ T7333] RDX: 00000000fffffdb2 RSI: 0000200000002c80 RDI: 0000000000000004 [ 316.441050][ T7333] RBP: 00007fb96b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 316.449008][ T7333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.456962][ T7333] R13: 00007fb96d7e6038 R14: 00007fb96d7e5fa0 R15: 00007ffe49e98188 [ 316.464936][ T7333] [ 316.468003][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.526109][ T7335] netlink: 96 bytes leftover after parsing attributes in process `syz.2.773'. [ 316.948890][ T7337] loop4: detected capacity change from 0 to 2048 [ 317.043307][ T7337] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 317.093957][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.100382][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.123902][ T4258] udevd[4258]: incorrect nilfs2 checksum on /dev/loop4 [ 317.139161][ T7345] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.233039][ T7347] FAULT_INJECTION: forcing a failure. [ 317.233039][ T7347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.588080][ T7347] CPU: 1 PID: 7347 Comm: syz.3.778 Not tainted syzkaller #0 [ 317.595410][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 317.605469][ T7347] Call Trace: [ 317.608762][ T7347] [ 317.611695][ T7347] dump_stack_lvl+0x168/0x22e [ 317.616387][ T7347] ? show_regs_print_info+0x12/0x12 [ 317.621596][ T7347] ? load_image+0x3b0/0x3b0 [ 317.626114][ T7347] ? __lock_acquire+0x7c50/0x7c50 [ 317.631154][ T7347] should_fail_ex+0x399/0x4d0 [ 317.635845][ T7347] _copy_from_user+0x2c/0x170 [ 317.640716][ T7347] core_sys_select+0x4d0/0x8b0 [ 317.645506][ T7347] ? poll_select_set_timeout+0x150/0x150 [ 317.651173][ T7347] ? sigprocmask+0x190/0x190 [ 317.655776][ T7347] ? __fget_files+0x44a/0x4d0 [ 317.660473][ T7347] __se_sys_pselect6+0x2ed/0x3a0 [ 317.665430][ T7347] ? __x64_sys_pselect6+0xf0/0xf0 [ 317.670470][ T7347] ? __x64_sys_pselect6+0x1d/0xf0 [ 317.675517][ T7347] do_syscall_64+0x4c/0xa0 [ 317.679939][ T7347] ? clear_bhb_loop+0x60/0xb0 [ 317.684627][ T7347] ? clear_bhb_loop+0x60/0xb0 [ 317.689309][ T7347] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.695190][ T7347] RIP: 0033:0x7fb96d58f6c9 [ 317.699596][ T7347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.719191][ T7347] RSP: 002b:00007fb96b7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 317.727593][ T7347] RAX: ffffffffffffffda RBX: 00007fb96d7e5fa0 RCX: 00007fb96d58f6c9 [ 317.735550][ T7347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000040 [ 317.743509][ T7347] RBP: 00007fb96b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 317.751480][ T7347] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 317.759443][ T7347] R13: 00007fb96d7e6038 R14: 00007fb96d7e5fa0 R15: 00007ffe49e98188 [ 317.767413][ T7347] [ 318.978574][ T7367] FAULT_INJECTION: forcing a failure. [ 318.978574][ T7367] name failslab, interval 1, probability 0, space 0, times 0 [ 318.991848][ T7367] CPU: 0 PID: 7367 Comm: syz.4.783 Not tainted syzkaller #0 [ 318.999152][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 319.009206][ T7367] Call Trace: [ 319.012500][ T7367] [ 319.015440][ T7367] dump_stack_lvl+0x168/0x22e [ 319.020133][ T7367] ? show_regs_print_info+0x12/0x12 [ 319.025342][ T7367] ? load_image+0x3b0/0x3b0 [ 319.029866][ T7367] ? __might_sleep+0xd0/0xd0 [ 319.034472][ T7367] ? __lock_acquire+0x7c50/0x7c50 [ 319.039513][ T7367] should_fail_ex+0x399/0x4d0 [ 319.044205][ T7367] should_failslab+0x5/0x20 [ 319.048720][ T7367] slab_pre_alloc_hook+0x59/0x310 [ 319.053748][ T7367] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 319.059494][ T7367] __kmem_cache_alloc_node+0x4f/0x260 [ 319.064880][ T7367] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 319.070608][ T7367] __kmalloc+0xa0/0x240 [ 319.074777][ T7367] tomoyo_realpath_from_path+0xdf/0x5d0 [ 319.080346][ T7367] tomoyo_path_number_perm+0x1e3/0x600 [ 319.085822][ T7367] ? tomoyo_path_number_perm+0x1b6/0x600 [ 319.091469][ T7367] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 319.096944][ T7367] ? ksys_write+0x1bd/0x240 [ 319.101455][ T7367] ? common_file_perm+0x171/0x1c0 [ 319.106523][ T7367] ? __fget_files+0x28/0x4d0 [ 319.111135][ T7367] security_file_ioctl+0x6c/0xa0 [ 319.116084][ T7367] __se_sys_ioctl+0x48/0x170 [ 319.120680][ T7367] do_syscall_64+0x4c/0xa0 [ 319.125099][ T7367] ? clear_bhb_loop+0x60/0xb0 [ 319.129774][ T7367] ? clear_bhb_loop+0x60/0xb0 [ 319.134554][ T7367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.140466][ T7367] RIP: 0033:0x7f63b618f6c9 [ 319.144891][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.164507][ T7367] RSP: 002b:00007f63b43b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.172929][ T7367] RAX: ffffffffffffffda RBX: 00007f63b63e6180 RCX: 00007f63b618f6c9 [ 319.180904][ T7367] RDX: 0000200000000200 RSI: 00000000c05064a7 RDI: 0000000000000005 [ 319.188883][ T7367] RBP: 00007f63b43b4090 R08: 0000000000000000 R09: 0000000000000000 [ 319.196856][ T7367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.204825][ T7367] R13: 00007f63b63e6218 R14: 00007f63b63e6180 R15: 00007ffe4e4f34f8 [ 319.212813][ T7367] [ 319.215902][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.223044][ T7367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.265122][ T7366] loop0: detected capacity change from 0 to 1024 [ 319.278929][ T7366] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.350996][ T7366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 319.382974][ T7335] loop2: detected capacity change from 0 to 32768 [ 319.420858][ T7335] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.773 (7335) [ 319.434341][ T7366] EXT4-fs error (device loop0): __ext4_remount:6618: comm syz.0.784: Abort forced by user [ 319.477419][ T7366] EXT4-fs (loop0): Remounting filesystem read-only [ 319.484602][ T7335] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 319.567847][ T7335] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 319.579061][ T7335] BTRFS info (device loop2): using free space tree [ 319.587641][ T7366] EXT4-fs (loop0): re-mounted. Quota mode: none. [ 319.917944][ T7335] BTRFS error (device loop2): open_ctree failed: -12 [ 320.206248][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 320.391061][ T7402] loop0: detected capacity change from 0 to 16 [ 320.404051][ T7402] erofs: (device loop0): mounted with root inode @ nid 36. [ 320.422923][ T4534] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4534) [ 322.073514][ T7424] FAULT_INJECTION: forcing a failure. [ 322.073514][ T7424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.086735][ T7424] CPU: 0 PID: 7424 Comm: syz.0.793 Not tainted syzkaller #0 [ 322.094031][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.104085][ T7424] Call Trace: [ 322.107363][ T7424] [ 322.110297][ T7424] dump_stack_lvl+0x168/0x22e [ 322.115509][ T7424] ? show_regs_print_info+0x12/0x12 [ 322.120715][ T7424] ? load_image+0x3b0/0x3b0 [ 322.125227][ T7424] ? __lock_acquire+0x7c50/0x7c50 [ 322.130294][ T7424] ? verify_lock_unused+0x140/0x140 [ 322.135514][ T7424] should_fail_ex+0x399/0x4d0 [ 322.140209][ T7424] _copy_from_user+0x2c/0x170 [ 322.144898][ T7424] ___sys_sendmsg+0x155/0x290 [ 322.149600][ T7424] ? __sys_sendmsg+0x270/0x270 [ 322.154413][ T7424] ? __fdget+0x17c/0x200 [ 322.158668][ T7424] __se_sys_sendmsg+0x19e/0x270 [ 322.163528][ T7424] ? __x64_sys_sendmsg+0x80/0x80 [ 322.168486][ T7424] ? lockdep_hardirqs_on+0x94/0x140 [ 322.173698][ T7424] do_syscall_64+0x4c/0xa0 [ 322.178114][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 322.182790][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 322.187469][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.193363][ T7424] RIP: 0033:0x7fb3d2d8f6c9 [ 322.197778][ T7424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.217386][ T7424] RSP: 002b:00007fb3d3bb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.225808][ T7424] RAX: ffffffffffffffda RBX: 00007fb3d2fe6090 RCX: 00007fb3d2d8f6c9 [ 322.233780][ T7424] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000008 [ 322.241764][ T7424] RBP: 00007fb3d3bb2090 R08: 0000000000000000 R09: 0000000000000000 [ 322.249747][ T7424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.257735][ T7424] R13: 00007fb3d2fe6128 R14: 00007fb3d2fe6090 R15: 00007ffea424b7a8 [ 322.265722][ T7424] [ 322.268841][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.872081][ T7431] FAULT_INJECTION: forcing a failure. [ 322.872081][ T7431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.922899][ T7431] CPU: 0 PID: 7431 Comm: syz.0.797 Not tainted syzkaller #0 [ 322.930239][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.940308][ T7431] Call Trace: [ 322.943596][ T7431] [ 322.946532][ T7431] dump_stack_lvl+0x168/0x22e [ 322.951225][ T7431] ? show_regs_print_info+0x12/0x12 [ 322.956433][ T7431] ? load_image+0x3b0/0x3b0 [ 322.960959][ T7431] ? __lock_acquire+0x7c50/0x7c50 [ 322.966002][ T7431] should_fail_ex+0x399/0x4d0 [ 322.970700][ T7431] _copy_from_user+0x2c/0x170 [ 322.975390][ T7431] iovec_from_user+0x143/0x360 [ 322.980176][ T7431] __import_iovec+0x6d/0x500 [ 322.984779][ T7431] ? __fget_files+0x44a/0x4d0 [ 322.989477][ T7431] import_iovec+0x6f/0xa0 [ 322.993830][ T7431] do_readv+0x201/0x3e0 [ 322.998007][ T7431] ? generic_file_rw_checks+0x270/0x270 [ 323.003590][ T7431] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 323.009588][ T7431] ? lock_chain_count+0x20/0x20 [ 323.014469][ T7431] ? lockdep_hardirqs_on+0x94/0x140 [ 323.019683][ T7431] do_syscall_64+0x4c/0xa0 [ 323.024122][ T7431] ? clear_bhb_loop+0x60/0xb0 [ 323.028817][ T7431] ? clear_bhb_loop+0x60/0xb0 [ 323.033528][ T7431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.039607][ T7431] RIP: 0033:0x7fb3d2d8f6c9 [ 323.044032][ T7431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.063656][ T7431] RSP: 002b:00007fb3d3bd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 323.072092][ T7431] RAX: ffffffffffffffda RBX: 00007fb3d2fe5fa0 RCX: 00007fb3d2d8f6c9 [ 323.080101][ T7431] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 323.088090][ T7431] RBP: 00007fb3d3bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 323.096086][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.104079][ T7431] R13: 00007fb3d2fe6038 R14: 00007fb3d2fe5fa0 R15: 00007ffea424b7a8 [ 323.112090][ T7431] [ 323.115239][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.817611][ T4417] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 324.067521][ T4417] usb 2-1: Using ep0 maxpacket: 32 [ 324.081939][ T4417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.289112][ T4417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.421890][ T4417] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 324.517786][ T4417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.981650][ T7448] FAULT_INJECTION: forcing a failure. [ 324.981650][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 324.994426][ T7448] CPU: 1 PID: 7448 Comm: syz.2.803 Not tainted syzkaller #0 [ 325.001714][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.011760][ T7448] Call Trace: [ 325.015029][ T7448] [ 325.017974][ T7448] dump_stack_lvl+0x168/0x22e [ 325.022645][ T7448] ? show_regs_print_info+0x12/0x12 [ 325.027837][ T7448] ? load_image+0x3b0/0x3b0 [ 325.032338][ T7448] ? __might_sleep+0xd0/0xd0 [ 325.036922][ T7448] ? __lock_acquire+0x7c50/0x7c50 [ 325.041939][ T7448] should_fail_ex+0x399/0x4d0 [ 325.046612][ T7448] should_failslab+0x5/0x20 [ 325.051102][ T7448] slab_pre_alloc_hook+0x59/0x310 [ 325.056117][ T7448] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 325.061828][ T7448] __kmem_cache_alloc_node+0x4f/0x260 [ 325.067193][ T7448] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 325.072900][ T7448] __kmalloc+0xa0/0x240 [ 325.077048][ T7448] tomoyo_realpath_from_path+0xdf/0x5d0 [ 325.082590][ T7448] tomoyo_path_number_perm+0x1e3/0x600 [ 325.088036][ T7448] ? tomoyo_path_number_perm+0x1b6/0x600 [ 325.093655][ T7448] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 325.099099][ T7448] ? lockdep_hardirqs_on+0x94/0x140 [ 325.104287][ T7448] ? finish_task_switch+0x265/0x8f0 [ 325.109491][ T7448] ? __fget_files+0x28/0x4d0 [ 325.114076][ T7448] security_file_ioctl+0x6c/0xa0 [ 325.119028][ T7448] __se_sys_ioctl+0x48/0x170 [ 325.123616][ T7448] do_syscall_64+0x4c/0xa0 [ 325.128019][ T7448] ? clear_bhb_loop+0x60/0xb0 [ 325.132681][ T7448] ? clear_bhb_loop+0x60/0xb0 [ 325.137354][ T7448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 325.143239][ T7448] RIP: 0033:0x7fa02218f6c9 [ 325.147641][ T7448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.167237][ T7448] RSP: 002b:00007fa0203f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.175638][ T7448] RAX: ffffffffffffffda RBX: 00007fa0223e6180 RCX: 00007fa02218f6c9 [ 325.183597][ T7448] RDX: 0000200000000840 RSI: 000000000000890b RDI: 0000000000000003 [ 325.191566][ T7448] RBP: 00007fa0203f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.199522][ T7448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.207477][ T7448] R13: 00007fa0223e6218 R14: 00007fa0223e6180 R15: 00007ffec5c06dc8 [ 325.215448][ T7448] [ 325.218705][ T7448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.418489][ T4417] usb 2-1: config 0 descriptor?? [ 325.425336][ T4417] hub 2-1:0.0: USB hub found [ 325.506930][ T14] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 325.514773][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 325.514785][ T27] audit: type=1326 audit(1762793066.110:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 325.559706][ T27] audit: type=1326 audit(1762793066.110:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 325.689395][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.233189][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.378285][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 326.607570][ T14] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 326.618296][ T4417] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 326.628758][ T14] usb 5-1: config 0 has no interface number 0 [ 326.634882][ T14] usb 5-1: config 0 interface 35 altsetting 2 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 326.661516][ T27] audit: type=1326 audit(1762793066.110:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 326.750548][ T14] usb 5-1: config 0 interface 35 has no altsetting 0 [ 326.762505][ T7464] 9pnet_fd: Insufficient options for proto=fd [ 326.895038][ T7466] FAULT_INJECTION: forcing a failure. [ 326.895038][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.975887][ T7463] netlink: 32 bytes leftover after parsing attributes in process `syz.2.806'. [ 327.008661][ T27] audit: type=1326 audit(1762793066.110:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 327.083876][ T7463] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 327.183232][ T7466] CPU: 0 PID: 7466 Comm: syz.0.808 Not tainted syzkaller #0 [ 327.190577][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 327.200644][ T7466] Call Trace: [ 327.203930][ T7466] [ 327.206866][ T7466] dump_stack_lvl+0x168/0x22e [ 327.211584][ T7466] ? show_regs_print_info+0x12/0x12 [ 327.216792][ T7466] ? load_image+0x3b0/0x3b0 [ 327.221308][ T7466] ? __lock_acquire+0x7c50/0x7c50 [ 327.226345][ T7466] ? verify_lock_unused+0x140/0x140 [ 327.231555][ T7466] should_fail_ex+0x399/0x4d0 [ 327.236253][ T7466] _copy_from_user+0x2c/0x170 [ 327.240938][ T7466] ___sys_recvmsg+0x12b/0x510 [ 327.245629][ T7466] ? __sys_recvmsg+0x270/0x270 [ 327.250416][ T7466] ? __fget_files+0x44a/0x4d0 [ 327.255107][ T7466] ? __fdget+0x17c/0x200 [ 327.259357][ T7466] ? do_recvmmsg+0x176/0x7d0 [ 327.263958][ T7466] do_recvmmsg+0x359/0x7d0 [ 327.268386][ T7466] ? file_end_write+0x156/0x250 [ 327.273247][ T7466] ? __sys_recvmmsg+0x280/0x280 [ 327.278100][ T7466] ? vfs_write+0x56f/0x960 [ 327.282541][ T7466] ? mutex_unlock+0x10/0x10 [ 327.287069][ T7466] ? __fget_files+0x44a/0x4d0 [ 327.291771][ T7466] __x64_sys_recvmmsg+0x18d/0x240 [ 327.296878][ T7466] ? do_recvmmsg+0x7d0/0x7d0 [ 327.301488][ T7466] ? lockdep_hardirqs_on+0x94/0x140 [ 327.306708][ T7466] do_syscall_64+0x4c/0xa0 [ 327.311132][ T7466] ? clear_bhb_loop+0x60/0xb0 [ 327.315815][ T7466] ? clear_bhb_loop+0x60/0xb0 [ 327.320499][ T7466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 327.326409][ T7466] RIP: 0033:0x7fb3d2d8f6c9 [ 327.330830][ T7466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.350452][ T7466] RSP: 002b:00007fb3d3bd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 327.358878][ T7466] RAX: ffffffffffffffda RBX: 00007fb3d2fe5fa0 RCX: 00007fb3d2d8f6c9 [ 327.366853][ T7466] RDX: 040000000000013c RSI: 00002000000034c0 RDI: 0000000000000005 [ 327.374841][ T7466] RBP: 00007fb3d3bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 327.382885][ T7466] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 327.390882][ T7466] R13: 00007fb3d2fe6038 R14: 00007fb3d2fe5fa0 R15: 00007ffea424b7a8 [ 327.398880][ T7466] [ 327.587654][ T27] audit: type=1326 audit(1762793066.110:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 327.867638][ T27] audit: type=1326 audit(1762793066.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 328.121263][ T14] usb 5-1: string descriptor 0 read error: -71 [ 328.145138][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6a.c2 [ 328.279502][ T27] audit: type=1326 audit(1762793066.130:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 328.309499][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.466219][ T14] usb 5-1: config 0 descriptor?? [ 328.607250][ T14] usb 5-1: can't set config #0, error -71 [ 328.701517][ T27] audit: type=1326 audit(1762793066.130:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 328.822805][ T14] usb 5-1: USB disconnect, device number 19 [ 329.153764][ T27] audit: type=1326 audit(1762793066.130:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb96d5c1f85 code=0x7ffc0000 [ 329.532754][ T27] audit: type=1326 audit(1762793066.140:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7449 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb96d58f6c9 code=0x7ffc0000 [ 329.856465][ T4417] usbhid 2-1:0.0: can't add hid device: -71 [ 330.112969][ T4417] usbhid: probe of 2-1:0.0 failed with error -71 [ 330.168787][ T4417] usb 2-1: USB disconnect, device number 21 [ 331.374879][ T7495] xt_hashlimit: size too large, truncated to 1048576 [ 331.395548][ T7495] xt_hashlimit: max too large, truncated to 1048576 [ 331.516007][ T7497] FAULT_INJECTION: forcing a failure. [ 331.516007][ T7497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.529324][ T7497] CPU: 0 PID: 7497 Comm: syz.0.817 Not tainted syzkaller #0 [ 331.536590][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 331.546627][ T7497] Call Trace: [ 331.549891][ T7497] [ 331.552805][ T7497] dump_stack_lvl+0x168/0x22e [ 331.557466][ T7497] ? show_regs_print_info+0x12/0x12 [ 331.562665][ T7497] ? load_image+0x3b0/0x3b0 [ 331.567174][ T7497] ? __lock_acquire+0x7c50/0x7c50 [ 331.572209][ T7497] should_fail_ex+0x399/0x4d0 [ 331.576909][ T7497] _copy_from_user+0x2c/0x170 [ 331.581576][ T7497] __sys_connect+0x132/0x410 [ 331.586154][ T7497] ? __sys_connect_file+0x170/0x170 [ 331.591349][ T7497] __x64_sys_connect+0x76/0x80 [ 331.596103][ T7497] do_syscall_64+0x4c/0xa0 [ 331.600503][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 331.605168][ T7497] ? clear_bhb_loop+0x60/0xb0 [ 331.609839][ T7497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.615715][ T7497] RIP: 0033:0x7fb3d2d8f6c9 [ 331.620116][ T7497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.639712][ T7497] RSP: 002b:00007fb3d3bd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 331.648110][ T7497] RAX: ffffffffffffffda RBX: 00007fb3d2fe5fa0 RCX: 00007fb3d2d8f6c9 [ 331.656064][ T7497] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000004 [ 331.664016][ T7497] RBP: 00007fb3d3bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 331.671967][ T7497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.679922][ T7497] R13: 00007fb3d2fe6038 R14: 00007fb3d2fe5fa0 R15: 00007ffea424b7a8 [ 331.687905][ T7497] [ 331.690914][ C0] vkms_vblank_simulate: vblank timer overrun [ 332.651318][ T7479] loop3: detected capacity change from 0 to 32768 [ 332.670598][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 332.706716][ T7503] loop0: detected capacity change from 0 to 40427 [ 332.727888][ T7503] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 332.735692][ T7503] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 332.752045][ T7503] F2FS-fs (loop0): invalid crc value [ 332.824895][ T7503] F2FS-fs (loop0): Found nat_bits in checkpoint [ 332.881905][ T7479] ialloc: diAlloc returned -5! [ 332.924288][ T7503] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 332.931547][ T7503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 333.062211][ T7483] ialloc: diAlloc returned -5! [ 333.093815][ T7485] ialloc: diAlloc returned -5! [ 333.109422][ T7514] ialloc: diAlloc returned -5! [ 333.737418][ T125] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 334.030019][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 334.057407][ T125] usb 2-1: New USB device found, idVendor=1a34, idProduct=f719, bcdDevice= 0.00 [ 334.115229][ T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.169446][ T125] usb 2-1: config 0 descriptor?? [ 335.007897][ T7531] 9pnet_fd: p9_fd_create_unix (7531): problem connecting socket: ./file0: -111 [ 335.272859][ T7538] FAULT_INJECTION: forcing a failure. [ 335.272859][ T7538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.286033][ T7538] CPU: 0 PID: 7538 Comm: syz.0.822 Not tainted syzkaller #0 [ 335.293325][ T7538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 335.303384][ T7538] Call Trace: [ 335.306662][ T7538] [ 335.309591][ T7538] dump_stack_lvl+0x168/0x22e [ 335.314280][ T7538] ? show_regs_print_info+0x12/0x12 [ 335.319479][ T7538] ? load_image+0x3b0/0x3b0 [ 335.323998][ T7538] ? __lock_acquire+0x7c50/0x7c50 [ 335.329032][ T7538] should_fail_ex+0x399/0x4d0 [ 335.333721][ T7538] _copy_to_iter+0x1cf/0x1030 [ 335.338403][ T7538] ? __lock_acquire+0x7c50/0x7c50 [ 335.343437][ T7538] ? iov_iter_init+0x1f0/0x1f0 [ 335.348204][ T7538] ? __virt_addr_valid+0x188/0x540 [ 335.353318][ T7538] ? __virt_addr_valid+0x465/0x540 [ 335.358433][ T7538] ? __phys_addr_symbol+0x2b/0x70 [ 335.363462][ T7538] ? __check_object_size+0x500/0xa40 [ 335.368759][ T7538] __skb_datagram_iter+0xde/0x740 [ 335.373789][ T7538] ? skb_copy_datagram_iter+0x290/0x290 [ 335.379335][ T7538] ? skb_copy_datagram_iter+0x6d/0x290 [ 335.384804][ T7538] skb_copy_datagram_iter+0xd7/0x290 [ 335.390096][ T7538] tun_do_read+0x8fd/0x1e50 [ 335.394618][ T7538] ? tun_get+0x2e0/0x2e0 [ 335.398870][ T7538] ? __lock_acquire+0x7c50/0x7c50 [ 335.403895][ T7538] ? __fsnotify_parent+0x614/0x6e0 [ 335.409015][ T7538] ? do_task_dead+0xd0/0xd0 [ 335.413524][ T7538] ? tun_get+0x1c/0x2e0 [ 335.417687][ T7538] tun_chr_read_iter+0x13a/0x250 [ 335.422635][ T7538] vfs_read+0x434/0x920 [ 335.426799][ T7538] ? kernel_read+0x1e0/0x1e0 [ 335.431394][ T7538] ? __fget_files+0x44a/0x4d0 [ 335.436081][ T7538] ? __fdget_pos+0x1d4/0x360 [ 335.440672][ T7538] ? ksys_read+0x71/0x240 [ 335.445005][ T7538] ksys_read+0x143/0x240 [ 335.449253][ T7538] ? vfs_write+0x960/0x960 [ 335.453690][ T7538] ? lockdep_hardirqs_on+0x94/0x140 [ 335.458894][ T7538] do_syscall_64+0x4c/0xa0 [ 335.463313][ T7538] ? clear_bhb_loop+0x60/0xb0 [ 335.467991][ T7538] ? clear_bhb_loop+0x60/0xb0 [ 335.472677][ T7538] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.478575][ T7538] RIP: 0033:0x7fb3d2d8e0dc [ 335.482991][ T7538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.502603][ T7538] RSP: 002b:00007fb3d3b90bd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.511024][ T7538] RAX: ffffffffffffffda RBX: 00007fb3d2fe6180 RCX: 00007fb3d2d8e0dc [ 335.518998][ T7538] RDX: 00000000000003e8 RSI: 00007fb3d3b90c20 RDI: 00000000000000c8 [ 335.526985][ T7538] RBP: 00007fb3d3b90c20 R08: 0000000000000000 R09: 0000000000000000 [ 335.534975][ T7538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.542968][ T7538] R13: 00007fb3d2fe6218 R14: 00007fb3d2fe6180 R15: 00007ffea424b7a8 [ 335.550976][ T7538] [ 335.554081][ C0] vkms_vblank_simulate: vblank timer overrun [ 336.410950][ T125] usbhid 2-1:0.0: can't add hid device: -71 [ 336.416966][ T125] usbhid: probe of 2-1:0.0 failed with error -71 [ 336.457603][ T125] usb 2-1: USB disconnect, device number 22 [ 336.483463][ T7553] loop3: detected capacity change from 0 to 128 [ 336.539113][ T7555] FAULT_INJECTION: forcing a failure. [ 336.539113][ T7555] name failslab, interval 1, probability 0, space 0, times 0 [ 336.549750][ T7553] EXT4-fs: Ignoring removed oldalloc option [ 336.566430][ T4534] udevd[4534]: incorrect jbd checksum on /dev/loop3 [ 336.575544][ T7555] CPU: 1 PID: 7555 Comm: syz.4.831 Not tainted syzkaller #0 [ 336.582862][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.592933][ T7555] Call Trace: [ 336.596219][ T7555] [ 336.597936][ T7553] ext4: Bad value for 'commit' [ 336.599142][ T7555] dump_stack_lvl+0x168/0x22e [ 336.608571][ T7555] ? show_regs_print_info+0x12/0x12 [ 336.613787][ T7555] ? load_image+0x3b0/0x3b0 [ 336.618309][ T7555] ? __might_sleep+0xd0/0xd0 [ 336.622906][ T7555] ? __lock_acquire+0x7c50/0x7c50 [ 336.627920][ T7555] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 336.633543][ T7555] should_fail_ex+0x399/0x4d0 [ 336.638213][ T7555] should_failslab+0x5/0x20 [ 336.642707][ T7555] slab_pre_alloc_hook+0x59/0x310 [ 336.647720][ T7555] kmem_cache_alloc+0x56/0x2f0 [ 336.652470][ T7555] ? getname_flags+0xb7/0x500 [ 336.657141][ T7555] getname_flags+0xb7/0x500 [ 336.661637][ T7555] __x64_sys_rename+0x5b/0x90 [ 336.666301][ T7555] do_syscall_64+0x4c/0xa0 [ 336.670705][ T7555] ? clear_bhb_loop+0x60/0xb0 [ 336.675380][ T7555] ? clear_bhb_loop+0x60/0xb0 [ 336.680044][ T7555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.685922][ T7555] RIP: 0033:0x7f63b618f6c9 [ 336.690322][ T7555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.709924][ T7555] RSP: 002b:00007f63b43b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 336.718325][ T7555] RAX: ffffffffffffffda RBX: 00007f63b63e6180 RCX: 00007f63b618f6c9 [ 336.726298][ T7555] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000280 [ 336.734264][ T7555] RBP: 00007f63b43b4090 R08: 0000000000000000 R09: 0000000000000000 [ 336.742248][ T7555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.750210][ T7555] R13: 00007f63b63e6218 R14: 00007f63b63e6180 R15: 00007ffe4e4f34f8 [ 336.758182][ T7555] [ 337.059601][ T7559] loop3: detected capacity change from 0 to 1024 [ 337.694868][ T7568] loop0: detected capacity change from 0 to 128 [ 337.718830][ T7568] ext4: Unknown parameter 'obj_role' [ 338.047121][ T7568] loop0: detected capacity change from 0 to 8192 [ 338.115927][ T7568] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 338.139319][ T7568] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 338.169196][ T7566] FAULT_INJECTION: forcing a failure. [ 338.169196][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.172071][ T7568] REISERFS (device loop0): using ordered data mode [ 338.193861][ T7568] reiserfs: using flush barriers [ 338.202399][ T7568] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 338.224382][ T7568] REISERFS (device loop0): checking transaction log (loop0) [ 338.234113][ T7566] CPU: 0 PID: 7566 Comm: syz.3.836 Not tainted syzkaller #0 [ 338.241431][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 338.251503][ T7566] Call Trace: [ 338.254796][ T7566] [ 338.257738][ T7566] dump_stack_lvl+0x168/0x22e [ 338.262434][ T7566] ? show_regs_print_info+0x12/0x12 [ 338.267647][ T7566] ? load_image+0x3b0/0x3b0 [ 338.272202][ T7566] ? __lock_acquire+0x7c50/0x7c50 [ 338.272232][ T7566] should_fail_ex+0x399/0x4d0 [ 338.272255][ T7566] _copy_from_user+0x2c/0x170 [ 338.272274][ T7566] iovec_from_user+0x143/0x360 [ 338.272297][ T7566] __import_iovec+0x6d/0x500 [ 338.272315][ T7566] ? __fget_files+0x44a/0x4d0 [ 338.272340][ T7566] import_iovec+0x6f/0xa0 [ 338.272362][ T7566] do_readv+0x201/0x3e0 [ 338.272386][ T7566] ? generic_file_rw_checks+0x270/0x270 [ 338.272418][ T7566] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 338.272440][ T7566] ? lock_chain_count+0x20/0x20 [ 338.325709][ T7566] ? lockdep_hardirqs_on+0x94/0x140 [ 338.330929][ T7566] do_syscall_64+0x4c/0xa0 [ 338.335359][ T7566] ? clear_bhb_loop+0x60/0xb0 [ 338.340049][ T7566] ? clear_bhb_loop+0x60/0xb0 [ 338.344744][ T7566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.350652][ T7566] RIP: 0033:0x7fb96d58f6c9 [ 338.355084][ T7566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.374795][ T7566] RSP: 002b:00007fb96b7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 338.383233][ T7566] RAX: ffffffffffffffda RBX: 00007fb96d7e5fa0 RCX: 00007fb96d58f6c9 [ 338.391225][ T7566] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 338.399214][ T7566] RBP: 00007fb96b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.407204][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.415194][ T7566] R13: 00007fb96d7e6038 R14: 00007fb96d7e5fa0 R15: 00007ffe49e98188 [ 338.423199][ T7566] [ 338.426240][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.552803][ T7568] REISERFS (device loop0): Using tea hash to sort names [ 338.575976][ T7568] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 338.679729][ T7568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.837'. [ 340.113072][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 340.295868][ T7591] FAULT_INJECTION: forcing a failure. [ 340.295868][ T7591] name failslab, interval 1, probability 0, space 0, times 0 [ 340.482245][ T7591] CPU: 0 PID: 7591 Comm: syz.1.843 Not tainted syzkaller #0 [ 340.489582][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 340.499655][ T7591] Call Trace: [ 340.502950][ T7591] [ 340.505887][ T7591] dump_stack_lvl+0x168/0x22e [ 340.510585][ T7591] ? show_regs_print_info+0x12/0x12 [ 340.515792][ T7591] ? load_image+0x3b0/0x3b0 [ 340.520319][ T7591] ? __lock_acquire+0x7c50/0x7c50 [ 340.525366][ T7591] should_fail_ex+0x399/0x4d0 [ 340.530064][ T7591] should_failslab+0x5/0x20 [ 340.534586][ T7591] slab_pre_alloc_hook+0x59/0x310 [ 340.539624][ T7591] ? alloc_pipe_info+0xe4/0x4b0 [ 340.544493][ T7591] __kmem_cache_alloc_node+0x4f/0x260 [ 340.549874][ T7591] ? alloc_pipe_info+0xe4/0x4b0 [ 340.554736][ T7591] kmalloc_trace+0x26/0xe0 [ 340.559161][ T7591] alloc_pipe_info+0xe4/0x4b0 [ 340.563836][ T7591] splice_direct_to_actor+0x91f/0xb60 [ 340.569204][ T7591] ? aa_path_link+0x850/0x850 [ 340.573868][ T7591] ? aa_file_perm+0x3ef/0xec0 [ 340.578529][ T7591] ? direct_file_splice_eof+0xa0/0xa0 [ 340.583888][ T7591] ? pipe_to_sendpage+0x310/0x310 [ 340.588902][ T7591] ? common_file_perm+0x171/0x1c0 [ 340.593917][ T7591] ? fsnotify_perm+0x5a/0x550 [ 340.598581][ T7591] ? security_file_permission+0x75/0xa0 [ 340.604117][ T7591] do_splice_direct+0x1b0/0x2b0 [ 340.608963][ T7591] ? splice_direct_to_actor+0xb60/0xb60 [ 340.614500][ T7591] ? do_splice_direct+0x2b0/0x2b0 [ 340.619514][ T7591] ? common_file_perm+0x171/0x1c0 [ 340.624529][ T7591] ? fsnotify_perm+0x5a/0x550 [ 340.629188][ T7591] ? security_file_permission+0x75/0xa0 [ 340.634729][ T7591] do_sendfile+0x5cc/0xeb0 [ 340.639143][ T7591] ? do_pwritev+0x340/0x340 [ 340.643668][ T7591] __se_sys_sendfile64+0x13b/0x190 [ 340.648770][ T7591] ? lock_chain_count+0x20/0x20 [ 340.653610][ T7591] ? __x64_sys_sendfile64+0xa0/0xa0 [ 340.658798][ T7591] ? lockdep_hardirqs_on+0x94/0x140 [ 340.663991][ T7591] do_syscall_64+0x4c/0xa0 [ 340.668392][ T7591] ? clear_bhb_loop+0x60/0xb0 [ 340.673057][ T7591] ? clear_bhb_loop+0x60/0xb0 [ 340.677720][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 340.683596][ T7591] RIP: 0033:0x7f3c4238f6c9 [ 340.687995][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.707589][ T7591] RSP: 002b:00007f3c43286038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 340.715988][ T7591] RAX: ffffffffffffffda RBX: 00007f3c425e6180 RCX: 00007f3c4238f6c9 [ 340.723946][ T7591] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 340.731900][ T7591] RBP: 00007f3c43286090 R08: 0000000000000000 R09: 0000000000000000 [ 340.739858][ T7591] R10: 00000000578410eb R11: 0000000000000246 R12: 0000000000000001 [ 340.747817][ T7591] R13: 00007f3c425e6218 R14: 00007f3c425e6180 R15: 00007ffd7b6f05a8 [ 340.755787][ T7591] [ 340.758860][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.717601][ T7606] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.740167][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.847'. [ 343.657701][ T14] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 343.886504][ T7623] FAULT_INJECTION: forcing a failure. [ 343.886504][ T7623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.899663][ T7623] CPU: 1 PID: 7623 Comm: syz.4.850 Not tainted syzkaller #0 [ 343.906957][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.917010][ T7623] Call Trace: [ 343.920293][ T7623] [ 343.923229][ T7623] dump_stack_lvl+0x168/0x22e [ 343.927919][ T7623] ? show_regs_print_info+0x12/0x12 [ 343.933122][ T7623] ? load_image+0x3b0/0x3b0 [ 343.937633][ T7623] ? __lock_acquire+0x7c50/0x7c50 [ 343.942670][ T7623] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 343.948664][ T7623] should_fail_ex+0x399/0x4d0 [ 343.953360][ T7623] _copy_from_user+0x2c/0x170 [ 343.958050][ T7623] ___sys_sendmsg+0x155/0x290 [ 343.962738][ T7623] ? __sys_sendmsg+0x270/0x270 [ 343.967528][ T7623] ? __schedule+0x10f4/0x40b0 [ 343.972260][ T7623] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 343.978265][ T7623] ? __fdget+0x146/0x200 [ 343.982520][ T7623] __se_sys_sendmsg+0x19e/0x270 [ 343.987387][ T7623] ? __x64_sys_sendmsg+0x80/0x80 [ 343.992344][ T7623] ? syscall_enter_from_user_mode+0x2a/0x80 [ 343.998249][ T7623] do_syscall_64+0x4c/0xa0 [ 344.002669][ T7623] ? clear_bhb_loop+0x60/0xb0 [ 344.007352][ T7623] ? clear_bhb_loop+0x60/0xb0 [ 344.012034][ T7623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.017943][ T7623] RIP: 0033:0x7f63b618f6c9 [ 344.022367][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.041982][ T7623] RSP: 002b:00007f63b43b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.050408][ T7623] RAX: ffffffffffffffda RBX: 00007f63b63e6180 RCX: 00007f63b618f6c9 [ 344.058385][ T7623] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 344.066352][ T7623] RBP: 00007f63b43b4090 R08: 0000000000000000 R09: 0000000000000000 [ 344.074333][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.082308][ T7623] R13: 00007f63b63e6218 R14: 00007f63b63e6180 R15: 00007ffe4e4f34f8 [ 344.090303][ T7623] [ 344.217429][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 344.225009][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.245767][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.271820][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.291036][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 344.314509][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.354163][ T14] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 344.367493][ T14] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 344.397063][ T14] usb 1-1: Manufacturer: syz [ 344.416107][ T14] usb 1-1: config 0 descriptor?? [ 345.089069][ T7641] FAULT_INJECTION: forcing a failure. [ 345.089069][ T7641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.102561][ T7641] CPU: 0 PID: 7641 Comm: syz.4.855 Not tainted syzkaller #0 [ 345.109833][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.119869][ T7641] Call Trace: [ 345.123130][ T7641] [ 345.126040][ T7641] dump_stack_lvl+0x168/0x22e [ 345.130704][ T7641] ? show_regs_print_info+0x12/0x12 [ 345.135901][ T7641] ? load_image+0x3b0/0x3b0 [ 345.140402][ T7641] ? __lock_acquire+0x7c50/0x7c50 [ 345.145418][ T7641] should_fail_ex+0x399/0x4d0 [ 345.150087][ T7641] _copy_from_user+0x2c/0x170 [ 345.154769][ T7641] __sys_connect+0x132/0x410 [ 345.159345][ T7641] ? __sys_connect_file+0x170/0x170 [ 345.164621][ T7641] __x64_sys_connect+0x76/0x80 [ 345.169396][ T7641] do_syscall_64+0x4c/0xa0 [ 345.173801][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 345.178464][ T7641] ? clear_bhb_loop+0x60/0xb0 [ 345.183125][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.189002][ T7641] RIP: 0033:0x7f63b618f6c9 [ 345.193402][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.212992][ T7641] RSP: 002b:00007f63b43d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 345.221387][ T7641] RAX: ffffffffffffffda RBX: 00007f63b63e6090 RCX: 00007f63b618f6c9 [ 345.229342][ T7641] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000007 [ 345.237293][ T7641] RBP: 00007f63b43d5090 R08: 0000000000000000 R09: 0000000000000000 [ 345.245241][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.253192][ T7641] R13: 00007f63b63e6128 R14: 00007f63b63e6090 R15: 00007ffe4e4f34f8 [ 345.261163][ T7641] [ 345.344183][ T14] rc_core: IR keymap rc-hauppauge not found [ 345.360875][ T14] Registered IR keymap rc-empty [ 345.384359][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 346.047550][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 346.070266][ T7647] loop3: detected capacity change from 0 to 2048 [ 346.078875][ T14] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 346.141353][ T14] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 346.344054][ T7647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.994630][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.197451][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.227444][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.264803][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.407567][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.432452][ T7670] FAULT_INJECTION: forcing a failure. [ 347.432452][ T7670] name failslab, interval 1, probability 0, space 0, times 0 [ 347.448650][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.493477][ T7670] CPU: 1 PID: 7670 Comm: syz.4.862 Not tainted syzkaller #0 [ 347.499613][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.500786][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 347.517952][ T7670] Call Trace: [ 347.521312][ T7670] [ 347.524256][ T7670] dump_stack_lvl+0x168/0x22e [ 347.528959][ T7670] ? show_regs_print_info+0x12/0x12 [ 347.534173][ T7670] ? load_image+0x3b0/0x3b0 [ 347.538689][ T7670] ? __might_sleep+0xd0/0xd0 [ 347.543289][ T7670] ? __lock_acquire+0x7c50/0x7c50 [ 347.548401][ T7670] should_fail_ex+0x399/0x4d0 [ 347.553104][ T7670] should_failslab+0x5/0x20 [ 347.553759][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.557613][ T7670] slab_pre_alloc_hook+0x59/0x310 [ 347.557644][ T7670] kmem_cache_alloc_lru+0x49/0x2e0 [ 347.557659][ T7670] ? sock_alloc_inode+0x24/0xc0 [ 347.557683][ T7670] sock_alloc_inode+0x24/0xc0 [ 347.557701][ T7670] ? sockfs_init_fs_context+0xa0/0xa0 [ 347.589786][ T7670] new_inode_pseudo+0x5f/0x1c0 [ 347.594574][ T7670] do_accept+0x157/0x6a0 [ 347.598831][ T7670] ? __lock_acquire+0x7c50/0x7c50 [ 347.603861][ T7670] ? do_raw_spin_lock+0x11d/0x280 [ 347.608881][ T7670] ? __ia32_sys_listen+0x60/0x60 [ 347.613819][ T7670] __sys_accept4+0x97/0x100 [ 347.618311][ T7670] __x64_sys_accept+0x79/0x90 [ 347.622981][ T7670] do_syscall_64+0x4c/0xa0 [ 347.627386][ T7670] ? clear_bhb_loop+0x60/0xb0 [ 347.632050][ T7670] ? clear_bhb_loop+0x60/0xb0 [ 347.636714][ T7670] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.642594][ T7670] RIP: 0033:0x7f63b618f6c9 [ 347.646998][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.666595][ T7670] RSP: 002b:00007f63b43f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 347.675022][ T7670] RAX: ffffffffffffffda RBX: 00007f63b63e5fa0 RCX: 00007f63b618f6c9 [ 347.682993][ T7670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.690964][ T7670] RBP: 00007f63b43f6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.698951][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.706913][ T7670] R13: 00007f63b63e6038 R14: 00007f63b63e5fa0 R15: 00007ffe4e4f34f8 [ 347.714886][ T7670] [ 347.718040][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.754373][ T14] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 347.781154][ T7669] [ 347.783495][ T7669] ====================================================== [ 347.790504][ T7669] WARNING: possible circular locking dependency detected [ 347.797532][ T7669] syzkaller #0 Not tainted [ 347.801947][ T7669] ------------------------------------------------------ [ 347.808961][ T7669] syz.4.862/7669 is trying to acquire lock: [ 347.814852][ T7669] ffff8880797f1458 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xd4/0xa60 [ 347.826263][ T7669] [ 347.826263][ T7669] but task is already holding lock: [ 347.833615][ T7669] ffff8880287f8130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 347.842562][ T7669] [ 347.842562][ T7669] which lock already depends on the new lock. [ 347.842562][ T7669] [ 347.852968][ T7669] [ 347.852968][ T7669] the existing dependency chain (in reverse order) is: [ 347.861972][ T7669] [ 347.861972][ T7669] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 347.869687][ T7669] lock_sock_nested+0x44/0x100 [ 347.874958][ T7669] smc_listen_out+0x109/0x3d0 [ 347.880141][ T7669] process_one_work+0x898/0x1160 [ 347.885581][ T7669] worker_thread+0xaa2/0x1250 [ 347.890760][ T7669] kthread+0x29d/0x330 [ 347.895331][ T7669] ret_from_fork+0x1f/0x30 [ 347.900263][ T7669] [ 347.900263][ T7669] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 347.910433][ T7669] __lock_acquire+0x2cf8/0x7c50 [ 347.915816][ T7669] lock_acquire+0x1b4/0x490 [ 347.920846][ T7669] __flush_work+0xed/0xa60 [ 347.925790][ T7669] __cancel_work_timer+0x3ac/0x520 [ 347.931442][ T7669] smc_clcsock_release+0x5c/0xe0 [ 347.936905][ T7669] __smc_release+0x661/0x7d0 [ 347.942000][ T7669] smc_close_non_accepted+0xd1/0x1f0 [ 347.947791][ T7669] smc_close_active+0xb00/0xea0 [ 347.953146][ T7669] __smc_release+0x8d/0x7d0 [ 347.958155][ T7669] smc_release+0x2ca/0x530 [ 347.963074][ T7669] sock_close+0xd5/0x240 [ 347.967821][ T7669] __fput+0x22c/0x920 [ 347.972389][ T7669] task_work_run+0x1ca/0x250 [ 347.977485][ T7669] exit_to_user_mode_loop+0xe6/0x110 [ 347.983283][ T7669] exit_to_user_mode_prepare+0xee/0x180 [ 347.989338][ T7669] syscall_exit_to_user_mode+0x16/0x40 [ 347.995303][ T7669] do_syscall_64+0x58/0xa0 [ 348.000224][ T7669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.006620][ T7669] [ 348.006620][ T7669] other info that might help us debug this: [ 348.006620][ T7669] [ 348.016827][ T7669] Possible unsafe locking scenario: [ 348.016827][ T7669] [ 348.024258][ T7669] CPU0 CPU1 [ 348.029606][ T7669] ---- ---- [ 348.034952][ T7669] lock(sk_lock-AF_SMC/1); [ 348.039444][ T7669] lock((work_completion)(&new_smc->smc_listen_work)); [ 348.048880][ T7669] lock(sk_lock-AF_SMC/1); [ 348.055886][ T7669] lock((work_completion)(&new_smc->smc_listen_work)); [ 348.062806][ T7669] [ 348.062806][ T7669] *** DEADLOCK *** [ 348.062806][ T7669] [ 348.070952][ T7669] 2 locks held by syz.4.862/7669: [ 348.075957][ T7669] #0: ffff88807426be10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 348.086131][ T7669] #1: ffff8880287f8130 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 348.095513][ T7669] [ 348.095513][ T7669] stack backtrace: [ 348.101383][ T7669] CPU: 0 PID: 7669 Comm: syz.4.862 Not tainted syzkaller #0 [ 348.108648][ T7669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.118688][ T7669] Call Trace: [ 348.121961][ T7669] [ 348.124877][ T7669] dump_stack_lvl+0x168/0x22e [ 348.129545][ T7669] ? load_image+0x3b0/0x3b0 [ 348.134050][ T7669] ? show_regs_print_info+0x12/0x12 [ 348.139265][ T7669] ? print_circular_bug+0x12b/0x1a0 [ 348.144475][ T7669] check_noncircular+0x274/0x310 [ 348.149408][ T7669] ? add_chain_block+0x940/0x940 [ 348.154334][ T7669] ? lockdep_lock+0xdc/0x1e0 [ 348.158907][ T7669] ? __lock_acquire+0x13c0/0x7c50 [ 348.163922][ T7669] ? _find_first_zero_bit+0xcf/0x100 [ 348.169196][ T7669] __lock_acquire+0x2cf8/0x7c50 [ 348.174040][ T7669] ? __lock_acquire+0x13c0/0x7c50 [ 348.179067][ T7669] ? hlock_conflict+0x59/0x1f0 [ 348.183832][ T7669] ? verify_lock_unused+0x140/0x140 [ 348.189013][ T7669] ? __bfs+0x2a3/0x5c0 [ 348.193067][ T7669] ? check_path+0x40/0x40 [ 348.197384][ T7669] ? mark_lock+0x94/0x320 [ 348.201706][ T7669] ? __lock_acquire+0x13c0/0x7c50 [ 348.206722][ T7669] ? add_chain_block+0x940/0x940 [ 348.211651][ T7669] lock_acquire+0x1b4/0x490 [ 348.216142][ T7669] ? __flush_work+0xd4/0xa60 [ 348.220720][ T7669] ? __lock_acquire+0x13c0/0x7c50 [ 348.225727][ T7669] ? read_lock_is_recursive+0x10/0x10 [ 348.231089][ T7669] ? verify_lock_unused+0x140/0x140 [ 348.236277][ T7669] ? __flush_work+0xd4/0xa60 [ 348.240854][ T7669] __flush_work+0xed/0xa60 [ 348.245261][ T7669] ? __flush_work+0xd4/0xa60 [ 348.249834][ T7669] ? verify_lock_unused+0x140/0x140 [ 348.255014][ T7669] ? flush_work+0x20/0x20 [ 348.259335][ T7669] ? try_to_grab_pending+0xf1/0x840 [ 348.264526][ T7669] ? lockdep_hardirqs_off+0x70/0x100 [ 348.269799][ T7669] ? mark_lock+0x94/0x320 [ 348.274115][ T7669] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 348.280085][ T7669] ? lock_chain_count+0x20/0x20 [ 348.284930][ T7669] ? __cancel_work_timer+0x331/0x520 [ 348.290205][ T7669] __cancel_work_timer+0x3ac/0x520 [ 348.295304][ T7669] ? cancel_work_sync+0x20/0x20 [ 348.300147][ T7669] ? __smc_release+0x659/0x7d0 [ 348.304908][ T7669] ? __local_bh_enable_ip+0x12a/0x1b0 [ 348.310263][ T7669] ? lockdep_hardirqs_on+0x94/0x140 [ 348.315456][ T7669] ? __local_bh_enable_ip+0x12a/0x1b0 [ 348.320812][ T7669] ? _local_bh_enable+0xa0/0xa0 [ 348.325645][ T7669] smc_clcsock_release+0x5c/0xe0 [ 348.330563][ T7669] __smc_release+0x661/0x7d0 [ 348.335130][ T7669] ? do_raw_spin_unlock+0x11d/0x230 [ 348.340318][ T7669] smc_close_non_accepted+0xd1/0x1f0 [ 348.345588][ T7669] smc_close_active+0xb00/0xea0 [ 348.350420][ T7669] ? sock_no_sendpage_locked+0x160/0x160 [ 348.356031][ T7669] __smc_release+0x8d/0x7d0 [ 348.360511][ T7669] ? do_raw_spin_unlock+0x11d/0x230 [ 348.365688][ T7669] smc_release+0x2ca/0x530 [ 348.370086][ T7669] sock_close+0xd5/0x240 [ 348.374348][ T7669] ? sock_mmap+0x90/0x90 [ 348.378573][ T7669] __fput+0x22c/0x920 [ 348.382537][ T7669] task_work_run+0x1ca/0x250 [ 348.387104][ T7669] ? task_work_cancel+0x230/0x230 [ 348.392109][ T7669] ? __close_range+0x1c5/0x730 [ 348.396853][ T7669] ? exit_to_user_mode_loop+0x3b/0x110 [ 348.402293][ T7669] exit_to_user_mode_loop+0xe6/0x110 [ 348.407558][ T7669] exit_to_user_mode_prepare+0xee/0x180 [ 348.413083][ T7669] syscall_exit_to_user_mode+0x16/0x40 [ 348.418524][ T7669] do_syscall_64+0x58/0xa0 [ 348.422918][ T7669] ? clear_bhb_loop+0x60/0xb0 [ 348.427577][ T7669] ? clear_bhb_loop+0x60/0xb0 [ 348.432231][ T7669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.438103][ T7669] RIP: 0033:0x7f63b618f6c9 [ 348.442614][ T7669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.462198][ T7669] RSP: 002b:00007ffe4e4f3658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 348.470601][ T7669] RAX: 0000000000000000 RBX: 00007f63b63e7da0 RCX: 00007f63b618f6c9 [ 348.478641][ T7669] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 348.486589][ T7669] RBP: 00007f63b63e7da0 R08: 0000000000000000 R09: 000000084e4f394f [ 348.494537][ T7669] R10: 000000000003fd9c R11: 0000000000000246 R12: 000000000005501c [ 348.502484][ T7669] R13: 00007f63b63e6090 R14: ffffffffffffffff R15: 00007ffe4e4f3770 [ 348.510442][ T7669] [ 348.515247][ T4268] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 348.524709][ T14] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 348.543036][ T14] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 348.563274][ T14] usb 1-1: USB disconnect, device number 17