last executing test programs: 10.211515235s ago: executing program 2 (id=1308): syz_open_dev$dri(&(0x7f0000000140), 0x4000001, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f00000000c0)=ANY=[], 0x1, 0xa38, &(0x7f0000000a80)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF05XtC42oAjQg1FgPWzAkMsOA3bwMOyyU7DDMGDYYOwwFCvaaemapTcWG5DTpuF9+VCiZNnW4tiSnc/HsL/ky99LPn9o8iUfvgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARPzWl04NHUzb3QoA4EF6aexrQ4e9/wPAh8o5n/8BAAAAAAAAAAAAAGCnS1HEn0SKV3/STheq6x31M63ZK1fHR0Y3321PihS1KKr68m/94KHDR44eOz7czTvv/0F7Ml4eO3eqcXpuZn5hanFxarIxPtu6ODc5teV7uNf9NxqsBqAx89qVyUuXFhuHnju87uarA+/sfmz/wInjL57f160dHxkdHeup6et/349+i1vP8Ojc+a4o4meRov69d1MzImpx72Nxl+fO/ban6sRg1YnxkdGqI9Ot5uxSeWOq5apaxEDPTie7Y/QA5uKeNCKulc0vGzxYdm9svrnQnJieapxtLiy1llpzs6nWaW3Zn4GoxXAtYj4i2sWtd9cfRfxbpPj+e+00ERFFdxyerU4Mvnt7avehj1vQV/atiLgZD8Gc7WC7o4g3IsUPzg/FxTyu1bA9E/HVMp+O+HqZyxHX8/VUPkGeivjlJs8nHi59UcQ/Roq51E6T3bmvXlfOvNL4yuyluZ7a7uvKQ//+8CDt8NemehQxUb3it9P7P9gBAAAAAGDnKeJvIsWNmQNpPnrXFFuzlxvnmhPTnW+Fu9/9N/JeKysrKwOpk42cQzlP5jyb80LO+ZzXcl7P+WbOGznfynkz53LOds6o5cfP2cg5lPNkzrM5L+Scz3kt5/Wcb+a8kfOtnDdzLuds5wzrXgAAAAAAAADsMHuiiB9His/99Teq84qjOi/9YyeGD3z5873njH/qLvdT1j4XETdia+fk9udTh1Ot/PPB94utqUcR387n/313uxsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsq1oU8alI8cM32ilSRDQiLkQnl4vtbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwftRTEacjxS++VK+u34yIT0fE/66UfyJieWWD7W4xAAAAAAAAAHCLVMRQpHj8yXYaiIirA+/sfmz/wInjL57fV0QRqSzprX957Nypxum5mfmFqcXFqcnG+Gzr4tzk1FYfrn6mNXvl6vjI6H3pzF3tuc/t31M/PTf/+kLr8qtLm96+t35qYnFpoXlx85tjT9Qihnq3DFYNHh8ZrRo93WrOVrum2m0aWItobLUzAAAAAAAAADwy9qYijkaKV1tHUnfduK+z5v8rnWvFau2ffWvttwDTG7Kr9/cDW7mcttrQwWrhvTE+Mjo61rO5r//W0rJNKRXxl5HiM7/7RLUenmLvpmvjZd2uSHHsG0dy3cBnyrqT66rqg+Mjo42X5ma/eGp6eu5ic6k5MT3VGJtvXtzyDwcAAAAAAAAA4D7am4r400jxe0M3U/e887z+39e51rP+/xvVEnqlntbnqmpt/6PV2n7n8sdODDdGf+122+/H+n/ZppSK+NdI8fjvP1GdT99d/x/aUFvW/Vek+Jd/eCrX1XaVdQe73enc46XW9NRQymP12We7tVHVHs+1H1+rPVjWfjZS/Pkz62uHc+0n1moPlbV/GCn+5+jmtZ9cqz1c1v5BpPjttxvd2r1l7Zlcu3+t9rmLc9OTdxvWcv7/NlKc/cWXU7fPt53/nt9/XNuQq26Z8ztf/qDmf6Bn27U8rz/O83/wLvP/d5Hij376VK7rjP2hfPvj1b9r8/87keI/f3V97bFcu2+t9uBWu7Xdyvn/QqQ48aMfrfY5z38e2bUZ6p3/T/etz9VnyTbN/+M92wZyuw7/P8fiw2jx9W++1pyenlpwwYV7vfDszmjGw3BhZWVHNOMOF7b7lYkHoXz//6dI8cKZWuoex+T3/490rq0d/7337bX3/xc25Kptev/f17PthXzU0t8XUV+ame/fH1FffP2bX2zNNC9PXZ6aHT529Mjzw8eOPd+/q3tst3Zpy0P3SCjn/0ykeOWn/7z6OWb98d/mx/97N+SqbZr/j/f2ad1xzZaH4kOpnP/rkeI7b7+7+nnzTsf/3c//Bz63Plf//23T/H+iZ1v1G/+PRjzfs+3AJyNObfWxAAAA4BGzN6+T//Gv//3qOe/rP//H57u1vd//3M5OOP8fAAAAAAA+7PamIv4iUvz30BdS9xyyrfz+c3JDrtqm3//t79k2+YDOa9nyIAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EAping6Urz6k3ZaLsrrHfUzrdkrV8dHRjffbU+KFLUoqvryb/3gocNHjh47PtzNO+//QXsyXh47d6pxem5mfmFqcXFqsjE+27o4Nzm15Xt4+bv3tv9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/e/70W+RbrN9VxRxKVLUv/du+vciolZuvMexvMtz537bU3VisOrE+Mho1ZHpVnN2qbwx1XJVLWKgZ6eT3TF6AHNxTxoR18rmlw0eHB/pi7H55kJzYnqqcba5sNRaas3NplqntWV/BqIWwyliPiLaxa131x9FTESK77/XTm8XEUV3HJ59aexrQ4fv3p7afehjr5XvbLq5r+xbEXEzHoI528F2RxEfiRQ/OD8UPys641oN2zMRXy3z6Yivl7kccT1fT+UT5KmIX27yfOLh0hdFnI0Uc6md/qPIcz9YvmyeeaXxldlLcz213deVh/794UHa4a9N9Sji59Urfjv93P9nAAAAAIBHSBG/GSluzBxI1fpg9d3/2HxzoTV7uXGuOTHd+Vo/1fq+9Ved5cfKysrKykDqZCPnUM6TOc/mvJBzPue1nNdzvpnzRs63ct7MuZyznTNq+fFzNnIO5TyZ82zOCznnc17LeT3nmzlv5Hwr582cyznbOcP35AAAAAAAAMAOVIsinogUP3yjnVaKzgLvhejksnXOR97/BQAA//9M1kEh") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000040), 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat(r3, &(0x7f0000000100)='./file0\x00', 0x141000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000000)={0x8000004, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x11}) 9.986060057s ago: executing program 4 (id=1310): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) unshare(0x28020480) r2 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f3, 0x43, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x45}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 9.182191113s ago: executing program 2 (id=1312): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x7}, 0x5, 0xf869, 0x0, 0x0, 0x0, 0x0, 0x90}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000024c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001800)="af0b4e39a7a606955a59b89e6fec4eced4600c417183ce9f4717a847ce61580c43bb75741d08459cd5999dc3badef38bc0d00dd4069fcde420f317054857eed4ddac87f013e9eb9fec0200c17332907bd8b525ab0c38380409ef62ce2196c094016e06182e4cca24391bad6303965f4020171258c24184343617ceef3488cca67fe95a4af27079cbeb346be89062218ddb642af293d4ba11e16745c00841a02be26d6ef47c6d22564327b1baa2eb2a91459d7c5b718f", 0xb6}, {&(0x7f0000002540)="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", 0xf4b}], 0x2, &(0x7f0000001bc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000005700)=""/4103, 0x1001}], 0x1}}], 0x1, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CHANGE_FD(r3, 0x4c02, 0xffffffffffffffff) 8.991843154s ago: executing program 2 (id=1314): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x781800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) flock(r0, 0x8) r1 = fsmount(0xffffffffffffffff, 0x1, 0xe0) syz_io_uring_setup(0x10f, &(0x7f0000000700)={0x0, 0xfffffffe, 0x100, 0x1, 0x0, 0x0, r1}, 0x0, 0x0) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000400)={[{@grpquota}, {@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x78d}}, {@test_dummy_encryption_v1}, {@data_journal}, {@nomblk_io_submit}, {@orlov}]}, 0x1, 0x5d8, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000800)='x', 0xc00}], 0x1) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x52142, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6f24, @empty}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x20100, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c0a0}, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r10 = socket$inet(0x2, 0x2, 0x1) bind$inet(r10, &(0x7f0000000000)={0x2, 0x6f24, @empty}, 0x10) (async) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000000)=[&(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x800, r4, &(0x7f0000000200)='p', 0x1, 0x600, 0x0, 0x2}]) 8.802882685s ago: executing program 2 (id=1315): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, 0x0, 0x0) unshare(0x28020480) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)='|', 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 8.121018961s ago: executing program 2 (id=1324): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x7}, 0x5, 0xf869, 0x0, 0x0, 0x0, 0x0, 0x90}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000024c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001800)="af0b4e39a7a606955a59b89e6fec4eced4600c417183ce9f4717a847ce61580c43bb75741d08459cd5999dc3badef38bc0d00dd4069fcde420f317054857eed4ddac87f013e9eb9fec0200c17332907bd8b525ab0c38380409ef62ce2196c094016e06182e4cca24391bad6303965f4020171258c24184343617ceef3488cca67fe95a4af27079cbeb346be89062218ddb642af293d4ba11e16745c00841a02be26d6ef47c6d22564327b1baa2eb2a91459d7c5b718f", 0xb6}, {&(0x7f0000002540)="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", 0xf4b}], 0x2, &(0x7f0000001bc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CHANGE_FD(r3, 0x4c02, 0xffffffffffffffff) 7.980391482s ago: executing program 2 (id=1325): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="63726561746f723dc9fc1edc2c696f636861727365743d63703836322c636f6465706167653d6d61637475726b6973682c71756965742c706172743d3078303030303030352c00"/80], 0x11, 0x2b6, &(0x7f0000000780)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x57) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5, @ANYBLOB="5afe5ade90922748a8807093d53237d1754cbf5a9a67db0c33b899b64974bbb02ca8d65b6ddbc6eb6cf6f92f5db46fd0bc164af6449d347b76e163a2b8e1925408c3168900"/81], 0x1c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x222003, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, 0x5, 0x8, 0x201, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x8}, [@typed={0x10, 0x13a, 0x0, 0x0, @str='/dev/autofs\x00'}, @generic="23f42cbf7c6cc792adad8377b435e294c7172e3828ac059bcfe7399c1ededb54cbd9710f9274d1f389d4ec991495d976bc19503746ce0624541ac2dbfc680f2780bfca937031912882a7aeab267aae9cac427de685269b88e3be3f8f41c80dc0bb62129fc61c0237e23c3bfb13fbbd04728d4ac5ec53ee1bf586e7f611b984d012e0716edeaed982fd32244bdd6494a448f121966fdfdc000a3e3072b1dfd4d7591a5e43ce"]}, 0xcc}, 0x1, 0x0, 0x0, 0xd0}, 0xc8c4) 6.599406181s ago: executing program 4 (id=1331): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000240)=""/164, 0xa4) lseek(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000b00)="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", 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./bus/file0/file0\x00', 0x180000, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200c00, &(0x7f00000004c0)={[{@grpquota}, {@dax_never}, {@filestreams}, {@nolargeio}, {@ikeep}, {@dax_never}, {@pquota}, {@nolargeio}, {@filestreams}]}, 0x1, 0x9606, &(0x7f0000009680)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus/file0\x00', 0x99cdbdac1d0e4ba0, 0x0, 0x0, 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000006c0)={0x0, 0x9, 0x1, [0x3, 0x46, 0x8, 0x4000000000000009, 0x2], [0x3, 0x8, 0x6, 0x1, 0xe2, 0x93, 0x2, 0x8000000000000000, 0x6, 0x9, 0x3ff, 0x0, 0x79, 0xa, 0x1, 0xdb, 0x8, 0x3, 0x100, 0x1, 0xd75, 0x81, 0x5d, 0xd80a, 0x3, 0x7fff, 0x92b, 0x10001, 0x10000, 0x0, 0x80000000000c, 0xff, 0x300000000000000, 0x5, 0x6, 0xff, 0x4, 0xe, 0x1, 0x6, 0xc96, 0x9, 0x6, 0x4, 0xfffffffffffff412, 0x11c, 0x3, 0x35, 0x1, 0x1ff, 0x9, 0x100800, 0x3a198eec, 0x3, 0x40ae, 0x7, 0x1, 0x1ff, 0x9, 0x7ff, 0xfffffffffffffc01, 0x9f4, 0x5, 0x1, 0x7f, 0x5, 0x80000001, 0xfffffffffffffff9, 0x80000004, 0x127, 0x6, 0x7fffffffffffffff, 0x5, 0x800, 0x7fff, 0x1, 0x81, 0x7, 0x0, 0x5, 0xffffffff, 0x7, 0x2, 0xbc2, 0x2, 0x4, 0x100000001, 0xfffffffffffffffd, 0x2, 0x11ff, 0x0, 0x4, 0x8dd, 0x7, 0x0, 0x8000000000000001, 0xc90, 0x1ff, 0x140000, 0x80000000000, 0x0, 0x3, 0x3, 0x3, 0x401, 0x100, 0x23f83ec, 0xe, 0x80000000, 0x7, 0x8, 0xb, 0x3, 0x5, 0xf, 0x2, 0xfffffffffffffffe, 0x795, 0xffffffff, 0x9, 0x76c]}) fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0) llistxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=""/113, 0x71) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r5 = accept4(r0, 0x0, 0x0, 0x80800) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x3) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000003c0)={&(0x7f0000000080), &(0x7f00000000c0), r7, 0x0, '\x00', 0x8, 0x4}) sendmmsg$alg(r5, &(0x7f0000000040)=[{}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/83, 0x53}], 0x1}, 0x0) 5.207643862s ago: executing program 1 (id=1339): socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a40, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 5.082830443s ago: executing program 1 (id=1340): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x64, 0x10, 0xffffff1f, 0xee020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x35288}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x64}}, 0x4000080) 5.037977393s ago: executing program 1 (id=1341): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) unshare(0x28020480) r2 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f3, 0x43, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x45}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 4.817343265s ago: executing program 4 (id=1344): syz_open_dev$dri(&(0x7f0000000140), 0x4000001, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f00000000c0)=ANY=[], 0x1, 0xa38, &(0x7f0000000a80)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF05XtC42oAjQg1FgPWzAkMsOA3bwMOyyU7DDMGDYYOwwFCvaaemapTcWG5DTpuF9+VCiZNnW4tiSnc/HsL/ky99LPn9o8iUfvgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARPzWl04NHUzb3QoA4EF6aexrQ4e9/wPAh8o5n/8BAAAAAAAAAAAAAGCnS1HEn0SKV3/STheq6x31M63ZK1fHR0Y3321PihS1KKr68m/94KHDR44eOz7czTvv/0F7Ml4eO3eqcXpuZn5hanFxarIxPtu6ODc5teV7uNf9NxqsBqAx89qVyUuXFhuHnju87uarA+/sfmz/wInjL57f160dHxkdHeup6et/349+i1vP8Ojc+a4o4meRov69d1MzImpx72Nxl+fO/ban6sRg1YnxkdGqI9Ot5uxSeWOq5apaxEDPTie7Y/QA5uKeNCKulc0vGzxYdm9svrnQnJieapxtLiy1llpzs6nWaW3Zn4GoxXAtYj4i2sWtd9cfRfxbpPj+e+00ERFFdxyerU4Mvnt7avehj1vQV/atiLgZD8Gc7WC7o4g3IsUPzg/FxTyu1bA9E/HVMp+O+HqZyxHX8/VUPkGeivjlJs8nHi59UcQ/Roq51E6T3bmvXlfOvNL4yuyluZ7a7uvKQ//+8CDt8NemehQxUb3it9P7P9gBAAAAAGDnKeJvIsWNmQNpPnrXFFuzlxvnmhPTnW+Fu9/9N/JeKysrKwOpk42cQzlP5jyb80LO+ZzXcl7P+WbOGznfynkz53LOds6o5cfP2cg5lPNkzrM5L+Scz3kt5/Wcb+a8kfOtnDdzLuds5wzrXgAAAAAAAADsMHuiiB9His/99Teq84qjOi/9YyeGD3z5873njH/qLvdT1j4XETdia+fk9udTh1Ot/PPB94utqUcR387n/313uxsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsq1oU8alI8cM32ilSRDQiLkQnl4vtbh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwftRTEacjxS++VK+u34yIT0fE/66UfyJieWWD7W4xAAAAAAAAAHCLVMRQpHj8yXYaiIirA+/sfmz/wInjL57fV0QRqSzprX957Nypxum5mfmFqcXFqcnG+Gzr4tzk1FYfrn6mNXvl6vjI6H3pzF3tuc/t31M/PTf/+kLr8qtLm96+t35qYnFpoXlx85tjT9Qihnq3DFYNHh8ZrRo93WrOVrum2m0aWItobLUzAAAAAAAAADwy9qYijkaKV1tHUnfduK+z5v8rnWvFau2ffWvttwDTG7Kr9/cDW7mcttrQwWrhvTE+Mjo61rO5r//W0rJNKRXxl5HiM7/7RLUenmLvpmvjZd2uSHHsG0dy3cBnyrqT66rqg+Mjo42X5ma/eGp6eu5ic6k5MT3VGJtvXtzyDwcAAAAAAAAA4D7am4r400jxe0M3U/e887z+39e51rP+/xvVEnqlntbnqmpt/6PV2n7n8sdODDdGf+122+/H+n/ZppSK+NdI8fjvP1GdT99d/x/aUFvW/Vek+Jd/eCrX1XaVdQe73enc46XW9NRQymP12We7tVHVHs+1H1+rPVjWfjZS/Pkz62uHc+0n1moPlbV/GCn+5+jmtZ9cqz1c1v5BpPjttxvd2r1l7Zlcu3+t9rmLc9OTdxvWcv7/NlKc/cWXU7fPt53/nt9/XNuQq26Z8ztf/qDmf6Bn27U8rz/O83/wLvP/d5Hij376VK7rjP2hfPvj1b9r8/87keI/f3V97bFcu2+t9uBWu7Xdyvn/QqQ48aMfrfY5z38e2bUZ6p3/T/etz9VnyTbN/+M92wZyuw7/P8fiw2jx9W++1pyenlpwwYV7vfDszmjGw3BhZWVHNOMOF7b7lYkHoXz//6dI8cKZWuoex+T3/490rq0d/7337bX3/xc25Kptev/f17PthXzU0t8XUV+ame/fH1FffP2bX2zNNC9PXZ6aHT529Mjzw8eOPd+/q3tst3Zpy0P3SCjn/0ykeOWn/7z6OWb98d/mx/97N+SqbZr/j/f2ad1xzZaH4kOpnP/rkeI7b7+7+nnzTsf/3c//Bz63Plf//23T/H+iZ1v1G/+PRjzfs+3AJyNObfWxAAAA4BGzN6+T//Gv//3qOe/rP//H57u1vd//3M5OOP8fAAAAAAA+7PamIv4iUvz30BdS9xyyrfz+c3JDrtqm3//t79k2+YDOa9nyIAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EAping6Urz6k3ZaLsrrHfUzrdkrV8dHRjffbU+KFLUoqvryb/3gocNHjh47PtzNO+//QXsyXh47d6pxem5mfmFqcXFqsjE+27o4Nzm15Xt4+bv3tv9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/e/70W+RbrN9VxRxKVLUv/du+vciolZuvMexvMtz537bU3VisOrE+Mho1ZHpVnN2qbwx1XJVLWKgZ6eT3TF6AHNxTxoR18rmlw0eHB/pi7H55kJzYnqqcba5sNRaas3NplqntWV/BqIWwyliPiLaxa131x9FTESK77/XTm8XEUV3HJ59aexrQ4fv3p7afehjr5XvbLq5r+xbEXEzHoI528F2RxEfiRQ/OD8UPys641oN2zMRXy3z6Yivl7kccT1fT+UT5KmIX27yfOLh0hdFnI0Uc6md/qPIcz9YvmyeeaXxldlLcz213deVh/794UHa4a9N9Sji59Urfjv93P9nAAAAAIBHSBG/GSluzBxI1fpg9d3/2HxzoTV7uXGuOTHd+Vo/1fq+9Ved5cfKysrKykDqZCPnUM6TOc/mvJBzPue1nNdzvpnzRs63ct7MuZyznTNq+fFzNnIO5TyZ82zOCznnc17LeT3nmzlv5Hwr582cyznbOcP35AAAAAAAAMAOVIsinogUP3yjnVaKzgLvhejksnXOR97/BQAA//9M1kEh") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000040), 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat(r3, &(0x7f0000000100)='./file0\x00', 0x141000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000000)={0x8000004, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x11}) 3.675280113s ago: executing program 3 (id=1349): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$eJzs3UuMHEfdAPCe3Z21HTufx/lsYpyQ2ASSCMhuvGvMw4I4ii9YMeIWKeJiOU6wcAzCkSCRpdg+ccORZW6IhzjlEgFCIhdk5cQlErHEJafAgQOWkSxxgAR70M5Wzc78PZOe8T56Z+f3k3pququmq7q3u7dfVVUAY2ui9VlvfV55+/KRfzz69y0L359qp2i0Pqc6xhZS19L4VJjfB5OL4a2b5070CmvFXOszj1/q+O3WoijOF3uLq0Wj2HPl2hvvzj177MLRi/vee/PQ9VVYdAAAGDvfunrowK6//vmBHR++9dDhYlN7ej4/b6Txbem8/3A68V8Ipmr5+mHpeqDWMXSaDumm0jAR0k32SFd0pKvndJu7fxfznw7zrfdJt6kk/8mOaZ3TY7lhFOXtuFHUJma6xicmZmYWr8mL1nX9dG3mzKnTL56tqKDAivvXw0VR7DUYxmSo5+/N7e2doOoyVTh0rAWASsXnhXc4H+8sLE97blOD5X/j6Ynev+9WX8kyMj7WevuXf5x/dznWOv+y5f/1hVVefsbK4FvT5lUtx0rLy5X3o21pPD5HiO8vDXv8yfObDPMb9ASg33OEUXm+0K+ck2tcjrvVr/xxu9iovpbCvB6+HuI795/4Nx2VvzHQ27/X3f3/LUuFq7wsBsPGHppVHnyAapVc1sf35ppJjo/v9cX4TSXxm0vit5TE31MSv7UkHsbZ7175SXGptnSdH6/pb90819pZBr0flu+z3ZvC/xuyPPF+5LD34+J7v8Nabv7xfWJYz/5w/LmTX37h+WuL7//X2tv/7bS9703jjbRvXU0J8v3CeF+9/e5/ozufiT7p7gvlubdH+tb3nd3pajuX5lN0HGfuKMfu7t9t75fuwe50jZBuSxri6VI8P7kn/C6ff+Tjal5fU2F562E5pkM58nFlRwpH62kM61XeHvu9/5+3z91FvfbiqdMnn0zjeTv902R908L0/WtcbmD5Bq3/s7vorv+zrT29PtF5XNi+NL3WeVxohOlzfabPp/H8f+47k1ta02dOfO/0Cyu98DDmzr762nePnz598ge++DJ6X+rroxgb8UvVRyZgtc2+8vL3Z8+++toTp14+/tLJl06emT94cH5u7uBX5g/Mts7rZzvP7oGNZOmfftUlAQAAAAAAAAAAAAb1w6NHrv3lnS+9v1j/f6n+X67/n9/8zfX/fxzq/8d68rkefK4HuKNHfCtNaGB1OqSrp+H/Q3l3hnx2hd99IoXtfvxS/f+cXWzXNZfn/jA9tt+b04XmBO5oL2U6tEES+wv8dAovpvBXBVSo9rPek1NY1r513tZz+xTapRhN+e+W2zPJ7Zjk+t/92nXKx/8dvWf7+kqXk5W1FtUJq15GoLd/rrv2v1dlWGrws/KydFwxDJL+9YrKOV31ehrP4Vaz2VzL/JrNj+vFQ19TwNqpuv/PfN8zh2f++I3NC0NOduPp7uNlbL8UlqPq/i8ryz/fWBzX5R8w/5Xu/7Pd/93Ax7/QY17j7vL9z8+vv9+RbbGnb/6biq784/LndqB3Dpf/hyn/vDSPFf3y717+5i9D/vGB0IA+CvnfM2D+cfkvD5txyvC/Kf+82h5/ZND8F2dQm+guR7xvnJ//xfvG2a2w/Lltz2GX/247aryd8odxNir9zA6rq//fC8217/93mT0MxfcwvpjG84Ewv+cQ+zsZtvz5/Yr8f2BXmH+t5P+b/n9H21dTWLY/5P5/8/bY6DE+0TFe77FuN+qxBkbVByv2/K/jjbl18BzFMD5DzTZ310Oz2az0IZ8njNWqev1XfZ1Qdf5Vr/8ysf/feA4f+/+N8bH/3xgf+/+N8a37ih8tddob11fs/zfGx/5/Y/z9Id/YP/DukvhPlsTvKYl/oCT+wZL4T5XE7yuJf6gk/uGS+PtK4h8pif9M+IvH+M+W/P7RkvjHPz5+/kclv9/ocn2UcV1+GGexfp79H8ZHfv7Tb//fWRIPjK6fvrX/med/++3GYv3/6fb9kPwc73Aar6dr53i9FO+fTKa4d9L430L8er/fAeMktp8R/78/VhIPjK78npf9G8ZQrXeLPYO2W9XvPJ/R8rkUfj6FX0jhEymcSeFsCvencG6NysfqeOY3vz90qbZ0vb89xA/6PnmsDxTbiZofsDzx/sCw77PHdvyGtdz877I6GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGUmWp8HDuyuFcWVty8fee7YqdmFKU+1UzRan1MdY/X274riyRROpvAX6cutm+dOdIa3U1gr5opaUWtPL755o53T1qIozhd7i6tFo9hz5dob7849e+zC0Yv73nvz0PXVWwMAAACw8f0vAAD//3fOHG0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 3.438841015s ago: executing program 3 (id=1352): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, 0x0, 0x0) unshare(0x28020480) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)='|', 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 3.424927305s ago: executing program 0 (id=1353): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x8b, 0x2a7, &(0x7f0000000180)="$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") madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) close(r0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000005800)=[{{&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000018c0)=""/202, 0xca}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000740)=""/18, 0x12}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x6, &(0x7f0000001800)=""/140, 0x8c}, 0xb}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000005a80)=""/4107, 0x100b}], 0x1, &(0x7f0000002900)=""/65, 0x41}, 0x8001}, {{&(0x7f0000002980)=@qipcrtr, 0x80, &(0x7f0000002f80)=[{&(0x7f0000005980)=""/256, 0x100}, {&(0x7f0000002b00)=""/189, 0xbd}, {&(0x7f0000002bc0)=""/214, 0xd6}, {&(0x7f0000002cc0)=""/191, 0xbf}, {&(0x7f0000002d80)=""/213, 0xd5}, {&(0x7f0000002e80)=""/234, 0xea}], 0x6, &(0x7f0000003000)=""/168, 0xa8}, 0x90}, {{&(0x7f00000030c0)=@qipcrtr, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003140)=""/162, 0xa2}, {&(0x7f0000002a00)=""/36, 0x24}, {&(0x7f0000003240)=""/104, 0x68}, {&(0x7f00000032c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004300)=""/78, 0x4e}, 0xffffffff}, {{&(0x7f0000004380)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000004400)=""/4084, 0xff4}, {&(0x7f0000005400)=""/213, 0xd5}], 0x2, &(0x7f0000005540)=""/29, 0x1d}, 0xa95}, {{&(0x7f0000005580)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000005780)=[{&(0x7f0000005600)=""/100, 0x64}, {&(0x7f0000005680)=""/201, 0xc9}], 0x2, &(0x7f00000057c0)=""/45, 0x2d}, 0x7bf}], 0x6, 0x22, 0x0) r8 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r8) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3.215964247s ago: executing program 4 (id=1354): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x10000, 0x20000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fallocate(r0, 0x8, 0x0, 0x2000) (fail_nth: 6) 2.811006579s ago: executing program 3 (id=1355): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40040c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="2400000021002551241c0165ff00fc0202000000ff100f000ee1000c08000b0000000000", 0x24) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000100)=0x1) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x10040) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000140)={[{@enospc_debug}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x510c, &(0x7f0000005180)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX/jei4r/D8W2kmPK2vzwpGkcDoW8vOhWziWFE7EM+3ztfl008L3sZBfYDEfr6BY070kIulxtV+PhcINe5ztHhwAAOCeEsNznmXHepshjbLztUE7rB60w8igHeqDdhhNdkh37Lc9zPYW4vb2mY1Le/7/keHyf3wrVmWLftf/h3j9f/5cw+71/7Ox0EgK87HQSu8Y0IrHyMLux/EYjVbe48r6bgEAAADuavF7gfoKzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ye/eY+Sq7sOBn32O9+H1QvJTCL8o2SQ1jpt4vbbJQy1V1pSqEWmadUODqiiNjb0mixfs2KbEKETGJqIRgtIGKfmjCKMoqvkDagUikgLCRYojVB4RVVEAgUJriIJIKUlEmiDF1ey9Z/bOuTuPtb3GSz4fyTtn5nuedx6ec++dcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN8Nh79y1d82iz/82wuefu7i8cv2rb/45WsuOPPxECZmHu/Iwh391986/vM7z79r331rb7vn6IXv783L5fEwUP3Tmd+5LtZ6dGkI93aE0J0GVg1mgZ78/mCs7x2DIZwRZgO1EpP9WYm04fD9vhAOhNlArarv9YUwWAhc9MRDD95YTdzSF8LyEEIlbePZStZGXxo4pzcL9KeB7d1Z4FfHMrXAdzuzAJyw+GaovegPTdRnGJ67XIPXX89J69gbKx1eV0wMN873s/UL3KmC3vSBiRN62krVsSBKb4/D3m2L4N1W2s43e9qKX6TybyjHZkOV0LllcuumK6d3x0c6w+hoV6OaFuh5furVL22eT3rRvA5jB4ZPyuvwpseW39m18hOP3rNq+YsHP7D/pRPt5o8Km7SYXmiVkL/mFs3zGI37PFkEb7/St6QRX7pCCFs//3ufbBYvzf+Hm8//48s53nbW5Y61vj6Uzc3jI4Mx8cpQNjcHAACARWMx7DXdPvrAR5rVV5r/j7R3/D8e8s8n89loD4cwPpPYvyyEs2YezwJ3xOYuWRbCu2dSE/WB9UngcAhvn0msrFWVlFgSS4wkgZ8M5YHxJHAkBiaSwLdi4OYkcF0MHEoCm2PgcBI4PwbCVP04fn8oH0fbgb4Y2JhtxEPxLIRfDMXWkm31TK0qAACAkySfHfbU3y2c63CiGeL08lBfqwzxDOyGGSpJDekMtjatalhDd6saOlvVUBv33ubDL9Xc0arm0mkYHfUZbv3l33wqNFGa/481n/9X5uhIR+n4fwgbZv7G3J15ZLoW3zhRlwEAAAA4AQP/+/w3m8VL8//x9s7/j/tEugqZwyNxN8S2ZSGM1Qeyav+wHMiOeg/kAQAAAFgMasfja8fCp/Lb7BTtdD5dzj8xz/zxwP/4nPl7D9+/sVl/S/P/ifbO/++vv806cST24mvLQlhSCPwg9rIamDESAz/+aH0gH/+RuAFuiFXlJybUqrohltgYA2NJ4ECjEj+slTirPpA/WbXG99fGMZWXKAQAAADglIu7A+Jx+Xj+/3t+s/aqZuVK8/+N8zv/f2YeXDq9f3oghNXdIXSlPwx4pD9bGDAGBjvyxAP9WV1daVXX9odwXnVgaVXP5+v/d6drDD7Rl1UVA2e95+Cr51QT3+wLYXUx8ORnbv9gNbE7CdQa/8u+EN5VHW3a+HeWZI33pI1/fUkI7ywEalVdsiSEamO9aVUPVfLrGKRV/XMlhLcUArWqPlQJYU8AYJGK/5VuKT64a8/V2zZNT0/uXMBE3IffF7ZOTU+Obt4+vaXSoE9bkj7XLWN0bXlM7V755pl8iaJP371hsJ107XeCY8W28v34pRMH8/vxu1DPzDjX9tTdXZcO+X3vLTcRCt+kGg25c4GH3F+sZPZJLNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/Y2HmbJttSbdVv1z9a2Nl0fD1bISx7utVhQrWb378h2rd+25etXU5Zsunbx08oo1H1o7du7YurEPn7u6Oqqx7G+Loa6Yq+pkqMdub3NcJ3GoZ3cXKjkVnxoSEhKLLbF9YEXT/5NL8/8dzef/8VMnfvLn6zM0Ov4/HA/zZ4/PHubfGAMHysf/6/6XqB3/H250NL92YsBIEtgbA3sd5gcAAODNIU7y49w57pX+6crvvNisXGn+v7e93/+fpPX/a0vXX9homf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8D6/1fWAskm+YX1/wEAgDeDU7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAAKePL//ZVf+vWbw0/z/Q3vz/1K//Fxqd/z/SKDDRaGFA6/8BAACwSDVa/2/4+v7PNStXmv8fam/+H0+76KzLHWt9fShb0y6ka9q9MlT7yQAAAAAsDp1hdLSnzbx1K6OuP/42n8qXAm2WLnr+T47O7/z/w+3N/+t+l3HTY8vv7Fr5iUdfv2fV8hcPfmD/S7PH/wEAAICF0+5+CQAAAAAAAAAAAAAA4I33/H/sW9csXvr9f9gw83ij3//H6/7F3xe8tS53rLX1+n/5/Ys+fteemSULHxkK4b3FwLZ9284I+bX5VxQDD3525duqiX1pifufO/+FauJzaeBjq858rZo4LwlsjIskvj0NxKsqvrY0CcTlFf89DcTtcSgN9OaBry7NxtGRbqufDmbbqiPdVk8PhrCsEKhtq3sHszY60gHekgRqA/xCGogD/PM80Jn26q6BrFcxMBiL3jaQ9QoAgNNW/BbYE7ZOTU+Oxa/w8fbs7vrbqG7JsmvL1Xa02fwz+dJkn757w2A76a70u+jstcZ7QqU6hDWlr6vFLB0zozw5tbTYdG9tMORWq711NiiXmu+m6208or5sRKObt09v6Wk58HWts6ztbpllTWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rji6/1fN6ivN/4fbm/9XiuN6Lb8YwN54Zb2/W2aZfwAAAFhYX13/62/Ef5+6/uEnm+Utzf9H2pv/xz1Y+aHgbG/H4Xj9//3LQpi5tP5wFrgjNnfJshDePZOaiCWyC+pfGEuMZYE74g6TlbHExon6qpbEwKEk8JOhPHA4CRyJgXwvxcGQ78r5+6EQPjiT2lBfYkcsMZwEPhkDI0lgNAbGksDSGBhPAi8vzQMTSeDfYiBM1W+ru5fm2woAAGA+8nlWT/3dkM7zDnW3ytDRKkN/qwydrTJUWmVoNIp4/9sxQ09y8kpHIVNPWmtfUkspQ7wY/rz7VcoQflifMy1Yajqef1A736CjPsN9H+muhCZK8/+x9ub/2ZN5rL71I3H+P3v9vyzwg9i9r8VTx0di4McfrQ/kOwaOxMnuDbWqJvIS+aT9hlhiPAZGksCOGBhPAhs35IEDb6sP5DPtWuP7a41P5SUKAQAAADjl4g6CuJsmzv9v2/WVgWblSvP/8fbm/7G9gWJj18Vajy4N4d6O2d7UAqsGs0DcjzEYfx7/jsEQzijs4KiVmOzPSvQmDYfv92W/UO9Nq/peX/bjg3j/oiceevDGauKWvhCWF/a+1Np4tpK10ZcGzunNAv1pYHt3Foh7fmqB73ZmAThhtb2C8QWVn+pSMzx3uQavvzfLNUHT4ZX2gc6Rb67fXC2U0g7XfJ9qzfyetqb7bzlpSm+Pw95ti/HdNuzdVvwilX9DOTYbqoTOLZNbN105vTs+Uvwla8kCPc/FX6m2kz4Jr8O9x9/b1ippB8aSj4+xucvN/TrsiNXd9NjyO7tWfuLRe1Ytf/HgB/a/1HY3Gog/FH7omn8d/FFh8y60Sshfc4vu82TC58li/G9gxNMWQtjw8tdvaBYvzf8n2pv/dye3M34dN+auZSG8r7BxH4mb/4+XZZ+DhUD2KfmWciA75P5fQw0/OQEAAOBkq+3uqO0vmMpvsxPC03lyOf/EPPPH/RXjc+Zvt9/9f/3Z5c3ipfn/xubz/yVJNx3/d/yfBeL4/5xO913RS9IH9p7QruhSdSwIx//ndLq/2xz/n5Pj/47/z8Xx/xYc/5/T6f60lb4l7fClK4Tw4h898HSzeGn+v6O9+b/1/+ZetK+2/t/GRuv/7Wi0/t9e6/8BAAALqsFCc+k8r7R6XylDunpfKUPLBQJbLjFo/b95r//3wtnP/iY0UZr/721v/h9fDgPF1hfL+n8jGxpUdXMM7LAwIAAAAKejRjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGPd9w//s6VZ/OHfXvD0cxePX7Zv/cUvX3PBmY+HMDXzeEcW7ui//tbxn995/l377lt72z1HL3x/JS/Xk9/+/7rcsdbXh0I4UHhkMCZeGaremQ1c9PG79nRXE48MhfDeYmDbvm1nVBPfGgphRTHw4GdXvq2a2JeWuP+581+oJj6XBj626szXqonzNnVm3Uy7+49Ls+52pN29cWkIywqBWncvW5q10ZG28ad5oDNt458GszZiYDAW/cZg1kYMTMcSU0tCWN0dQlda1cOVrKqutKp/qWRVdaVVfbkSwnkhhO60qud6s6q605E/3ptVFQNnvefgq+dUEwd6Q1hdDDz5mds/WE18IQnUGv+L3hDeVX3JpI1/uydrvCdt/JaeEN4ZQuhNS/yyOyvRm5Z4vjuEtxQCtcY/3x3CnsCbQvzwqftE27Xn6m2bpqcndy5gojdvqy9snZqeHN28fXpLJelTIx2F9LFrj3/sz7z6pc3V20/fvWGwnXR3Xq5npstre+rurjvdex/71V+sZPb5KNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/e3Ko9m2WtNkW3UV77zR22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOhtWPnjq0b+/C5q6ujGsv+tj/U0HCot5/6oZ7dXajkVHwAzC8RN8/p0h8Jid/FRGfdp9vY6f6fXumL/mxHe0Jl5gO6NK0oZumYGeXJGPT64xzx8XxPaTmiNaWJQynL2tZZ1pUmE7NZ+rIsM9/rSpPDYk2dM5s03u8Mo6NdjbbDcP3d4ub92Qls3qfyTdduGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMClAAAA///9yyc9") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYRES16=r5], 0x1, 0x3b4, &(0x7f0000000480)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080), 0x8) 2.051416175s ago: executing program 4 (id=1356): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a404ac, &(0x7f0000001480)=ANY=[], 0xfe, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./bus\x00', r0, &(0x7f0000000200)='./file0\x00', 0x0) 1.942440176s ago: executing program 0 (id=1357): fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x7}, 0x5, 0xf869, 0x0, 0x0, 0x0, 0x0, 0x90}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000024c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) ioctl$LOOP_CHANGE_FD(r2, 0x4c02, 0xffffffffffffffff) 1.898148326s ago: executing program 1 (id=1358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1000}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 6) 1.852026886s ago: executing program 0 (id=1359): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="5a0600d6a42563a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.755165707s ago: executing program 4 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.583660148s ago: executing program 1 (id=1361): semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) 1.579180868s ago: executing program 3 (id=1362): socket$kcm(0x21, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) socket$kcm(0x29, 0x5, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a40, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 1.570575748s ago: executing program 0 (id=1363): syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f0000000640)=ANY=[], 0x1, 0xa8b, &(0x7f0000001400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 1.460920319s ago: executing program 1 (id=1364): syz_open_dev$dri(&(0x7f0000000140), 0x4000001, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f00000000c0)=ANY=[], 0x1, 0xa38, &(0x7f0000000a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000040)="ff02040000ffffffffff", 0xa) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat(r3, &(0x7f0000000100)='./file0\x00', 0x141000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_QUERYCTRL(r7, 0xc0445624, &(0x7f0000000000)={0x8000004, 0x6, "e22e845e3ede57135adc514d00000000001af2bb6b1543835f00", 0x0, 0x4, 0x8000, 0x9, 0x11}) 1.240008471s ago: executing program 0 (id=1365): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, &(0x7f0000000680), 0x0) unshare(0x28020480) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000180)='|', 0x1}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.035625212s ago: executing program 3 (id=1366): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x74, 0x10, 0xffffff1f, 0xee020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20082, 0x35288}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}}, 0x4000080) 936.293583ms ago: executing program 3 (id=1367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x6, 0x502, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5484}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5) ppoll(&(0x7f0000000140)=[{r5}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000001000)={0x4, 0xffff, 0x70, 0x5, 0x10, "6a29dd0defdaa37a"}) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r7, 0xc0046d00, 0xfffffffffffffffe) 0s ago: executing program 0 (id=1368): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) unshare(0x28020480) r2 = mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x6e93ebbbcc0884f3, 0x43, 0x0) mq_timedreceive(r2, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x45}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): .944902][ T7243] el0_svc_common+0x138/0x258 [ 142.946126][ T7243] do_el0_svc+0x58/0x13c [ 142.947288][ T7243] el0_svc+0x58/0x168 [ 142.948366][ T7243] el0t_64_sync_handler+0x84/0xf0 [ 142.949719][ T7243] el0t_64_sync+0x18c/0x190 [ 142.951060][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.994745][ T5102] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.116633][ T7235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.305704][ T7235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.914869][ T7235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.254687][ T7235] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.281569][ T7235] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.339725][ T7235] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.346677][ T7235] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.587198][ T7308] device vlan2 entered promiscuous mode [ 145.591696][ T7308] device bond0 entered promiscuous mode [ 145.593295][ T7308] device bond_slave_0 entered promiscuous mode [ 145.599787][ T7308] device bond_slave_1 entered promiscuous mode [ 145.609357][ T7308] device bond0 left promiscuous mode [ 145.611061][ T7308] device bond_slave_0 left promiscuous mode [ 145.615707][ T7308] device bond_slave_1 left promiscuous mode [ 145.782017][ T7304] FAULT_INJECTION: forcing a failure. [ 145.782017][ T7304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.810877][ T7304] CPU: 0 PID: 7304 Comm: syz.2.963 Not tainted 6.1.131-syzkaller #0 [ 145.812980][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.815656][ T7304] Call trace: [ 145.816508][ T7304] dump_backtrace+0x1c8/0x1f4 [ 145.817750][ T7304] show_stack+0x2c/0x3c [ 145.818815][ T7304] dump_stack_lvl+0x108/0x170 [ 145.820093][ T7304] dump_stack+0x1c/0x58 [ 145.821233][ T7304] should_fail_ex+0x3c0/0x51c [ 145.822509][ T7304] should_fail+0x14/0x24 [ 145.823652][ T7304] should_fail_usercopy+0x20/0x30 [ 145.824994][ T7304] input_event_from_user+0xbc/0x4c4 [ 145.826670][ T7304] evdev_write+0x2c4/0x424 [ 145.827877][ T7304] vfs_write+0x2a4/0x91c [ 145.828983][ T7304] ksys_write+0x15c/0x26c [ 145.830199][ T7304] __arm64_sys_write+0x7c/0x90 [ 145.831442][ T7304] invoke_syscall+0x98/0x2bc [ 145.832654][ T7304] el0_svc_common+0x138/0x258 [ 145.833896][ T7304] do_el0_svc+0x58/0x13c [ 145.835036][ T7304] el0_svc+0x58/0x168 [ 145.836192][ T7304] el0t_64_sync_handler+0x84/0xf0 [ 145.837513][ T7304] el0t_64_sync+0x18c/0x190 [ 145.856040][ T7315] loop0: detected capacity change from 0 to 512 [ 145.867813][ T7315] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 145.882758][ T7315] EXT4-fs (loop0): 1 truncate cleaned up [ 145.884328][ T7315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 146.159707][ T7320] FAULT_INJECTION: forcing a failure. [ 146.159707][ T7320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.163402][ T7320] CPU: 1 PID: 7320 Comm: syz.0.968 Not tainted 6.1.131-syzkaller #0 [ 146.165554][ T7320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.168171][ T7320] Call trace: [ 146.169021][ T7320] dump_backtrace+0x1c8/0x1f4 [ 146.170254][ T7320] show_stack+0x2c/0x3c [ 146.171343][ T7320] dump_stack_lvl+0x108/0x170 [ 146.172604][ T7320] dump_stack+0x1c/0x58 [ 146.173761][ T7320] should_fail_ex+0x3c0/0x51c [ 146.175023][ T7320] should_fail+0x14/0x24 [ 146.176115][ T7320] should_fail_usercopy+0x20/0x30 [ 146.177454][ T7320] simple_read_from_buffer+0xd4/0x248 [ 146.178930][ T7320] proc_fail_nth_read+0x198/0x234 [ 146.180242][ T7320] vfs_read+0x280/0x8b4 [ 146.181320][ T7320] ksys_read+0x15c/0x26c [ 146.182436][ T7320] __arm64_sys_read+0x7c/0x90 [ 146.183619][ T7320] invoke_syscall+0x98/0x2bc [ 146.184809][ T7320] el0_svc_common+0x138/0x258 [ 146.186002][ T7320] do_el0_svc+0x58/0x13c [ 146.187090][ T7320] el0_svc+0x58/0x168 [ 146.188122][ T7320] el0t_64_sync_handler+0x84/0xf0 [ 146.189508][ T7320] el0t_64_sync+0x18c/0x190 [ 146.499689][ T7322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.969'. [ 146.585010][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 146.789214][ T5049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.865025][ T5046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.125845][ T5046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.390145][ T5046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.869310][ T7347] loop2: detected capacity change from 0 to 512 [ 147.869780][ T5046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.872071][ T7347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 147.881947][ T7347] EXT4-fs (loop2): 1 truncate cleaned up [ 147.883532][ T7347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.877114][ T5046] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.892657][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 148.948026][ T7356] FAULT_INJECTION: forcing a failure. [ 148.948026][ T7356] name failslab, interval 1, probability 0, space 0, times 0 [ 148.960211][ T7356] CPU: 0 PID: 7356 Comm: syz.3.979 Not tainted 6.1.131-syzkaller #0 [ 148.962332][ T7356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.965036][ T7356] Call trace: [ 148.965914][ T7356] dump_backtrace+0x1c8/0x1f4 [ 148.967144][ T7356] show_stack+0x2c/0x3c [ 148.968157][ T7356] dump_stack_lvl+0x108/0x170 [ 148.969440][ T7356] dump_stack+0x1c/0x58 [ 148.970549][ T7356] should_fail_ex+0x3c0/0x51c [ 148.971776][ T7356] __should_failslab+0xc8/0x128 [ 148.973049][ T7356] should_failslab+0x10/0x28 [ 148.974274][ T7356] kmem_cache_alloc+0x8c/0x37c [ 148.975579][ T7356] skb_clone+0x19c/0x304 [ 148.976725][ T7356] __netlink_deliver_tap+0x36c/0x6ec [ 148.978140][ T7356] netlink_deliver_tap+0x1ac/0x1b0 [ 148.979548][ T7356] netlink_unicast+0x640/0x898 [ 148.980812][ T7356] netlink_sendmsg+0x844/0xb28 [ 148.982042][ T7356] ____sys_sendmsg+0x55c/0x8c4 [ 148.983278][ T7356] __sys_sendmsg+0x26c/0x33c [ 148.984473][ T7356] __arm64_sys_sendmsg+0x80/0x94 [ 148.985775][ T7356] invoke_syscall+0x98/0x2bc [ 148.987043][ T7356] el0_svc_common+0x138/0x258 [ 148.988237][ T7356] do_el0_svc+0x58/0x13c [ 148.989380][ T7356] el0_svc+0x58/0x168 [ 148.990437][ T7356] el0t_64_sync_handler+0x84/0xf0 [ 148.991815][ T7356] el0t_64_sync+0x18c/0x190 [ 149.390501][ T7371] loop2: detected capacity change from 0 to 128 [ 149.397451][ T7357] loop4: detected capacity change from 0 to 32768 [ 149.413556][ T7357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.978 (7357) [ 149.431829][ T7357] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.434519][ T7357] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 149.436786][ T7357] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 149.451899][ T7357] BTRFS info (device loop4): use zstd compression, level 3 [ 149.454015][ T7357] BTRFS info (device loop4): using free space tree [ 149.622855][ T7395] loop3: detected capacity change from 0 to 512 [ 149.626948][ T7357] BTRFS info (device loop4): enabling ssd optimizations [ 149.643846][ T7388] loop1: detected capacity change from 0 to 4096 [ 149.682603][ T7388] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 149.691218][ T7395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.704259][ T7388] ntfs3: loop1: Failed to load $Extend. [ 149.745638][ T7395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.766399][ T7395] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.803591][ T7395] FAULT_INJECTION: forcing a failure. [ 149.803591][ T7395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.807361][ T7395] CPU: 0 PID: 7395 Comm: syz.3.988 Not tainted 6.1.131-syzkaller #0 [ 149.809424][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.812153][ T7395] Call trace: [ 149.813057][ T7395] dump_backtrace+0x1c8/0x1f4 [ 149.814331][ T7395] show_stack+0x2c/0x3c [ 149.815397][ T7395] dump_stack_lvl+0x108/0x170 [ 149.816656][ T7395] dump_stack+0x1c/0x58 [ 149.817778][ T7395] should_fail_ex+0x3c0/0x51c [ 149.818993][ T7395] should_fail+0x14/0x24 [ 149.820159][ T7395] should_fail_usercopy+0x20/0x30 [ 149.821502][ T7395] filldir64+0x6b8/0x948 [ 149.822639][ T7395] ext4_readdir+0x1318/0x3388 [ 149.823927][ T7395] iterate_dir+0x1f4/0x4ec [ 149.825067][ T7395] __arm64_sys_getdents64+0x1c4/0x4a0 [ 149.826537][ T7395] invoke_syscall+0x98/0x2bc [ 149.827751][ T7395] el0_svc_common+0x138/0x258 [ 149.829037][ T7395] do_el0_svc+0x58/0x13c [ 149.830189][ T7395] el0_svc+0x58/0x168 [ 149.831252][ T7395] el0t_64_sync_handler+0x84/0xf0 [ 149.832543][ T7395] el0t_64_sync+0x18c/0x190 [ 149.953777][ T4310] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.055271][ T4301] EXT4-fs (loop3): unmounting filesystem. [ 150.408149][ T4295] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 150.434677][ T7406] tls_set_device_offload: netdev not found [ 150.566687][ T7411] loop0: detected capacity change from 0 to 128 [ 150.655775][ T7414] FAULT_INJECTION: forcing a failure. [ 150.655775][ T7414] name failslab, interval 1, probability 0, space 0, times 0 [ 150.659824][ T7414] CPU: 0 PID: 7414 Comm: syz.0.994 Not tainted 6.1.131-syzkaller #0 [ 150.661922][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.664594][ T7414] Call trace: [ 150.665467][ T7414] dump_backtrace+0x1c8/0x1f4 [ 150.666833][ T7414] show_stack+0x2c/0x3c [ 150.668006][ T7414] dump_stack_lvl+0x108/0x170 [ 150.669340][ T7414] dump_stack+0x1c/0x58 [ 150.670502][ T7414] should_fail_ex+0x3c0/0x51c [ 150.671867][ T7414] __should_failslab+0xc8/0x128 [ 150.673205][ T7414] should_failslab+0x10/0x28 [ 150.674457][ T7414] __kmem_cache_alloc_node+0x80/0x388 [ 150.675911][ T7414] kmalloc_trace+0x48/0x94 [ 150.677166][ T7414] alloc_pipe_info+0xf8/0x4cc [ 150.678443][ T7414] splice_direct_to_actor+0x82c/0x9b4 [ 150.680011][ T7414] do_splice_direct+0x20c/0x348 [ 150.681309][ T7414] do_sendfile+0x4c0/0xcb0 [ 150.682488][ T7414] __arm64_sys_sendfile64+0x160/0x3b4 [ 150.683949][ T7414] invoke_syscall+0x98/0x2bc [ 150.685218][ T7414] el0_svc_common+0x138/0x258 [ 150.686492][ T7414] do_el0_svc+0x58/0x13c [ 150.687647][ T7414] el0_svc+0x58/0x168 [ 150.688767][ T7414] el0t_64_sync_handler+0x84/0xf0 [ 150.690159][ T7414] el0t_64_sync+0x18c/0x190 [ 151.335380][ T7426] loop1: detected capacity change from 0 to 32768 [ 151.384376][ T7426] XFS (loop1): Mounting V5 Filesystem [ 151.503071][ T7426] XFS (loop1): Ending clean mount [ 151.505756][ T7426] XFS (loop1): Quotacheck needed: Please wait. [ 151.555148][ T7426] XFS (loop1): Quotacheck: Done. [ 151.649734][ T4295] XFS (loop1): Unmounting Filesystem [ 151.717398][ T7443] loop0: detected capacity change from 0 to 4096 [ 151.788764][ T7443] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 151.833545][ T7431] loop3: detected capacity change from 0 to 32768 [ 151.836814][ T7443] ntfs3: loop0: Failed to load $Extend. [ 151.852890][ T7431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1001 (7431) [ 151.879366][ T7431] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 151.882060][ T7431] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 151.884454][ T7431] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.886954][ T7431] BTRFS info (device loop3): use zstd compression, level 3 [ 151.896156][ T7431] BTRFS info (device loop3): using free space tree [ 152.114954][ T7431] BTRFS info (device loop3): enabling ssd optimizations [ 152.167489][ T7445] loop2: detected capacity change from 0 to 32768 [ 152.216278][ T4301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.242455][ T7413] loop4: detected capacity change from 0 to 131072 [ 152.247880][ T7445] XFS (loop2): Mounting V5 Filesystem [ 152.248821][ T7413] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 152.251518][ T7413] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.264581][ T7413] F2FS-fs (loop4): invalid crc value [ 152.289127][ T7472] loop1: detected capacity change from 0 to 2048 [ 152.300052][ T7472] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 152.305066][ T7413] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.339822][ T7477] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 152.355046][ T7445] XFS (loop2): Ending clean mount [ 152.357759][ T7413] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.360194][ T7413] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 152.408711][ T4295] syz-executor: attempt to access beyond end of device [ 152.408711][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 152.412610][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 152.437251][ T4304] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 152.459144][ T4295] syz-executor: attempt to access beyond end of device [ 152.459144][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 152.462677][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 152.479180][ T4295] syz-executor: attempt to access beyond end of device [ 152.479180][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 152.482927][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 152.486410][ T4295] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 147 [ 152.494654][ T4295] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 152.510746][ T4295] Remounting filesystem read-only [ 152.512111][ T4295] NILFS (loop1): error -5 truncating bmap (ino=15) [ 152.514957][ T4295] syz-executor: attempt to access beyond end of device [ 152.514957][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 152.518458][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 152.541114][ T4295] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 152.695850][ T4299] XFS (loop2): Unmounting Filesystem [ 152.721913][ T7489] FAULT_INJECTION: forcing a failure. [ 152.721913][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 152.726049][ T7489] CPU: 0 PID: 7489 Comm: syz.0.1010 Not tainted 6.1.131-syzkaller #0 [ 152.728253][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.730987][ T7489] Call trace: [ 152.731835][ T7489] dump_backtrace+0x1c8/0x1f4 [ 152.733088][ T7489] show_stack+0x2c/0x3c [ 152.734185][ T7489] dump_stack_lvl+0x108/0x170 [ 152.735404][ T7489] dump_stack+0x1c/0x58 [ 152.736484][ T7489] should_fail_ex+0x3c0/0x51c [ 152.737744][ T7489] __should_failslab+0xc8/0x128 [ 152.739015][ T7489] should_failslab+0x10/0x28 [ 152.740203][ T7489] kmem_cache_alloc+0x8c/0x37c [ 152.741540][ T7489] skb_clone+0x19c/0x304 [ 152.742644][ T7489] __netlink_deliver_tap+0x36c/0x6ec [ 152.744081][ T7489] netlink_deliver_tap+0x1ac/0x1b0 [ 152.745402][ T7489] netlink_unicast+0x640/0x898 [ 152.746705][ T7489] netlink_sendmsg+0x844/0xb28 [ 152.747950][ T7489] ____sys_sendmsg+0x55c/0x8c4 [ 152.749242][ T7489] __sys_sendmsg+0x26c/0x33c [ 152.750473][ T7489] __arm64_sys_sendmsg+0x80/0x94 [ 152.751796][ T7489] invoke_syscall+0x98/0x2bc [ 152.753008][ T7489] el0_svc_common+0x138/0x258 [ 152.754279][ T7489] do_el0_svc+0x58/0x13c [ 152.755424][ T7489] el0_svc+0x58/0x168 [ 152.756475][ T7489] el0t_64_sync_handler+0x84/0xf0 [ 152.757812][ T7489] el0t_64_sync+0x18c/0x190 [ 152.787228][ T7491] loop1: detected capacity change from 0 to 1024 [ 152.794935][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1010'. [ 152.818867][ T7491] UDF-fs: bad mount option "udf" or missing value [ 152.885930][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 152.904644][ T4960] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.999730][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'. [ 153.323140][ T7482] loop3: detected capacity change from 0 to 32768 [ 153.339964][ T7482] XFS: ikeep mount option is deprecated. [ 153.446995][ T7482] XFS (loop3): Mounting V5 Filesystem [ 153.531083][ T7482] XFS (loop3): Ending clean mount [ 153.534302][ T7482] XFS (loop3): Quotacheck needed: Please wait. [ 153.577583][ T7511] loop2: detected capacity change from 0 to 1024 [ 153.656454][ T7482] XFS (loop3): Quotacheck: Done. [ 153.689864][ T7511] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 153.762263][ T7511] sp0: Synchronizing with TNC [ 153.924438][ T7510] [U] è` [ 153.994449][ T7522] loop1: detected capacity change from 0 to 2048 [ 153.997746][ T7522] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.027019][ T7525] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.064792][ T4295] syz-executor: attempt to access beyond end of device [ 154.064792][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 154.074272][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 154.112593][ T4295] syz-executor: attempt to access beyond end of device [ 154.112593][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 154.120625][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 154.129612][ T4295] syz-executor: attempt to access beyond end of device [ 154.129612][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 154.133252][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 154.138108][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 154.145561][ T4295] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 147 [ 154.149397][ T4295] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 154.156283][ T4295] Remounting filesystem read-only [ 154.170447][ T4295] NILFS (loop1): error -5 truncating bmap (ino=15) [ 154.174514][ T4295] syz-executor: attempt to access beyond end of device [ 154.174514][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 154.195973][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 154.212904][ T4295] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 154.345888][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.349831][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.352126][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.355816][ T7537] device bridge_slave_0 left promiscuous mode [ 154.357710][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.423420][ T7537] device bridge_slave_1 left promiscuous mode [ 154.423713][ T7541] FAULT_INJECTION: forcing a failure. [ 154.423713][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 154.425240][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.443876][ T7541] CPU: 1 PID: 7541 Comm: syz.2.1024 Not tainted 6.1.131-syzkaller #0 [ 154.446128][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.448749][ T7541] Call trace: [ 154.449678][ T7541] dump_backtrace+0x1c8/0x1f4 [ 154.450936][ T7541] show_stack+0x2c/0x3c [ 154.452008][ T7541] dump_stack_lvl+0x108/0x170 [ 154.453259][ T7541] dump_stack+0x1c/0x58 [ 154.454380][ T7541] should_fail_ex+0x3c0/0x51c [ 154.455618][ T7541] __should_failslab+0xc8/0x128 [ 154.456910][ T7541] should_failslab+0x10/0x28 [ 154.458115][ T7541] __kmem_cache_alloc_node+0x80/0x388 [ 154.459506][ T7541] kmalloc_trace+0x48/0x94 [ 154.460678][ T7541] wakeup_source_register+0x64/0x224 [ 154.462017][ T7541] ep_create_wakeup_source+0xe8/0x234 [ 154.463409][ T7541] ep_insert+0xc54/0x1528 [ 154.464530][ T7541] do_epoll_ctl+0x6b4/0xbe8 [ 154.465725][ T7541] __arm64_sys_epoll_ctl+0x218/0x29c [ 154.467135][ T7541] invoke_syscall+0x98/0x2bc [ 154.468370][ T7541] el0_svc_common+0x138/0x258 [ 154.469572][ T7541] do_el0_svc+0x58/0x13c [ 154.470681][ T7541] el0_svc+0x58/0x168 [ 154.471773][ T7541] el0t_64_sync_handler+0x84/0xf0 [ 154.473138][ T7541] el0t_64_sync+0x18c/0x190 [ 154.525229][ T7537] bond0: (slave bond_slave_0): Releasing backup interface [ 154.565468][ T7537] bond0: (slave bond_slave_1): Releasing backup interface [ 154.602150][ T7549] loop2: detected capacity change from 0 to 1024 [ 154.611643][ T7549] UDF-fs: bad mount option "udf" or missing value [ 154.636894][ T4301] XFS (loop3): Unmounting Filesystem [ 154.708487][ T7537] team0: Port device team_slave_0 removed [ 154.781272][ T7537] team0: Port device team_slave_1 removed [ 154.789803][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.795199][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.798493][ T7537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.816311][ T7537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.826731][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 154.871478][ T7540] team0: Mode changed to "loadbalance" [ 155.014328][ T7554] loop1: detected capacity change from 0 to 2048 [ 155.017274][ T7554] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 155.055018][ T7557] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.647250][ T7603] loop0: detected capacity change from 0 to 2048 [ 156.660500][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 156.673788][ T7603] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 156.711252][ T7611] FAULT_INJECTION: forcing a failure. [ 156.711252][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 156.719079][ T7611] CPU: 0 PID: 7611 Comm: syz.4.1049 Not tainted 6.1.131-syzkaller #0 [ 156.721415][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.724067][ T7611] Call trace: [ 156.724992][ T7611] dump_backtrace+0x1c8/0x1f4 [ 156.726428][ T7611] show_stack+0x2c/0x3c [ 156.727550][ T7611] dump_stack_lvl+0x108/0x170 [ 156.728879][ T7611] dump_stack+0x1c/0x58 [ 156.729972][ T7611] should_fail_ex+0x3c0/0x51c [ 156.730341][ T7614] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.731231][ T7611] __should_failslab+0xc8/0x128 [ 156.735469][ T7611] should_failslab+0x10/0x28 [ 156.736676][ T7611] kmem_cache_alloc+0x8c/0x37c [ 156.738005][ T7611] skb_clone+0x19c/0x304 [ 156.739163][ T7611] __netlink_deliver_tap+0x36c/0x6ec [ 156.740526][ T7611] netlink_deliver_tap+0x1ac/0x1b0 [ 156.741897][ T7611] netlink_unicast+0x640/0x898 [ 156.743166][ T7611] netlink_sendmsg+0x844/0xb28 [ 156.744394][ T7611] ____sys_sendmsg+0x55c/0x8c4 [ 156.745665][ T7611] __sys_sendmsg+0x26c/0x33c [ 156.746875][ T7611] __arm64_sys_sendmsg+0x80/0x94 [ 156.748197][ T7611] invoke_syscall+0x98/0x2bc [ 156.749377][ T7611] el0_svc_common+0x138/0x258 [ 156.750593][ T7611] do_el0_svc+0x58/0x13c [ 156.751696][ T7611] el0_svc+0x58/0x168 [ 156.752708][ T7611] el0t_64_sync_handler+0x84/0xf0 [ 156.754052][ T7611] el0t_64_sync+0x18c/0x190 [ 156.825849][ T7611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1049'. [ 156.866869][ T7618] FAULT_INJECTION: forcing a failure. [ 156.866869][ T7618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.896722][ T7618] CPU: 1 PID: 7618 Comm: syz.3.1052 Not tainted 6.1.131-syzkaller #0 [ 156.898989][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.901861][ T7618] Call trace: [ 156.902812][ T7618] dump_backtrace+0x1c8/0x1f4 [ 156.904101][ T7618] show_stack+0x2c/0x3c [ 156.905345][ T7618] dump_stack_lvl+0x108/0x170 [ 156.906659][ T7618] dump_stack+0x1c/0x58 [ 156.907839][ T7618] should_fail_ex+0x3c0/0x51c [ 156.909116][ T7618] should_fail+0x14/0x24 [ 156.910365][ T7618] should_fail_usercopy+0x20/0x30 [ 156.911790][ T7618] simple_read_from_buffer+0xd4/0x248 [ 156.912153][ T7620] loop1: detected capacity change from 0 to 1024 [ 156.913351][ T7618] proc_fail_nth_read+0x198/0x234 [ 156.916526][ T7618] vfs_read+0x280/0x8b4 [ 156.917709][ T7618] ksys_read+0x15c/0x26c [ 156.918921][ T7618] __arm64_sys_read+0x7c/0x90 [ 156.920245][ T7618] invoke_syscall+0x98/0x2bc [ 156.921553][ T7618] el0_svc_common+0x138/0x258 [ 156.922843][ T7618] do_el0_svc+0x58/0x13c [ 156.924097][ T7618] el0_svc+0x58/0x168 [ 156.925220][ T7618] el0t_64_sync_handler+0x84/0xf0 [ 156.926640][ T7618] el0t_64_sync+0x18c/0x190 [ 156.927985][ C1] vkms_vblank_simulate: vblank timer overrun [ 156.942427][ T7622] loop0: detected capacity change from 0 to 128 [ 156.956389][ T7620] UDF-fs: bad mount option "udf" or missing value [ 156.965978][ T7622] FAT-fs (loop0): Directory bread(block 11554) failed [ 156.968090][ T7622] FAT-fs (loop0): Directory bread(block 11555) failed [ 156.975387][ T7622] FAT-fs (loop0): Directory bread(block 11556) failed [ 156.977261][ T7622] FAT-fs (loop0): Directory bread(block 11557) failed [ 156.995641][ T7622] FAT-fs (loop0): Directory bread(block 11558) failed [ 156.997843][ T7622] FAT-fs (loop0): Directory bread(block 11559) failed [ 157.001813][ T7622] FAT-fs (loop0): Directory bread(block 11560) failed [ 157.004632][ T7622] FAT-fs (loop0): Directory bread(block 11561) failed [ 157.006528][ T7629] FAULT_INJECTION: forcing a failure. [ 157.006528][ T7629] name failslab, interval 1, probability 0, space 0, times 0 [ 157.006553][ T7629] CPU: 0 PID: 7629 Comm: syz.2.1056 Not tainted 6.1.131-syzkaller #0 [ 157.007383][ T7622] FAT-fs (loop0): Directory bread(block 11562) failed [ 157.009980][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.009994][ T7629] Call trace: [ 157.009998][ T7629] dump_backtrace+0x1c8/0x1f4 [ 157.010018][ T7629] show_stack+0x2c/0x3c [ 157.010026][ T7629] dump_stack_lvl+0x108/0x170 [ 157.010047][ T7629] dump_stack+0x1c/0x58 [ 157.010058][ T7629] should_fail_ex+0x3c0/0x51c [ 157.010068][ T7629] __should_failslab+0xc8/0x128 [ 157.010080][ T7629] should_failslab+0x10/0x28 [ 157.010091][ T7629] kmem_cache_alloc+0x8c/0x37c [ 157.010102][ T7629] skb_clone+0x19c/0x304 [ 157.010115][ T7629] __netlink_deliver_tap+0x36c/0x6ec [ 157.010126][ T7629] netlink_deliver_tap+0x1ac/0x1b0 [ 157.010136][ T7629] netlink_unicast+0x640/0x898 [ 157.010146][ T7629] netlink_sendmsg+0x844/0xb28 [ 157.010155][ T7629] ____sys_sendmsg+0x55c/0x8c4 [ 157.010168][ T7629] __sys_sendmsg+0x26c/0x33c [ 157.010180][ T7629] __arm64_sys_sendmsg+0x80/0x94 [ 157.010192][ T7629] invoke_syscall+0x98/0x2bc [ 157.023096][ T7622] FAT-fs (loop0): Directory bread(block 11563) failed [ 157.023966][ T7629] el0_svc_common+0x138/0x258 [ 157.042162][ T7629] do_el0_svc+0x58/0x13c [ 157.043253][ T7629] el0_svc+0x58/0x168 [ 157.044334][ T7629] el0t_64_sync_handler+0x84/0xf0 [ 157.045789][ T7629] el0t_64_sync+0x18c/0x190 [ 157.673520][ T7647] loop0: detected capacity change from 0 to 2048 [ 157.684480][ T7647] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.697156][ T7635] loop3: detected capacity change from 0 to 32768 [ 157.705621][ T7635] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1057 (7635) [ 157.716539][ T7649] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.756782][ T7635] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.788778][ T7635] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 157.791181][ T7635] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 157.793985][ T7635] BTRFS info (device loop3): use zstd compression, level 3 [ 157.810598][ T7635] BTRFS info (device loop3): using free space tree [ 157.885155][ T7657] FAULT_INJECTION: forcing a failure. [ 157.885155][ T7657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.889400][ T7657] CPU: 0 PID: 7657 Comm: syz.4.1065 Not tainted 6.1.131-syzkaller #0 [ 157.891615][ T7657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.894399][ T7657] Call trace: [ 157.895344][ T7657] dump_backtrace+0x1c8/0x1f4 [ 157.896587][ T7657] show_stack+0x2c/0x3c [ 157.897749][ T7657] dump_stack_lvl+0x108/0x170 [ 157.899010][ T7657] dump_stack+0x1c/0x58 [ 157.900200][ T7657] should_fail_ex+0x3c0/0x51c [ 157.901467][ T7657] should_fail+0x14/0x24 [ 157.902645][ T7657] should_fail_usercopy+0x20/0x30 [ 157.904071][ T7657] simple_read_from_buffer+0xd4/0x248 [ 157.905516][ T7657] proc_fail_nth_read+0x198/0x234 [ 157.906897][ T7657] vfs_read+0x280/0x8b4 [ 157.908073][ T7657] ksys_read+0x15c/0x26c [ 157.909288][ T7657] __arm64_sys_read+0x7c/0x90 [ 157.910644][ T7657] invoke_syscall+0x98/0x2bc [ 157.911931][ T7657] el0_svc_common+0x138/0x258 [ 157.913279][ T7657] do_el0_svc+0x58/0x13c [ 157.914434][ T7657] el0_svc+0x58/0x168 [ 157.915572][ T7657] el0t_64_sync_handler+0x84/0xf0 [ 157.916991][ T7657] el0t_64_sync+0x18c/0x190 [ 158.092816][ T7635] BTRFS info (device loop3): enabling ssd optimizations [ 158.215622][ T4301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.377982][ T7694] loop1: detected capacity change from 0 to 512 [ 158.383346][ T5100] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5100) [ 158.407530][ T7697] syz.2.1077 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 158.467569][ T7694] Quota error (device loop1): write_blk: dquota write failed [ 158.503904][ T7705] loop4: detected capacity change from 0 to 1024 [ 158.506233][ T7705] UDF-fs: bad mount option "udf" or missing value [ 158.510187][ T7694] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 158.512821][ T7694] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.1069: Failed to acquire dquot type 1 [ 158.540475][ T7709] FAULT_INJECTION: forcing a failure. [ 158.540475][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 158.543870][ T7709] CPU: 1 PID: 7709 Comm: syz.2.1080 Not tainted 6.1.131-syzkaller #0 [ 158.545889][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.548411][ T7709] Call trace: [ 158.549216][ T7709] dump_backtrace+0x1c8/0x1f4 [ 158.550382][ T7709] show_stack+0x2c/0x3c [ 158.551418][ T7709] dump_stack_lvl+0x108/0x170 [ 158.552583][ T7709] dump_stack+0x1c/0x58 [ 158.553586][ T7709] should_fail_ex+0x3c0/0x51c [ 158.554807][ T7709] __should_failslab+0xc8/0x128 [ 158.556065][ T7709] should_failslab+0x10/0x28 [ 158.557232][ T7709] kmem_cache_alloc+0x8c/0x37c [ 158.558394][ T7709] skb_clone+0x19c/0x304 [ 158.559492][ T7709] __netlink_deliver_tap+0x36c/0x6ec [ 158.560891][ T7709] netlink_deliver_tap+0x1ac/0x1b0 [ 158.562336][ T7709] netlink_unicast+0x640/0x898 [ 158.563645][ T7709] netlink_sendmsg+0x844/0xb28 [ 158.564957][ T7709] ____sys_sendmsg+0x55c/0x8c4 [ 158.566268][ T7709] __sys_sendmsg+0x26c/0x33c [ 158.567505][ T7709] __arm64_sys_sendmsg+0x80/0x94 [ 158.568872][ T7709] invoke_syscall+0x98/0x2bc [ 158.570151][ T7709] el0_svc_common+0x138/0x258 [ 158.571409][ T7709] do_el0_svc+0x58/0x13c [ 158.572567][ T7709] el0_svc+0x58/0x168 [ 158.573638][ T7709] el0t_64_sync_handler+0x84/0xf0 [ 158.575106][ T7709] el0t_64_sync+0x18c/0x190 [ 158.576483][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.581442][ T7709] tipc: Started in network mode [ 158.583293][ T7709] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 158.585678][ T7709] tipc: Enabled bearer , priority 10 [ 158.652894][ T7694] EXT4-fs (loop1): 1 truncate cleaned up [ 158.663153][ T7694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.679488][ T7694] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.975162][ T7719] FAULT_INJECTION: forcing a failure. [ 158.975162][ T7719] name failslab, interval 1, probability 0, space 0, times 0 [ 158.990788][ T7719] CPU: 0 PID: 7719 Comm: syz.0.1081 Not tainted 6.1.131-syzkaller #0 [ 158.993114][ T7719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.995868][ T7719] Call trace: [ 158.996714][ T7719] dump_backtrace+0x1c8/0x1f4 [ 158.998009][ T7719] show_stack+0x2c/0x3c [ 158.999207][ T7719] dump_stack_lvl+0x108/0x170 [ 159.000496][ T7719] dump_stack+0x1c/0x58 [ 159.001695][ T7719] should_fail_ex+0x3c0/0x51c [ 159.002963][ T7719] __should_failslab+0xc8/0x128 [ 159.004226][ T7719] should_failslab+0x10/0x28 [ 159.005444][ T7719] kmem_cache_alloc+0x8c/0x37c [ 159.006763][ T7719] skb_clone+0x19c/0x304 [ 159.007952][ T7719] __netlink_deliver_tap+0x36c/0x6ec [ 159.009347][ T7719] netlink_deliver_tap+0x1ac/0x1b0 [ 159.010758][ T7719] netlink_unicast+0x640/0x898 [ 159.012097][ T7719] netlink_sendmsg+0x844/0xb28 [ 159.013416][ T7719] ____sys_sendmsg+0x55c/0x8c4 [ 159.014749][ T7719] __sys_sendmsg+0x26c/0x33c [ 159.015961][ T7719] __arm64_sys_sendmsg+0x80/0x94 [ 159.017302][ T7719] invoke_syscall+0x98/0x2bc [ 159.018547][ T7719] el0_svc_common+0x138/0x258 [ 159.019820][ T7719] do_el0_svc+0x58/0x13c [ 159.020977][ T7719] el0_svc+0x58/0x168 [ 159.022058][ T7719] el0t_64_sync_handler+0x84/0xf0 [ 159.023491][ T7719] el0t_64_sync+0x18c/0x190 [ 159.142855][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 159.443609][ T7730] loop1: detected capacity change from 0 to 128 [ 159.445920][ T7730] UDF-fs: bad mount option "&" or missing value [ 159.537884][ T7733] loop0: detected capacity change from 0 to 256 [ 159.547008][ T7733] exfat: Deprecated parameter 'utf8' [ 159.556902][ T7733] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfa3b3837, utbl_chksum : 0xe619d30d) [ 159.703387][ T4342] tipc: Node number set to 10005162 [ 159.847887][ T7746] FAULT_INJECTION: forcing a failure. [ 159.847887][ T7746] name failslab, interval 1, probability 0, space 0, times 0 [ 159.856666][ T7746] CPU: 0 PID: 7746 Comm: syz.1.1093 Not tainted 6.1.131-syzkaller #0 [ 159.858749][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.861449][ T7746] Call trace: [ 159.862335][ T7746] dump_backtrace+0x1c8/0x1f4 [ 159.863558][ T7746] show_stack+0x2c/0x3c [ 159.864733][ T7746] dump_stack_lvl+0x108/0x170 [ 159.866048][ T7746] dump_stack+0x1c/0x58 [ 159.867215][ T7746] should_fail_ex+0x3c0/0x51c [ 159.868443][ T7746] __should_failslab+0xc8/0x128 [ 159.869702][ T7746] should_failslab+0x10/0x28 [ 159.870947][ T7746] kmem_cache_alloc+0x8c/0x37c [ 159.872238][ T7746] skb_clone+0x19c/0x304 [ 159.873378][ T7746] __netlink_deliver_tap+0x36c/0x6ec [ 159.874835][ T7746] netlink_deliver_tap+0x1ac/0x1b0 [ 159.876202][ T7746] netlink_unicast+0x640/0x898 [ 159.877501][ T7746] netlink_sendmsg+0x844/0xb28 [ 159.878799][ T7746] ____sys_sendmsg+0x55c/0x8c4 [ 159.880062][ T7746] __sys_sendmsg+0x26c/0x33c [ 159.881348][ T7746] __arm64_sys_sendmsg+0x80/0x94 [ 159.882736][ T7746] invoke_syscall+0x98/0x2bc [ 159.883977][ T7746] el0_svc_common+0x138/0x258 [ 159.885273][ T7746] do_el0_svc+0x58/0x13c [ 159.886402][ T7746] el0_svc+0x58/0x168 [ 159.887483][ T7746] el0t_64_sync_handler+0x84/0xf0 [ 159.888825][ T7746] el0t_64_sync+0x18c/0x190 [ 159.899661][ T7746] tipc: Started in network mode [ 159.901058][ T7746] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 159.903274][ T7746] tipc: Enabled bearer , priority 10 [ 159.915179][ T7726] loop3: detected capacity change from 0 to 32768 [ 159.946281][ T7748] loop2: detected capacity change from 0 to 512 [ 159.954116][ T7726] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.961317][ T7726] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 159.963724][ T7726] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 160.011282][ T7726] BTRFS info (device loop3): use zstd compression, level 3 [ 160.013190][ T7726] BTRFS info (device loop3): using free space tree [ 160.042468][ T7748] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1094: inode #1: comm syz.2.1094: iget: illegal inode # [ 160.072652][ T7748] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1094: error while reading EA inode 1 err=-117 [ 160.087565][ T7748] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.1094: inode #1: comm syz.2.1094: iget: illegal inode # [ 160.105904][ T7748] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1094: error while reading EA inode 1 err=-117 [ 160.110729][ T7748] EXT4-fs (loop2): 1 orphan inode deleted [ 160.112386][ T7748] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.322555][ T7777] loop1: detected capacity change from 0 to 1024 [ 160.325139][ T7777] UDF-fs: bad mount option "udf" or missing value [ 160.651819][ T7726] BTRFS info (device loop3): enabling ssd optimizations [ 160.662326][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 160.836912][ T4301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.979500][ T5048] tipc: Node number set to 10005162 [ 161.060947][ T7796] loop4: detected capacity change from 0 to 256 [ 161.066794][ T7795] netlink: 'syz.0.1106': attribute type 11 has an invalid length. [ 161.475790][ T7812] loop3: detected capacity change from 0 to 2048 [ 161.486194][ T7812] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.513860][ T7814] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.610282][ T4301] syz-executor: attempt to access beyond end of device [ 161.610282][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 161.625424][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 161.658673][ T4301] syz-executor: attempt to access beyond end of device [ 161.658673][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 161.662623][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 161.676287][ T4301] syz-executor: attempt to access beyond end of device [ 161.676287][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 161.694051][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 161.708116][ T4301] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 161.718681][ T4301] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 161.749310][ T4301] Remounting filesystem read-only [ 161.752953][ T4301] NILFS (loop3): error -5 truncating bmap (ino=15) [ 161.760667][ T4301] syz-executor: attempt to access beyond end of device [ 161.760667][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 161.783258][ C0] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 161.786086][ C1] batman_adv: batadv0: Local translation table size (88) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 161.804915][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 161.841604][ T4301] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 161.926285][ T7790] loop2: detected capacity change from 0 to 32768 [ 162.270337][ T7819] loop4: detected capacity change from 0 to 32768 [ 162.319128][ T7819] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt [ 162.319128][ T7819] [ 162.338646][ T7819] ERROR: (device loop4): remounting filesystem as read-only [ 162.343821][ T7819] jfs_lookup: dtSearch returned -5 [ 162.429137][ T7828] tipc: Enabling of bearer rejected, failed to enable media [ 162.443568][ T7816] loop1: detected capacity change from 0 to 32768 [ 162.465553][ T7816] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 162.518794][ T7816] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 162.660436][ T7829] ERROR: (device loop4): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 162.660436][ T7829] [ 162.682347][ T7839] loop2: detected capacity change from 0 to 1024 [ 162.684650][ T7839] UDF-fs: bad mount option "udf" or missing value [ 162.695008][ T4295] ocfs2: Unmounting device (7,1) on (node local) [ 162.875232][ T7826] loop3: detected capacity change from 0 to 32768 [ 162.922112][ T7826] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1118 (7826) [ 163.012831][ T7826] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.015513][ T7826] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 163.017799][ T7826] BTRFS info (device loop3): setting nodatacow, compression disabled [ 163.028755][ T7826] BTRFS info (device loop3): setting datacow [ 163.030407][ T7826] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 163.032943][ T7826] BTRFS info (device loop3): use zstd compression, level 3 [ 163.034776][ T7826] BTRFS info (device loop3): using free space tree [ 163.037294][ T7843] FAULT_INJECTION: forcing a failure. [ 163.037294][ T7843] name failslab, interval 1, probability 0, space 0, times 0 [ 163.050439][ T7834] loop0: detected capacity change from 0 to 32768 [ 163.062443][ T7834] gfs2: fsid=errors=withdraw: Trying to join cluster "lock_nolock", "errors=withdraw" [ 163.065236][ T7834] gfs2: fsid=errors=withdraw: Now mounting FS (format 1802)... [ 163.065280][ T7843] CPU: 0 PID: 7843 Comm: syz.1.1122 Not tainted 6.1.131-syzkaller #0 [ 163.069435][ T7843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.072118][ T7843] Call trace: [ 163.072972][ T7843] dump_backtrace+0x1c8/0x1f4 [ 163.074273][ T7843] show_stack+0x2c/0x3c [ 163.075389][ T7843] dump_stack_lvl+0x108/0x170 [ 163.076668][ T7843] dump_stack+0x1c/0x58 [ 163.077801][ T7843] should_fail_ex+0x3c0/0x51c [ 163.079025][ T7843] __should_failslab+0xc8/0x128 [ 163.080387][ T7843] should_failslab+0x10/0x28 [ 163.081671][ T7843] kmem_cache_alloc+0x8c/0x37c [ 163.083064][ T7843] skb_clone+0x19c/0x304 [ 163.084264][ T7843] __netlink_deliver_tap+0x36c/0x6ec [ 163.085767][ T7843] netlink_deliver_tap+0x1ac/0x1b0 [ 163.087172][ T7843] netlink_unicast+0x640/0x898 [ 163.088537][ T7843] netlink_sendmsg+0x844/0xb28 [ 163.089813][ T7843] ____sys_sendmsg+0x55c/0x8c4 [ 163.091126][ T7843] __sys_sendmmsg+0x318/0x7d8 [ 163.092411][ T7843] __arm64_sys_sendmmsg+0xa0/0xbc [ 163.093772][ T7843] invoke_syscall+0x98/0x2bc [ 163.095019][ T7843] el0_svc_common+0x138/0x258 [ 163.096339][ T7843] do_el0_svc+0x58/0x13c [ 163.097506][ T7843] el0_svc+0x58/0x168 [ 163.098625][ T7843] el0t_64_sync_handler+0x84/0xf0 [ 163.100001][ T7843] el0t_64_sync+0x18c/0x190 [ 163.113598][ T7834] gfs2: fsid=errors=withdraw.0: can't read journal index: -116 [ 163.230399][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1122'. [ 163.233419][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1122'. [ 163.261327][ T4960] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.288433][ T7826] BTRFS info (device loop3): enabling ssd optimizations [ 163.485995][ T4301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.719548][ T7849] loop4: detected capacity change from 0 to 32768 [ 163.748772][ T7849] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1124 (7849) [ 163.784800][ T7849] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.787555][ T7849] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 163.804001][ T7849] BTRFS info (device loop4): max_inline at 0 [ 163.805764][ T7849] BTRFS info (device loop4): enabling disk space caching [ 163.807712][ T7849] BTRFS info (device loop4): turning off barriers [ 163.826052][ T7849] BTRFS info (device loop4): turning on flush-on-commit [ 163.849474][ T7849] BTRFS info (device loop4): doing ref verification [ 163.855130][ T7849] BTRFS info (device loop4): force clearing of disk cache [ 163.861450][ T4302] Bluetooth: hci2: command 0x0406 tx timeout [ 163.864454][ T4306] Bluetooth: hci3: command 0x0406 tx timeout [ 163.866566][ T4298] Bluetooth: hci1: command 0x0406 tx timeout [ 163.881241][ T7849] BTRFS info (device loop4): enabling ssd optimizations [ 163.890658][ T7849] BTRFS info (device loop4): max_inline at 4096 [ 163.909297][ T7849] BTRFS info (device loop4): disk space caching is enabled [ 164.111645][ T7899] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1132'. [ 164.210807][ T7849] BTRFS info (device loop4): rebuilding free space tree [ 164.234294][ T7849] BTRFS info (device loop4): disabling free space tree [ 164.237159][ T7849] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 164.264780][ T7849] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 164.271833][ T7908] loop0: detected capacity change from 0 to 2048 [ 164.275876][ T7908] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.410895][ T7914] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.280643][ T7918] FAULT_INJECTION: forcing a failure. [ 165.280643][ T7918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.284005][ T7918] CPU: 1 PID: 7918 Comm: syz.4.1124 Not tainted 6.1.131-syzkaller #0 [ 165.286130][ T7918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.288734][ T7918] Call trace: [ 165.289527][ T7918] dump_backtrace+0x1c8/0x1f4 [ 165.290693][ T7918] show_stack+0x2c/0x3c [ 165.291746][ T7918] dump_stack_lvl+0x108/0x170 [ 165.293043][ T7918] dump_stack+0x1c/0x58 [ 165.294121][ T7918] should_fail_ex+0x3c0/0x51c [ 165.295359][ T7918] should_fail+0x14/0x24 [ 165.296486][ T7918] should_fail_usercopy+0x20/0x30 [ 165.297811][ T7918] strncpy_from_user+0x48/0x54c [ 165.299163][ T7918] getname_flags+0x104/0x48c [ 165.300363][ T7918] __arm64_sys_renameat2+0xb4/0xfc [ 165.301748][ T7918] invoke_syscall+0x98/0x2bc [ 165.303007][ T7918] el0_svc_common+0x138/0x258 [ 165.304222][ T7918] do_el0_svc+0x58/0x13c [ 165.305325][ T7918] el0_svc+0x58/0x168 [ 165.306335][ T7918] el0t_64_sync_handler+0x84/0xf0 [ 165.307708][ T7918] el0t_64_sync+0x18c/0x190 [ 165.309021][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.362731][ T4304] syz-executor: attempt to access beyond end of device [ 165.362731][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 165.366448][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 165.410400][ T4304] syz-executor: attempt to access beyond end of device [ 165.410400][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 165.414238][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 165.416865][ T4304] syz-executor: attempt to access beyond end of device [ 165.416865][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 165.431865][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 165.434774][ T4304] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 147 [ 165.436952][ T4304] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 165.452997][ T4304] Remounting filesystem read-only [ 165.454373][ T4304] NILFS (loop0): error -5 truncating bmap (ino=15) [ 165.456270][ T4304] syz-executor: attempt to access beyond end of device [ 165.456270][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 165.462263][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 165.484384][ T4304] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 165.506244][ T4310] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.730129][ T7932] loop0: detected capacity change from 0 to 2048 [ 165.836455][ T7938] loop3: detected capacity change from 0 to 1024 [ 165.856107][ T7938] UDF-fs: bad mount option "udf" or missing value [ 166.190576][ T7945] FAULT_INJECTION: forcing a failure. [ 166.190576][ T7945] name failslab, interval 1, probability 0, space 0, times 0 [ 166.212518][ T7945] CPU: 0 PID: 7945 Comm: syz.4.1139 Not tainted 6.1.131-syzkaller #0 [ 166.214674][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.217422][ T7945] Call trace: [ 166.218337][ T7945] dump_backtrace+0x1c8/0x1f4 [ 166.219599][ T7945] show_stack+0x2c/0x3c [ 166.220740][ T7945] dump_stack_lvl+0x108/0x170 [ 166.222024][ T7945] dump_stack+0x1c/0x58 [ 166.223197][ T7945] should_fail_ex+0x3c0/0x51c [ 166.224516][ T7945] __should_failslab+0xc8/0x128 [ 166.225805][ T7945] should_failslab+0x10/0x28 [ 166.226996][ T7945] kmem_cache_alloc+0x8c/0x37c [ 166.228297][ T7945] skb_clone+0x19c/0x304 [ 166.229475][ T7945] __netlink_deliver_tap+0x36c/0x6ec [ 166.230885][ T7945] netlink_deliver_tap+0x1ac/0x1b0 [ 166.232278][ T7945] netlink_unicast+0x640/0x898 [ 166.233544][ T7945] netlink_sendmsg+0x844/0xb28 [ 166.234852][ T7945] ____sys_sendmsg+0x55c/0x8c4 [ 166.236129][ T7945] __sys_sendmmsg+0x318/0x7d8 [ 166.237403][ T7945] __arm64_sys_sendmmsg+0xa0/0xbc [ 166.238825][ T7945] invoke_syscall+0x98/0x2bc [ 166.240057][ T7945] el0_svc_common+0x138/0x258 [ 166.241317][ T7945] do_el0_svc+0x58/0x13c [ 166.242448][ T7945] el0_svc+0x58/0x168 [ 166.243510][ T7945] el0t_64_sync_handler+0x84/0xf0 [ 166.244843][ T7945] el0t_64_sync+0x18c/0x190 [ 166.333684][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1139'. [ 166.336189][ T7945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1139'. [ 166.389104][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1139'. [ 166.496908][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1147'. [ 166.511976][ T7961] loop4: detected capacity change from 0 to 2048 [ 166.528653][ T7961] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 166.563070][ T7968] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.625309][ T7974] loop0: detected capacity change from 0 to 512 [ 166.701020][ T4310] syz-executor: attempt to access beyond end of device [ 166.701020][ T4310] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 166.707489][ T4310] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 166.716157][ T4310] syz-executor: attempt to access beyond end of device [ 166.716157][ T4310] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 166.738690][ T4310] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 166.748114][ T4310] syz-executor: attempt to access beyond end of device [ 166.748114][ T4310] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 166.768874][ T7974] EXT4-fs (loop0): orphan cleanup on readonly fs [ 166.770550][ T7974] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 166.777748][ T7974] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 166.791728][ T4310] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 166.794639][ T4310] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 147 [ 166.796743][ T4310] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 166.807208][ T7974] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1147: attempt to clear invalid blocks 2 len 1 [ 166.813149][ T7974] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1147: invalid indirect mapped block 1819239214 (level 0) [ 166.818410][ T7974] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1147: invalid indirect mapped block 1819239214 (level 1) [ 166.829280][ T7974] EXT4-fs (loop0): 1 truncate cleaned up [ 166.830768][ T7974] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.835317][ T4310] Remounting filesystem read-only [ 166.836620][ T4310] NILFS (loop4): error -5 truncating bmap (ino=15) [ 166.838337][ T4310] syz-executor: attempt to access beyond end of device [ 166.838337][ T4310] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 166.842416][ T4310] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 166.859955][ T4310] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 167.708321][ T7974] EXT4-fs error (device loop0): __ext4_remount:6611: comm syz.0.1147: Abort forced by user [ 167.763695][ T7974] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 167.770638][ T7974] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1147'. [ 167.877739][ T7987] FAULT_INJECTION: forcing a failure. [ 167.877739][ T7987] name failslab, interval 1, probability 0, space 0, times 0 [ 167.922767][ T7987] CPU: 0 PID: 7987 Comm: syz.3.1154 Not tainted 6.1.131-syzkaller #0 [ 167.925026][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.927662][ T7987] Call trace: [ 167.928559][ T7987] dump_backtrace+0x1c8/0x1f4 [ 167.929731][ T7987] show_stack+0x2c/0x3c [ 167.930829][ T7987] dump_stack_lvl+0x108/0x170 [ 167.932039][ T7987] dump_stack+0x1c/0x58 [ 167.933125][ T7987] should_fail_ex+0x3c0/0x51c [ 167.934336][ T7987] __should_failslab+0xc8/0x128 [ 167.935685][ T7987] should_failslab+0x10/0x28 [ 167.936876][ T7987] kmem_cache_alloc+0x8c/0x37c [ 167.938106][ T7987] skb_clone+0x19c/0x304 [ 167.939232][ T7987] __netlink_deliver_tap+0x36c/0x6ec [ 167.940668][ T7987] netlink_deliver_tap+0x1ac/0x1b0 [ 167.942021][ T7987] netlink_unicast+0x640/0x898 [ 167.943280][ T7987] netlink_sendmsg+0x844/0xb28 [ 167.944595][ T7987] ____sys_sendmsg+0x55c/0x8c4 [ 167.945904][ T7987] __sys_sendmsg+0x26c/0x33c [ 167.947160][ T7987] __arm64_sys_sendmsg+0x80/0x94 [ 167.948421][ T7987] invoke_syscall+0x98/0x2bc [ 167.949625][ T7987] el0_svc_common+0x138/0x258 [ 167.950893][ T7987] do_el0_svc+0x58/0x13c [ 167.952062][ T7987] el0_svc+0x58/0x168 [ 167.953119][ T7987] el0t_64_sync_handler+0x84/0xf0 [ 167.954422][ T7987] el0t_64_sync+0x18c/0x190 [ 168.029202][ T4304] EXT4-fs (loop0): unmounting filesystem. [ 168.142918][ T7993] loop2: detected capacity change from 0 to 256 [ 168.194280][ T7993] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 168.226523][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1156'. [ 168.248950][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1156'. [ 168.274764][ T7997] loop0: detected capacity change from 0 to 4096 [ 168.334022][ T8002] netlink: 'syz.3.1160': attribute type 10 has an invalid length. [ 168.403738][ T8004] loop4: detected capacity change from 0 to 1024 [ 168.406048][ T8004] UDF-fs: bad mount option "udf" or missing value [ 168.489489][ T8002] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.527087][ T8010] loop0: detected capacity change from 0 to 2048 [ 168.655871][ T8005] netlink: 'syz.3.1160': attribute type 10 has an invalid length. [ 168.658512][ T8005] device veth0_macvtap left promiscuous mode [ 168.709057][ T8010] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 168.773412][ T8018] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 168.792609][ T8005] batman_adv: batadv0: Adding interface: macvtap0 [ 168.798308][ T8005] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.812739][ T8005] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 169.565839][ T4304] syz-executor: attempt to access beyond end of device [ 169.565839][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 169.591891][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.597112][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 169.611539][ T4304] syz-executor: attempt to access beyond end of device [ 169.611539][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 169.615421][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.618102][ T4304] syz-executor: attempt to access beyond end of device [ 169.618102][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 169.688872][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.692199][ T4304] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 147 [ 169.694234][ T4304] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 169.703314][ T4304] Remounting filesystem read-only [ 169.704662][ T4304] NILFS (loop0): error -5 truncating bmap (ino=15) [ 169.706317][ T4304] syz-executor: attempt to access beyond end of device [ 169.706317][ T4304] loop0: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 169.723985][ T8028] loop2: detected capacity change from 0 to 256 [ 169.726674][ T4304] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1) [ 169.732790][ T4304] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 169.778357][ T8028] FAT-fs (loop2): Directory bread(block 64) failed [ 169.788656][ T8028] FAT-fs (loop2): Directory bread(block 65) failed [ 169.790522][ T8028] FAT-fs (loop2): Directory bread(block 66) failed [ 169.792176][ T8028] FAT-fs (loop2): Directory bread(block 67) failed [ 169.793896][ T8028] FAT-fs (loop2): Directory bread(block 68) failed [ 169.795608][ T8028] FAT-fs (loop2): Directory bread(block 69) failed [ 169.833188][ T8028] FAT-fs (loop2): Directory bread(block 70) failed [ 169.838077][ T8028] FAT-fs (loop2): Directory bread(block 71) failed [ 169.884551][ T8028] FAT-fs (loop2): Directory bread(block 72) failed [ 169.898066][ T8028] FAT-fs (loop2): Directory bread(block 73) failed [ 169.997659][ T8035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.040640][ T8035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.481186][ T8041] loop2: detected capacity change from 0 to 256 [ 170.598120][ T8048] loop4: detected capacity change from 0 to 1024 [ 170.601950][ T8048] UDF-fs: bad mount option "udf" or missing value [ 170.716211][ T8050] loop1: detected capacity change from 0 to 2048 [ 170.726880][ T8050] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 170.765120][ T8053] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 170.829624][ T4295] syz-executor: attempt to access beyond end of device [ 170.829624][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 170.835011][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 170.846967][ T4295] syz-executor: attempt to access beyond end of device [ 170.846967][ T4295] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 170.851175][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 170.853935][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 170.857129][ T4295] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 147 [ 170.865699][ T4295] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 170.869367][ T4295] Remounting filesystem read-only [ 170.870910][ T4295] NILFS (loop1): error -5 truncating bmap (ino=15) [ 170.872845][ T4295] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 170.877727][ T4295] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 171.183142][ T8059] loop1: detected capacity change from 0 to 32768 [ 171.185660][ T8059] XFS: ikeep mount option is deprecated. [ 171.222624][ T8059] XFS (loop1): Mounting V5 Filesystem [ 171.253131][ T8059] XFS (loop1): Ending clean mount [ 171.261983][ T8059] XFS (loop1): Quotacheck needed: Please wait. [ 171.302363][ T8073] FAULT_INJECTION: forcing a failure. [ 171.302363][ T8073] name failslab, interval 1, probability 0, space 0, times 0 [ 171.305841][ T8073] CPU: 0 PID: 8073 Comm: syz.3.1182 Not tainted 6.1.131-syzkaller #0 [ 171.308063][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.310830][ T8073] Call trace: [ 171.311757][ T8073] dump_backtrace+0x1c8/0x1f4 [ 171.313068][ T8073] show_stack+0x2c/0x3c [ 171.314190][ T8073] dump_stack_lvl+0x108/0x170 [ 171.315508][ T8073] dump_stack+0x1c/0x58 [ 171.316655][ T8073] should_fail_ex+0x3c0/0x51c [ 171.317910][ T8073] __should_failslab+0xc8/0x128 [ 171.319259][ T8073] should_failslab+0x10/0x28 [ 171.320454][ T8073] kmem_cache_alloc+0x8c/0x37c [ 171.321723][ T8073] skb_clone+0x19c/0x304 [ 171.322876][ T8073] __netlink_deliver_tap+0x36c/0x6ec [ 171.324321][ T8073] netlink_deliver_tap+0x1ac/0x1b0 [ 171.325690][ T8073] netlink_unicast+0x640/0x898 [ 171.326959][ T8073] netlink_sendmsg+0x844/0xb28 [ 171.328230][ T8073] ____sys_sendmsg+0x55c/0x8c4 [ 171.329535][ T8073] __sys_sendmsg+0x26c/0x33c [ 171.330724][ T8073] __arm64_sys_sendmsg+0x80/0x94 [ 171.331144][ T8059] XFS (loop1): Quotacheck: Done. [ 171.332057][ T8073] invoke_syscall+0x98/0x2bc [ 171.332077][ T8073] el0_svc_common+0x138/0x258 [ 171.335935][ T8073] do_el0_svc+0x58/0x13c [ 171.337086][ T8073] el0_svc+0x58/0x168 [ 171.338192][ T8073] el0t_64_sync_handler+0x84/0xf0 [ 171.339585][ T8073] el0t_64_sync+0x18c/0x190 [ 171.406998][ T8076] FAULT_INJECTION: forcing a failure. [ 171.406998][ T8076] name failslab, interval 1, probability 0, space 0, times 0 [ 171.412849][ T4295] XFS (loop1): Unmounting Filesystem [ 171.448713][ T8076] CPU: 1 PID: 8076 Comm: syz.2.1183 Not tainted 6.1.131-syzkaller #0 [ 171.450973][ T8076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.453664][ T8076] Call trace: [ 171.454453][ T8076] dump_backtrace+0x1c8/0x1f4 [ 171.455645][ T8076] show_stack+0x2c/0x3c [ 171.456686][ T8076] dump_stack_lvl+0x108/0x170 [ 171.457843][ T8076] dump_stack+0x1c/0x58 [ 171.459046][ T8076] should_fail_ex+0x3c0/0x51c [ 171.460322][ T8076] __should_failslab+0xc8/0x128 [ 171.461624][ T8076] should_failslab+0x10/0x28 [ 171.462811][ T8076] kmem_cache_alloc+0x8c/0x37c [ 171.464041][ T8076] skb_clone+0x19c/0x304 [ 171.465177][ T8076] __netlink_deliver_tap+0x36c/0x6ec [ 171.466548][ T8076] netlink_deliver_tap+0x1ac/0x1b0 [ 171.467862][ T8076] netlink_unicast+0x640/0x898 [ 171.469085][ T8076] netlink_sendmsg+0x844/0xb28 [ 171.470322][ T8076] ____sys_sendmsg+0x55c/0x8c4 [ 171.471598][ T8076] __sys_sendmmsg+0x318/0x7d8 [ 171.472831][ T8076] __arm64_sys_sendmmsg+0xa0/0xbc [ 171.474174][ T8076] invoke_syscall+0x98/0x2bc [ 171.475421][ T8076] el0_svc_common+0x138/0x258 [ 171.476619][ T8076] do_el0_svc+0x58/0x13c [ 171.477738][ T8076] el0_svc+0x58/0x168 [ 171.478748][ T8076] el0t_64_sync_handler+0x84/0xf0 [ 171.480206][ T8076] el0t_64_sync+0x18c/0x190 [ 171.481538][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.559285][ T8076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1183'. [ 171.561872][ T8076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1183'. [ 171.627372][ T8084] loop3: detected capacity change from 0 to 2048 [ 171.653551][ T8084] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.720271][ T8087] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.882476][ T4301] bio_check_eod: 2 callbacks suppressed [ 171.882493][ T4301] syz-executor: attempt to access beyond end of device [ 171.882493][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 171.905862][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 171.925329][ T4301] syz-executor: attempt to access beyond end of device [ 171.925329][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 171.957543][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 171.977437][ T4301] syz-executor: attempt to access beyond end of device [ 171.977437][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 171.995203][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 172.006800][ T4301] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 172.026452][ T4352] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-5.0.0.11.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 172.031203][ T4352] dvb_usb_dibusb_mb: probe of 1-1:255.49 failed with error -22 [ 172.035870][ T4301] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 172.048964][ T4301] Remounting filesystem read-only [ 172.055811][ T4301] NILFS (loop3): error -5 truncating bmap (ino=15) [ 172.070086][ T4301] syz-executor: attempt to access beyond end of device [ 172.070086][ T4301] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 172.082603][ T4352] dvb-usb: found a 'Compro Videomate DVB-U2000 - DVB-T USB1.1 (please confirm to linux-dvb)' in cold state, will try to load a firmware [ 172.093278][ T4301] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 172.099332][ T4352] usb 1-1: Direct firmware load for dvb-usb-dibusb-5.0.0.11.fw failed with error -2 [ 172.112514][ T4352] usb 1-1: Falling back to sysfs fallback for: dvb-usb-dibusb-5.0.0.11.fw [ 172.125504][ T4301] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 172.214107][ T8079] loop0: detected capacity change from 0 to 32768 [ 172.216904][ T8079] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1186 (8079) [ 172.235154][ T8079] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.237859][ T8079] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 172.249628][ T8079] BTRFS info (device loop0): using free space tree [ 172.360126][ T8110] loop2: detected capacity change from 0 to 16 [ 172.411112][ T8114] FAULT_INJECTION: forcing a failure. [ 172.411112][ T8114] name failslab, interval 1, probability 0, space 0, times 0 [ 172.414355][ T8114] CPU: 1 PID: 8114 Comm: syz.3.1193 Not tainted 6.1.131-syzkaller #0 [ 172.416318][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.419153][ T8114] Call trace: [ 172.419967][ T8114] dump_backtrace+0x1c8/0x1f4 [ 172.421139][ T8114] show_stack+0x2c/0x3c [ 172.422178][ T8114] dump_stack_lvl+0x108/0x170 [ 172.423403][ T8114] dump_stack+0x1c/0x58 [ 172.424539][ T8114] should_fail_ex+0x3c0/0x51c [ 172.425740][ T8114] __should_failslab+0xc8/0x128 [ 172.427040][ T8114] should_failslab+0x10/0x28 [ 172.428270][ T8114] kmem_cache_alloc+0x8c/0x37c [ 172.429534][ T8114] skb_clone+0x19c/0x304 [ 172.430624][ T8114] __netlink_deliver_tap+0x36c/0x6ec [ 172.432178][ T8114] netlink_deliver_tap+0x1ac/0x1b0 [ 172.433495][ T8114] netlink_unicast+0x640/0x898 [ 172.434784][ T8114] netlink_sendmsg+0x844/0xb28 [ 172.436096][ T8114] ____sys_sendmsg+0x55c/0x8c4 [ 172.437371][ T8114] __sys_sendmsg+0x26c/0x33c [ 172.438596][ T8114] __arm64_sys_sendmsg+0x80/0x94 [ 172.439913][ T8114] invoke_syscall+0x98/0x2bc [ 172.441225][ T8114] el0_svc_common+0x138/0x258 [ 172.442574][ T8114] do_el0_svc+0x58/0x13c [ 172.443675][ T8114] el0_svc+0x58/0x168 [ 172.444745][ T8114] el0t_64_sync_handler+0x84/0xf0 [ 172.446090][ T8114] el0t_64_sync+0x18c/0x190 [ 172.447327][ C1] vkms_vblank_simulate: vblank timer overrun [ 172.498689][ T8079] BTRFS info (device loop0): enabling ssd optimizations [ 172.856062][ T8124] loop4: detected capacity change from 0 to 32768 [ 172.867289][ T8124] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1195 (8124) [ 172.880505][ T8124] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.883818][ T8124] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 172.887052][ T8124] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 172.903285][ T8124] BTRFS error (device loop4): open_ctree failed: -22 [ 172.914146][ T5102] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (5102) [ 172.924838][ T8124] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1195'. [ 173.114912][ T8131] loop4: detected capacity change from 0 to 1024 [ 173.117503][ T8131] UDF-fs: bad mount option "udf" or missing value [ 173.331321][ T8134] FAULT_INJECTION: forcing a failure. [ 173.331321][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 173.334754][ T8134] CPU: 0 PID: 8134 Comm: syz.1.1198 Not tainted 6.1.131-syzkaller #0 [ 173.336926][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.339548][ T8134] Call trace: [ 173.340413][ T8134] dump_backtrace+0x1c8/0x1f4 [ 173.341633][ T8134] show_stack+0x2c/0x3c [ 173.342692][ T8134] dump_stack_lvl+0x108/0x170 [ 173.343909][ T8134] dump_stack+0x1c/0x58 [ 173.344978][ T8134] should_fail_ex+0x3c0/0x51c [ 173.346209][ T8134] __should_failslab+0xc8/0x128 [ 173.347457][ T8134] should_failslab+0x10/0x28 [ 173.348611][ T8134] kmem_cache_alloc+0x8c/0x37c [ 173.349812][ T8134] dst_alloc+0xf8/0x170 [ 173.350930][ T8134] ip6_pol_route+0xa9c/0x12f0 [ 173.352120][ T8134] ip6_pol_route_input+0x74/0x94 [ 173.353413][ T8134] fib6_rule_lookup+0x2dc/0x560 [ 173.354672][ T8134] ip6_route_input+0x6b8/0xb34 [ 173.355892][ T8134] ip6_rcv_finish_core+0x218/0x3c8 [ 173.357201][ T8134] ip6_rcv_finish+0x124/0x220 [ 173.358434][ T8134] NF_HOOK+0x328/0x3d4 [ 173.359548][ T8134] ipv6_rcv+0x9c/0xbc [ 173.360580][ T8134] __netif_receive_skb+0x18c/0x400 [ 173.361887][ T8134] netif_receive_skb+0x204/0x9f4 [ 173.363195][ T8134] tun_rx_batched+0x568/0x6e4 [ 173.364396][ T8134] tun_get_user+0x2438/0x386c [ 173.365612][ T8134] tun_chr_write_iter+0xfc/0x204 [ 173.366896][ T8134] vfs_write+0x610/0x91c [ 173.367998][ T8134] ksys_write+0x15c/0x26c [ 173.369161][ T8134] __arm64_sys_write+0x7c/0x90 [ 173.370421][ T8134] invoke_syscall+0x98/0x2bc [ 173.371685][ T8134] el0_svc_common+0x138/0x258 [ 173.372914][ T8134] do_el0_svc+0x58/0x13c [ 173.374037][ T8134] el0_svc+0x58/0x168 [ 173.375106][ T8134] el0t_64_sync_handler+0x84/0xf0 [ 173.376438][ T8134] el0t_64_sync+0x18c/0x190 [ 173.423245][ T8136] loop1: detected capacity change from 0 to 1024 [ 173.500692][ T8139] loop1: detected capacity change from 0 to 2048 [ 173.504638][ T8139] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 173.521073][ T8140] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.750136][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1186'. [ 173.788306][ T4304] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.082795][ T8154] loop4: detected capacity change from 0 to 64 [ 174.319516][ T8164] loop3: detected capacity change from 0 to 2048 [ 174.339131][ T8164] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 174.410850][ T8168] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.792762][ T8180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1216'. [ 174.895914][ T8184] loop4: detected capacity change from 0 to 1024 [ 174.896632][ T8184] UDF-fs: bad mount option "udf" or missing value [ 174.925096][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 175.183954][ T8189] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 175.227529][ T8162] loop1: detected capacity change from 0 to 32768 [ 175.241687][ T8162] XFS: ikeep mount option is deprecated. [ 175.290754][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 175.294832][ T8162] XFS (loop1): Mounting V5 Filesystem [ 175.349239][ T8189] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 175.397353][ T8185] loop3: detected capacity change from 0 to 32768 [ 175.400677][ T8162] XFS (loop1): Ending clean mount [ 175.406096][ T8162] XFS (loop1): Quotacheck needed: Please wait. [ 175.425127][ T8185] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.1215 (8185) [ 175.431501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 175.473148][ T8185] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.475921][ T8185] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.478383][ T8185] BTRFS info (device loop3): force zlib compression, level 3 [ 175.488454][ T8162] XFS (loop1): Quotacheck: Done. [ 175.500670][ T8185] BTRFS info (device loop3): force clearing of disk cache [ 175.502600][ T8185] BTRFS info (device loop3): setting nodatasum [ 175.504275][ T8185] BTRFS info (device loop3): doing ref verification [ 175.506000][ T8185] BTRFS info (device loop3): allowing degraded mounts [ 175.507737][ T8185] BTRFS info (device loop3): enabling disk space caching [ 175.509943][ T8185] BTRFS info (device loop3): disk space caching is enabled [ 175.556573][ T8185] BTRFS info (device loop3): enabling ssd optimizations [ 175.560327][ T8185] BTRFS info (device loop3): rebuilding free space tree [ 175.566971][ T8185] BTRFS info (device loop3): disabling free space tree [ 175.568990][ T8185] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.571590][ T8185] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.644883][ T4301] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 175.844254][ T4295] XFS (loop1): Unmounting Filesystem [ 175.890766][ T8233] loop4: detected capacity change from 0 to 128 [ 175.968824][ T5102] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.071363][ T8237] loop3: detected capacity change from 0 to 2048 [ 176.089333][ T8239] FAULT_INJECTION: forcing a failure. [ 176.089333][ T8239] name failslab, interval 1, probability 0, space 0, times 0 [ 176.092703][ T8239] CPU: 1 PID: 8239 Comm: syz.4.1228 Not tainted 6.1.131-syzkaller #0 [ 176.094737][ T8239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.097335][ T8239] Call trace: [ 176.098325][ T8239] dump_backtrace+0x1c8/0x1f4 [ 176.099569][ T8239] show_stack+0x2c/0x3c [ 176.100699][ T8239] dump_stack_lvl+0x108/0x170 [ 176.101970][ T8239] dump_stack+0x1c/0x58 [ 176.103086][ T8239] should_fail_ex+0x3c0/0x51c [ 176.104331][ T8239] __should_failslab+0xc8/0x128 [ 176.105602][ T8239] should_failslab+0x10/0x28 [ 176.106817][ T8239] slab_pre_alloc_hook+0x6c/0x33c [ 176.108208][ T8239] kmem_cache_alloc_lru+0x64/0x2f8 [ 176.109571][ T8239] __d_alloc+0x44/0x6f8 [ 176.110654][ T8239] d_alloc_pseudo+0x28/0x8c [ 176.111777][ T8239] alloc_file_pseudo+0x110/0x278 [ 176.113101][ T8239] sock_alloc_file+0xb8/0x230 [ 176.114390][ T8239] __sys_socket+0x1a0/0x32c [ 176.115581][ T8239] __arm64_sys_socket+0x7c/0x94 [ 176.116811][ T8239] invoke_syscall+0x98/0x2bc [ 176.118011][ T8239] el0_svc_common+0x138/0x258 [ 176.119237][ T8239] do_el0_svc+0x58/0x13c [ 176.120407][ T8239] el0_svc+0x58/0x168 [ 176.121516][ T8239] el0t_64_sync_handler+0x84/0xf0 [ 176.122855][ T8239] el0t_64_sync+0x18c/0x190 [ 176.124118][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.136694][ T8237] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 176.156209][ T8235] loop2: detected capacity change from 0 to 8192 [ 176.158254][ T8240] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.193910][ T8235] loop2: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 176.225767][ T8235] loop2: p3 size 132352 extends beyond EOD, truncated [ 176.458039][ T8235] loop2: p6 size 132352 extends beyond EOD, truncated [ 176.510731][ T8235] loop2: p8 size 132352 extends beyond EOD, truncated [ 176.548934][ T8235] loop2: p10 size 132352 extends beyond EOD, truncated [ 176.574380][ T8235] loop2: p12 size 132352 extends beyond EOD, truncated [ 176.607082][ T8235] loop2: p14 size 132352 extends beyond EOD, truncated [ 176.634589][ T8235] loop2: p16 size 132352 extends beyond EOD, truncated [ 176.663337][ T8235] loop2: p18 size 132352 extends beyond EOD, truncated [ 176.692182][ T8235] loop2: p20 size 132352 extends beyond EOD, truncated [ 176.699744][ T8257] xt_l2tp: missing protocol rule (udp|l2tpip) [ 176.718454][ T8235] loop2: p22 size 132352 extends beyond EOD, truncated [ 176.748219][ T8235] loop2: p24 size 132352 extends beyond EOD, truncated [ 176.771494][ T8235] loop2: p26 size 132352 extends beyond EOD, truncated [ 176.806064][ T8235] loop2: p28 size 132352 extends beyond EOD, truncated [ 176.830225][ T8235] loop2: p30 size 132352 extends beyond EOD, truncated [ 176.855172][ T8235] loop2: p32 size 132352 extends beyond EOD, truncated [ 176.898210][ T8235] loop2: p34 size 132352 extends beyond EOD, truncated [ 176.938739][ T8235] loop2: p36 size 132352 extends beyond EOD, truncated [ 176.956795][ T8235] loop2: p38 size 132352 extends beyond EOD, truncated [ 176.982445][ T8235] loop2: p40 size 132352 extends beyond EOD, truncated [ 176.989577][ T8263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1235'. [ 176.997208][ T8235] loop2: p42 size 132352 extends beyond EOD, truncated [ 177.001361][ T8262] loop1: detected capacity change from 0 to 128 [ 177.028413][ T8235] loop2: p44 size 132352 extends beyond EOD, truncated [ 177.048059][ T8235] loop2: p46 size 132352 extends beyond EOD, truncated [ 177.100916][ T8235] loop2: p48 size 132352 extends beyond EOD, truncated [ 177.145710][ T8235] loop2: p50 size 132352 extends beyond EOD, truncated [ 177.159246][ T8235] loop2: p52 size 132352 extends beyond EOD, truncated [ 177.172292][ T8235] loop2: p54 size 132352 extends beyond EOD, truncated [ 177.187406][ T8265] loop1: detected capacity change from 0 to 1024 [ 177.198416][ T8253] loop3: detected capacity change from 0 to 32768 [ 177.200985][ T8235] loop2: p56 size 132352 extends beyond EOD, truncated [ 177.219546][ T8235] loop2: p58 size 132352 extends beyond EOD, truncated [ 177.237222][ T8265] UDF-fs: bad mount option "udf" or missing value [ 177.267203][ T8235] loop2: p60 size 132352 extends beyond EOD, truncated [ 177.278189][ T8235] loop2: p62 size 132352 extends beyond EOD, truncated [ 177.297968][ T8235] loop2: p64 size 132352 extends beyond EOD, truncated [ 177.301511][ T8268] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 177.336857][ T8235] loop2: p66 size 132352 extends beyond EOD, truncated [ 177.350871][ T8235] loop2: p68 size 132352 extends beyond EOD, truncated [ 177.379173][ T8235] loop2: p70 size 132352 extends beyond EOD, truncated [ 177.399939][ T8235] loop2: p72 size 132352 extends beyond EOD, truncated [ 177.406489][ T8235] loop2: p74 size 132352 extends beyond EOD, truncated [ 177.463951][ T8235] loop2: p76 size 132352 extends beyond EOD, truncated [ 177.504628][ T8235] loop2: p78 size 132352 extends beyond EOD, truncated [ 177.515059][ T8235] loop2: p80 size 132352 extends beyond EOD, truncated [ 177.549324][ T8235] loop2: p82 size 132352 extends beyond EOD, truncated [ 177.569543][ T8235] loop2: p84 size 132352 extends beyond EOD, truncated [ 177.572414][ T8235] loop2: p86 size 132352 extends beyond EOD, truncated [ 177.589025][ T8235] loop2: p88 size 132352 extends beyond EOD, truncated [ 177.618758][ T8235] loop2: p90 size 132352 extends beyond EOD, truncated [ 177.629904][ T8235] loop2: p92 size 132352 extends beyond EOD, truncated [ 177.632711][ T8235] loop2: p94 size 132352 extends beyond EOD, truncated [ 177.644793][ T8235] loop2: p96 size 132352 extends beyond EOD, truncated [ 177.644898][ T8272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.650205][ T8235] loop2: p98 size 132352 extends beyond EOD, truncated [ 177.660870][ T8272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.678493][ T8235] loop2: p100 size 132352 extends beyond EOD, truncated [ 177.682989][ T8235] loop2: p102 size 132352 extends beyond EOD, truncated [ 177.689490][ T8235] loop2: p104 size 132352 extends beyond EOD, truncated [ 177.699259][ T8272] FAULT_INJECTION: forcing a failure. [ 177.699259][ T8272] name failslab, interval 1, probability 0, space 0, times 0 [ 177.710763][ T8235] loop2: p106 size 132352 extends beyond EOD, truncated [ 177.714442][ T8235] loop2: p108 size 132352 extends beyond EOD, truncated [ 177.716135][ T8272] CPU: 0 PID: 8272 Comm: syz.3.1238 Not tainted 6.1.131-syzkaller #0 [ 177.718385][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.721011][ T8272] Call trace: [ 177.721873][ T8272] dump_backtrace+0x1c8/0x1f4 [ 177.723098][ T8272] show_stack+0x2c/0x3c [ 177.724220][ T8272] dump_stack_lvl+0x108/0x170 [ 177.724705][ T8235] loop2: p110 size 132352 extends beyond EOD, [ 177.725440][ T8272] dump_stack+0x1c/0x58 [ 177.727043][ T8235] truncated [ 177.728182][ T8272] should_fail_ex+0x3c0/0x51c [ 177.730241][ T8272] __should_failslab+0xc8/0x128 [ 177.731572][ T8272] should_failslab+0x10/0x28 [ 177.732826][ T8272] __kmem_cache_alloc_node+0x80/0x388 [ 177.734235][ T8272] kmalloc_node_trace+0x44/0x90 [ 177.735493][ T8272] page_pool_create+0x88/0x54c [ 177.736782][ T8272] bpf_test_run_xdp_live+0x27c/0x18a0 [ 177.738174][ T8272] bpf_prog_test_run_xdp+0x670/0xf60 [ 177.739579][ T8272] bpf_prog_test_run+0x2dc/0x364 [ 177.740926][ T8272] __sys_bpf+0x390/0x654 [ 177.742076][ T8272] __arm64_sys_bpf+0x80/0x98 [ 177.743268][ T8272] invoke_syscall+0x98/0x2bc [ 177.744436][ T8272] el0_svc_common+0x138/0x258 [ 177.745630][ T8272] do_el0_svc+0x58/0x13c [ 177.746729][ T8272] el0_svc+0x58/0x168 [ 177.747766][ T8272] el0t_64_sync_handler+0x84/0xf0 [ 177.749043][ T8272] el0t_64_sync+0x18c/0x190 [ 177.753419][ T8235] loop2: p112 size 132352 extends beyond EOD, truncated [ 177.765556][ T8235] loop2: p114 size 132352 extends beyond EOD, truncated [ 177.797843][ T8235] loop2: p116 size 132352 extends beyond EOD, truncated [ 177.805791][ T8235] loop2: p118 size 132352 extends beyond EOD, truncated [ 177.834893][ T8235] loop2: p120 size 132352 extends beyond EOD, truncated [ 177.845877][ T8235] loop2: p122 size 132352 extends beyond EOD, truncated [ 177.861821][ T8235] loop2: p124 size 132352 extends beyond EOD, truncated [ 177.879696][ T8235] loop2: p126 size 132352 extends beyond EOD, truncated [ 177.885313][ T8235] loop2: p128 size 132352 extends beyond EOD, truncated [ 177.901436][ T8235] loop2: p130 size 132352 extends beyond EOD, truncated [ 177.910903][ T8235] loop2: p132 size 132352 extends beyond EOD, truncated [ 177.920673][ T8235] loop2: p134 size 132352 extends beyond EOD, truncated [ 177.928249][ T8268] loop4: detected capacity change from 0 to 32768 [ 177.930682][ T8235] loop2: p136 size 132352 extends beyond EOD, truncated [ 177.959023][ T8235] loop2: p138 size 132352 extends beyond EOD, truncated [ 177.975849][ T8235] loop2: p140 size 132352 extends beyond EOD, truncated [ 177.980154][ T5102] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.990722][ T8235] loop2: p142 size 132352 extends beyond EOD, truncated [ 178.059648][ T8235] loop2: p144 size 132352 extends beyond EOD, truncated [ 178.063426][ T8235] loop2: p146 size 132352 extends beyond EOD, truncated [ 178.079013][ T8235] loop2: p148 size 132352 extends beyond EOD, truncated [ 178.093363][ T8235] loop2: p150 size 132352 extends beyond EOD, truncated [ 178.106788][ T8235] loop2: p152 size 132352 extends beyond EOD, truncated [ 178.129177][ T8235] loop2: p154 size 132352 extends beyond EOD, truncated [ 178.136190][ T8235] loop2: p156 size 132352 extends beyond EOD, truncated [ 178.150648][ T8235] loop2: p158 size 132352 extends beyond EOD, truncated [ 178.163041][ T8235] loop2: p160 size 132352 extends beyond EOD, truncated [ 178.166591][ T8235] loop2: p162 size 132352 extends beyond EOD, truncated [ 178.176687][ T8274] loop1: detected capacity change from 0 to 1024 [ 178.180185][ T8235] loop2: p164 size 132352 extends beyond EOD, truncated [ 178.191324][ T8235] loop2: p166 size 132352 extends beyond EOD, truncated [ 178.194974][ T8235] loop2: p168 size 132352 extends beyond EOD, truncated [ 178.207227][ T8235] loop2: p170 size 132352 extends beyond EOD, truncated [ 178.217316][ T8235] loop2: p172 size 132352 extends beyond EOD, truncated [ 178.228083][ T8235] loop2: p174 size 132352 extends beyond EOD, truncated [ 178.231582][ T8235] loop2: p176 size 132352 extends beyond EOD, truncated [ 178.237635][ T8235] loop2: p178 size 132352 extends beyond EOD, truncated [ 178.237812][ T8274] overlayfs: missing 'lowerdir' [ 178.249604][ T8235] loop2: p180 size 132352 extends beyond EOD, truncated [ 178.254660][ T8235] loop2: p182 size 132352 extends beyond EOD, truncated [ 178.257584][ T8235] loop2: p184 size 132352 extends beyond EOD, truncated [ 178.270657][ T8235] loop2: p186 size 132352 extends beyond EOD, truncated [ 178.277262][ T8235] loop2: p188 size 132352 extends beyond EOD, truncated [ 178.290501][ T8235] loop2: p190 size 132352 extends beyond EOD, truncated [ 178.294233][ T8235] loop2: p192 size 132352 extends beyond EOD, truncated [ 178.300596][ T8235] loop2: p194 size 132352 extends beyond EOD, truncated [ 178.305466][ T8276] loop4: detected capacity change from 0 to 2048 [ 178.308304][ T8276] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 178.316576][ T8235] loop2: p196 size 132352 extends beyond EOD, truncated [ 178.320194][ T8235] loop2: p198 size 132352 extends beyond EOD, truncated [ 178.326357][ T8235] loop2: p200 size 132352 extends beyond EOD, truncated [ 178.336567][ T8277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.344652][ T8235] loop2: p202 size 132352 extends beyond EOD, truncated [ 178.354975][ T8235] loop2: p204 size 132352 extends beyond EOD, truncated [ 178.364408][ T8235] loop2: p206 size 132352 extends beyond EOD, truncated [ 178.376962][ T8235] loop2: p208 size 132352 extends beyond EOD, truncated [ 178.388041][ T8235] loop2: p210 size 132352 extends beyond EOD, truncated [ 178.404019][ T8235] loop2: p212 size 132352 extends beyond EOD, truncated [ 178.414352][ T8235] loop2: p214 size 132352 extends beyond EOD, truncated [ 178.422565][ T8235] loop2: p216 size 132352 extends beyond EOD, truncated [ 178.426510][ T8235] loop2: p218 size 132352 extends beyond EOD, truncated [ 178.464755][ T8235] loop2: p220 size 132352 extends beyond EOD, truncated [ 178.468301][ T8235] loop2: p222 size 132352 extends beyond EOD, truncated [ 178.473841][ T8235] loop2: p224 size 132352 extends beyond EOD, truncated [ 178.489884][ T8235] loop2: p226 size 132352 extends beyond EOD, truncated [ 178.493637][ T8235] loop2: p228 size 132352 extends beyond EOD, truncated [ 178.497427][ T8235] loop2: p230 size 132352 extends beyond EOD, truncated [ 178.503829][ T8235] loop2: p232 size 132352 extends beyond EOD, truncated [ 178.507401][ T8235] loop2: p234 size 132352 extends beyond EOD, truncated [ 178.542885][ T8235] loop2: p236 size 132352 extends beyond EOD, truncated [ 178.546066][ T8235] loop2: p238 size 132352 extends beyond EOD, truncated [ 178.556818][ T8235] loop2: p240 size 132352 extends beyond EOD, truncated [ 178.573572][ T8235] loop2: p242 size 132352 extends beyond EOD, truncated [ 178.581912][ T8235] loop2: p244 size 132352 extends beyond EOD, truncated [ 178.593822][ T8235] loop2: p246 size 132352 extends beyond EOD, truncated [ 178.603375][ T8235] loop2: p248 size 132352 extends beyond EOD, truncated [ 178.610222][ T8235] loop2: p250 size 132352 extends beyond EOD, truncated [ 178.626707][ T8235] loop2: p252 size 132352 extends beyond EOD, truncated [ 178.634277][ T8235] loop2: p254 size 132352 extends beyond EOD, truncated [ 178.676892][ T8290] FAULT_INJECTION: forcing a failure. [ 178.676892][ T8290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.695262][ T8290] CPU: 0 PID: 8290 Comm: syz.4.1245 Not tainted 6.1.131-syzkaller #0 [ 178.697502][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.700144][ T8290] Call trace: [ 178.700975][ T8290] dump_backtrace+0x1c8/0x1f4 [ 178.702341][ T8290] show_stack+0x2c/0x3c [ 178.703539][ T8290] dump_stack_lvl+0x108/0x170 [ 178.704852][ T8290] dump_stack+0x1c/0x58 [ 178.706003][ T8290] should_fail_ex+0x3c0/0x51c [ 178.707204][ T8290] should_fail+0x14/0x24 [ 178.708337][ T8290] should_fail_usercopy+0x20/0x30 [ 178.709676][ T8290] simple_read_from_buffer+0xd4/0x248 [ 178.711139][ T8290] proc_fail_nth_read+0x198/0x234 [ 178.712434][ T8290] vfs_read+0x280/0x8b4 [ 178.713598][ T8290] ksys_read+0x15c/0x26c [ 178.714729][ T8290] __arm64_sys_read+0x7c/0x90 [ 178.715924][ T8290] invoke_syscall+0x98/0x2bc [ 178.717177][ T8290] el0_svc_common+0x138/0x258 [ 178.718432][ T8290] do_el0_svc+0x58/0x13c [ 178.719616][ T8290] el0_svc+0x58/0x168 [ 178.720709][ T8290] el0t_64_sync_handler+0x84/0xf0 [ 178.722103][ T8290] el0t_64_sync+0x18c/0x190 [ 178.998051][ T8298] loop4: detected capacity change from 0 to 1024 [ 179.006963][ T8298] UDF-fs: bad mount option "udf" or missing value [ 179.484470][ T8302] FAULT_INJECTION: forcing a failure. [ 179.484470][ T8302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.488376][ T8302] CPU: 0 PID: 8302 Comm: syz.1.1250 Not tainted 6.1.131-syzkaller #0 [ 179.490556][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.493226][ T8302] Call trace: [ 179.494126][ T8302] dump_backtrace+0x1c8/0x1f4 [ 179.495366][ T8302] show_stack+0x2c/0x3c [ 179.496500][ T8302] dump_stack_lvl+0x108/0x170 [ 179.497782][ T8302] dump_stack+0x1c/0x58 [ 179.498861][ T8302] should_fail_ex+0x3c0/0x51c [ 179.500085][ T8302] should_fail+0x14/0x24 [ 179.501183][ T8302] should_fail_usercopy+0x20/0x30 [ 179.502574][ T8302] copy_siginfo_to_user+0x3c/0x220 [ 179.503905][ T8302] do_notify_resume+0x1710/0x2cb8 [ 179.505248][ T8302] el0_svc+0x9c/0x168 [ 179.506359][ T8302] el0t_64_sync_handler+0x84/0xf0 [ 179.507625][ T8302] el0t_64_sync+0x18c/0x190 [ 179.634816][ T8304] loop1: detected capacity change from 0 to 512 [ 179.655291][ T8304] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.692010][ T8304] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1251: bg 0: block 496: padding at end of block bitmap is not set [ 179.836362][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 179.908442][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.938950][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.943345][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 179.951341][ T5100] udevd[5100]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 179.958328][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 179.972224][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 179.975869][ T4634] udevd[4634]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 179.985725][ T4632] udevd[4632]: inotify_add_watch(7, /dev/loop2p8, 10) failed: No such file or directory [ 179.991218][ T5101] udevd[5101]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 179.992831][ T4960] udevd[4960]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 180.030850][ T5102] udevd[5102]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 180.086589][ T4484] udevd[4484]: inotify_add_watch(7, /dev/loop2p14, 10) failed: No such file or directory [ 180.270423][ T8308] loop3: detected capacity change from 0 to 32768 [ 180.325786][ T8308] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 180.325786][ T8308] [ 180.339630][ T8308] ERROR: (device loop3): remounting filesystem as read-only [ 180.341973][ T8308] jfs_lookup: dtSearch returned -5 [ 180.503265][ T8319] ERROR: (device loop3): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 180.503265][ T8319] [ 180.517899][ T8312] device batadv_slave_1 entered promiscuous mode [ 181.010736][ T8332] FAULT_INJECTION: forcing a failure. [ 181.010736][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 181.014198][ T8332] CPU: 1 PID: 8332 Comm: syz.2.1258 Not tainted 6.1.131-syzkaller #0 [ 181.016354][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.019086][ T8332] Call trace: [ 181.019938][ T8332] dump_backtrace+0x1c8/0x1f4 [ 181.021244][ T8332] show_stack+0x2c/0x3c [ 181.022390][ T8332] dump_stack_lvl+0x108/0x170 [ 181.023578][ T8332] dump_stack+0x1c/0x58 [ 181.024783][ T8332] should_fail_ex+0x3c0/0x51c [ 181.026004][ T8332] __should_failslab+0xc8/0x128 [ 181.027351][ T8332] should_failslab+0x10/0x28 [ 181.028602][ T8332] __kmem_cache_alloc_node+0x80/0x388 [ 181.029976][ T8332] __kmalloc+0xc4/0x1c4 [ 181.031114][ T8332] sk_prot_alloc+0xc4/0x1f0 [ 181.032277][ T8332] sk_alloc+0x44/0x3e0 [ 181.033356][ T8332] bpf_prog_test_run_skb+0x2dc/0x1094 [ 181.034838][ T8332] bpf_prog_test_run+0x2dc/0x364 [ 181.036171][ T8332] __sys_bpf+0x390/0x654 [ 181.037328][ T8332] __arm64_sys_bpf+0x80/0x98 [ 181.038570][ T8332] invoke_syscall+0x98/0x2bc [ 181.039777][ T8332] el0_svc_common+0x138/0x258 [ 181.041020][ T8332] do_el0_svc+0x58/0x13c [ 181.042163][ T8332] el0_svc+0x58/0x168 [ 181.043191][ T8332] el0t_64_sync_handler+0x84/0xf0 [ 181.044568][ T8332] el0t_64_sync+0x18c/0x190 [ 181.045889][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.066626][ T8333] binder: BINDER_SET_CONTEXT_MGR already set [ 181.068345][ T8333] binder: 8331:8333 ioctl 4018620d 400000000040 returned -16 [ 181.085080][ T8333] binder: 8331:8333 got transaction to invalid handle, 1 [ 181.087105][ T8333] binder: 8333:8331 cannot find target node [ 181.103595][ T8333] binder: 8331:8333 transaction call to 0:0 failed 101/29201/-22, size 0-0 line 3054 [ 181.488381][ T8338] loop2: detected capacity change from 0 to 512 [ 181.524838][ T8338] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 181.527750][ T8338] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 181.645750][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 181.713456][ T8344] FAULT_INJECTION: forcing a failure. [ 181.713456][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 181.717820][ T8342] FAULT_INJECTION: forcing a failure. [ 181.717820][ T8342] name failslab, interval 1, probability 0, space 0, times 0 [ 181.740419][ T8344] CPU: 0 PID: 8344 Comm: syz.2.1262 Not tainted 6.1.131-syzkaller #0 [ 181.742651][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.745491][ T8344] Call trace: [ 181.746342][ T8344] dump_backtrace+0x1c8/0x1f4 [ 181.747540][ T8344] show_stack+0x2c/0x3c [ 181.748671][ T8344] dump_stack_lvl+0x108/0x170 [ 181.749891][ T8344] dump_stack+0x1c/0x58 [ 181.750983][ T8344] should_fail_ex+0x3c0/0x51c [ 181.752195][ T8344] __should_failslab+0xc8/0x128 [ 181.753466][ T8344] should_failslab+0x10/0x28 [ 181.754703][ T8344] kmem_cache_alloc+0x8c/0x37c [ 181.755984][ T8344] skb_clone+0x19c/0x304 [ 181.757092][ T8344] __netlink_deliver_tap+0x36c/0x6ec [ 181.758519][ T8344] netlink_deliver_tap+0x1ac/0x1b0 [ 181.759922][ T8344] netlink_unicast+0x640/0x898 [ 181.761210][ T8344] netlink_sendmsg+0x844/0xb28 [ 181.762569][ T8344] ____sys_sendmsg+0x55c/0x8c4 [ 181.763897][ T8344] __sys_sendmsg+0x26c/0x33c [ 181.765137][ T8344] __arm64_sys_sendmsg+0x80/0x94 [ 181.766424][ T8344] invoke_syscall+0x98/0x2bc [ 181.767646][ T8344] el0_svc_common+0x138/0x258 [ 181.768947][ T8344] do_el0_svc+0x58/0x13c [ 181.770106][ T8344] el0_svc+0x58/0x168 [ 181.771213][ T8344] el0t_64_sync_handler+0x84/0xf0 [ 181.772533][ T8344] el0t_64_sync+0x18c/0x190 [ 181.774553][ T8342] CPU: 1 PID: 8342 Comm: syz.1.1261 Not tainted 6.1.131-syzkaller #0 [ 181.776705][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.779196][ T8342] Call trace: [ 181.780018][ T8342] dump_backtrace+0x1c8/0x1f4 [ 181.781208][ T8342] show_stack+0x2c/0x3c [ 181.782282][ T8342] dump_stack_lvl+0x108/0x170 [ 181.783467][ T8342] dump_stack+0x1c/0x58 [ 181.784526][ T8342] should_fail_ex+0x3c0/0x51c [ 181.785679][ T8342] __should_failslab+0xc8/0x128 [ 181.786944][ T8342] should_failslab+0x10/0x28 [ 181.788192][ T8342] kmem_cache_alloc+0x8c/0x37c [ 181.789427][ T8342] skb_clone+0x19c/0x304 [ 181.790518][ T8342] __netlink_deliver_tap+0x36c/0x6ec [ 181.792009][ T8342] netlink_deliver_tap+0x1ac/0x1b0 [ 181.793406][ T8342] netlink_unicast+0x640/0x898 [ 181.794732][ T8342] netlink_sendmsg+0x844/0xb28 [ 181.796008][ T8342] ____sys_sendmsg+0x55c/0x8c4 [ 181.797345][ T8342] __sys_sendmsg+0x26c/0x33c [ 181.798655][ T8342] __arm64_sys_sendmsg+0x80/0x94 [ 181.799876][ T8342] invoke_syscall+0x98/0x2bc [ 181.801045][ T8342] el0_svc_common+0x138/0x258 [ 181.802233][ T8342] do_el0_svc+0x58/0x13c [ 181.803297][ T8342] el0_svc+0x58/0x168 [ 181.804353][ T8342] el0t_64_sync_handler+0x84/0xf0 [ 181.805633][ T8342] el0t_64_sync+0x18c/0x190 [ 181.806907][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.863435][ T8344] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1262'. [ 182.059882][ T8347] loop2: detected capacity change from 0 to 512 [ 182.081084][ T8347] EXT4-fs (loop2): orphan cleanup on readonly fs [ 182.083165][ T8347] EXT4-fs error (device loop2): ext4_quota_enable:6982: comm syz.2.1264: Bad quota inum: 11, type: 1 [ 182.097756][ T8347] EXT4-fs warning (device loop2): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 182.120886][ T8318] loop4: detected capacity change from 0 to 131072 [ 182.123536][ T8347] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 182.125335][ T8347] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 182.158043][ T8318] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 182.160876][ T8318] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 182.169975][ T8347] device syzkaller1 entered promiscuous mode [ 182.182546][ T8318] F2FS-fs (loop4): invalid crc value [ 182.236380][ T8318] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.303268][ T8318] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 182.305143][ T8318] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 182.494835][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 182.623014][ T8348] loop1: detected capacity change from 0 to 32768 [ 182.748077][ T8348] XFS (loop1): Invalid superblock magic number [ 182.845611][ T8321] device batadv_slave_1 left promiscuous mode [ 183.170646][ T8358] loop2: detected capacity change from 0 to 32768 [ 183.194949][ T8358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1265 (8358) [ 183.209076][ T8358] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.212806][ T8358] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 183.215137][ T8358] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 183.217677][ T8358] BTRFS info (device loop2): use zstd compression, level 3 [ 183.228808][ T8358] BTRFS info (device loop2): using free space tree [ 183.449097][ T8358] BTRFS info (device loop2): enabling ssd optimizations [ 183.464711][ T8348] loop1: detected capacity change from 0 to 1024 [ 183.605426][ T4299] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.987275][ T5815] binder: undelivered TRANSACTION_ERROR: 29201 [ 184.187211][ T8393] loop3: detected capacity change from 0 to 2048 [ 184.195968][ T8393] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.258665][ T8396] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.363431][ T8348] loop1: detected capacity change from 0 to 32768 [ 184.714069][ T8408] loop4: detected capacity change from 0 to 2048 [ 184.744995][ T8408] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.747575][ T8408] NILFS (loop4): mounting unchecked fs [ 184.749932][ T8408] NILFS (loop4): recovery required for readonly filesystem [ 184.751857][ T8408] NILFS (loop4): write access will be enabled during recovery [ 184.779394][ T8408] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 184.785346][ T8408] NILFS (loop4): couldn't remount because the filesystem is in an incomplete recovery state [ 184.937960][ T8414] binder: BINDER_SET_CONTEXT_MGR already set [ 184.939768][ T8414] binder: 8413:8414 ioctl 4018620d 400000000040 returned -16 [ 184.949115][ T8414] binder: 8413:8414 got transaction to invalid handle, 1 [ 184.951107][ T8414] binder: 8414:8413 cannot find target node [ 184.952728][ T8414] binder: 8413:8414 transaction call to 0:0 failed 104/29201/-22, size 0-0 line 3054 [ 185.336603][ T8412] loop0: detected capacity change from 0 to 32768 [ 185.409999][ T8412] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 185.409999][ T8412] [ 185.423137][ T8412] ERROR: (device loop0): remounting filesystem as read-only [ 185.425259][ T8412] jfs_lookup: dtSearch returned -5 [ 185.641345][ T8422] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 185.641345][ T8422] [ 185.654675][ T8417] loop1: detected capacity change from 0 to 32768 [ 185.665901][ T8417] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1278 (8417) [ 185.666684][ T8426] loop2: detected capacity change from 0 to 2048 [ 185.675962][ T8417] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.681108][ T8417] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 185.687421][ T8417] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 185.692341][ T8417] BTRFS info (device loop1): use zstd compression, level 3 [ 185.696244][ T8426] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 185.696595][ T8417] BTRFS info (device loop1): using free space tree [ 185.734987][ T8433] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.877713][ T8417] BTRFS info (device loop1): enabling ssd optimizations [ 186.038385][ T4295] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 186.763746][ T8457] loop0: detected capacity change from 0 to 32768 [ 186.798290][ T8410] loop3: detected capacity change from 0 to 131072 [ 186.816427][ T8410] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 186.818840][ T8410] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 186.824462][ T8457] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.874146][ T8410] F2FS-fs (loop3): invalid crc value [ 186.911413][ T8410] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.957651][ T8410] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 186.963099][ T8410] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 186.977287][ T8468] loop2: detected capacity change from 0 to 1024 [ 186.998867][ T8468] UDF-fs: bad mount option "udf" or missing value [ 187.015378][ T4304] ocfs2: Unmounting device (7,0) on (node local) [ 187.071745][ T5102] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.237603][ T8461] loop1: detected capacity change from 0 to 40427 [ 187.290518][ T8461] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 187.304710][ T8461] F2FS-fs (loop1): invalid crc value [ 187.334729][ T8461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 187.368279][ T8461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 187.390281][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.392203][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.421899][ T8461] F2FS-fs (loop1) : inject kvmalloc in f2fs_kvmalloc of __exchange_data_block+0x2b4/0x22e8 [ 187.436765][ T8461] syz.1.1289: attempt to access beyond end of device [ 187.436765][ T8461] loop1: rw=2049, sector=53248, nr_sectors = 256 limit=40427 [ 187.645917][ T8482] loop0: detected capacity change from 0 to 2048 [ 187.657739][ T8482] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 187.689454][ T8483] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 187.701513][ T8482] overlayfs: missing 'lowerdir' [ 187.919201][ T7186] binder: undelivered TRANSACTION_ERROR: 29201 [ 188.049604][ T8491] FAULT_INJECTION: forcing a failure. [ 188.049604][ T8491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.053311][ T8491] CPU: 0 PID: 8491 Comm: syz.4.1299 Not tainted 6.1.131-syzkaller #0 [ 188.055530][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.058191][ T8491] Call trace: [ 188.059069][ T8491] dump_backtrace+0x1c8/0x1f4 [ 188.060314][ T8491] show_stack+0x2c/0x3c [ 188.061419][ T8491] dump_stack_lvl+0x108/0x170 [ 188.062699][ T8491] dump_stack+0x1c/0x58 [ 188.063813][ T8491] should_fail_ex+0x3c0/0x51c [ 188.065064][ T8491] should_fail+0x14/0x24 [ 188.066244][ T8491] should_fail_usercopy+0x20/0x30 [ 188.067546][ T8491] move_addr_to_kernel+0xa8/0x270 [ 188.068920][ T8491] __sys_connect+0xc8/0x290 [ 188.070156][ T8491] __arm64_sys_connect+0x7c/0x94 [ 188.071486][ T8491] invoke_syscall+0x98/0x2bc [ 188.072740][ T8491] el0_svc_common+0x138/0x258 [ 188.073961][ T8491] do_el0_svc+0x58/0x13c [ 188.075028][ T8491] el0_svc+0x58/0x168 [ 188.076053][ T8491] el0t_64_sync_handler+0x84/0xf0 [ 188.077443][ T8491] el0t_64_sync+0x18c/0x190 [ 188.456013][ T8487] loop0: detected capacity change from 0 to 32768 [ 188.463667][ T8487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1296 (8487) [ 188.526669][ T8507] loop4: detected capacity change from 0 to 2048 [ 188.530113][ T8487] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.534553][ T8487] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 188.537014][ T8487] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.541312][ T8487] BTRFS info (device loop0): use zstd compression, level 3 [ 188.543258][ T8487] BTRFS info (device loop0): using free space tree [ 188.567446][ T8507] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.573826][ T8513] loop2: detected capacity change from 0 to 1024 [ 188.576068][ T8513] UDF-fs: bad mount option "udf" or missing value [ 188.679946][ T8526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.702724][ T8507] overlayfs: missing 'lowerdir' [ 188.803264][ T8487] BTRFS info (device loop0): enabling ssd optimizations [ 189.076478][ T4304] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.132367][ T8538] binder: BINDER_SET_CONTEXT_MGR already set [ 189.134114][ T8538] binder: 8537:8538 ioctl 4018620d 400000000040 returned -16 [ 189.136969][ T8538] binder: 8537:8538 got transaction to invalid handle, 1 [ 189.137869][ T8509] loop1: detected capacity change from 0 to 32768 [ 189.139475][ T8538] binder: 8538:8537 cannot find target node [ 189.142242][ T8538] binder: 8537:8538 transaction call to 0:0 failed 107/29201/-22, size 0-0 line 3054 [ 189.153140][ T8509] XFS: noikeep mount option is deprecated. [ 189.185194][ T8509] XFS (loop1): Mounting V5 Filesystem [ 189.289669][ T8509] XFS (loop1): Ending clean mount [ 189.306777][ T8509] XFS (loop1): Quotacheck needed: Please wait. [ 189.356142][ T8509] XFS (loop1): Quotacheck: Done. [ 189.720733][ T4295] XFS (loop1): Unmounting Filesystem [ 189.852785][ T8557] loop2: detected capacity change from 0 to 1024 [ 189.863555][ T8557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.865438][ T8557] EXT4-fs: Ignoring removed orlov option [ 189.881423][ T8557] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.885862][ T8557] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 190.166447][ T8561] FAULT_INJECTION: forcing a failure. [ 190.166447][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 190.172407][ T8561] CPU: 0 PID: 8561 Comm: syz.1.1313 Not tainted 6.1.131-syzkaller #0 [ 190.174569][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.177401][ T8561] Call trace: [ 190.178280][ T8561] dump_backtrace+0x1c8/0x1f4 [ 190.179538][ T8561] show_stack+0x2c/0x3c [ 190.180702][ T8561] dump_stack_lvl+0x108/0x170 [ 190.181899][ T8561] dump_stack+0x1c/0x58 [ 190.183011][ T8561] should_fail_ex+0x3c0/0x51c [ 190.184346][ T8561] __should_failslab+0xc8/0x128 [ 190.185660][ T8561] should_failslab+0x10/0x28 [ 190.186867][ T8561] __kmem_cache_alloc_node+0x80/0x388 [ 190.188418][ T8561] __kmalloc+0xc4/0x1c4 [ 190.189555][ T8561] tomoyo_realpath_from_path+0xc8/0x4cc [ 190.191066][ T8561] tomoyo_mount_permission+0x2d0/0x8b4 [ 190.192593][ T8561] tomoyo_sb_mount+0x48/0x60 [ 190.193897][ T8561] security_sb_mount+0x94/0xd4 [ 190.195111][ T8561] path_mount+0xb8/0xe5c [ 190.196293][ T8561] __arm64_sys_mount+0x498/0x588 [ 190.197578][ T8561] invoke_syscall+0x98/0x2bc [ 190.198774][ T8561] el0_svc_common+0x138/0x258 [ 190.200075][ T8561] do_el0_svc+0x58/0x13c [ 190.201215][ T8561] el0_svc+0x58/0x168 [ 190.202293][ T8561] el0t_64_sync_handler+0x84/0xf0 [ 190.203682][ T8561] el0t_64_sync+0x18c/0x190 [ 190.216547][ T8561] ERROR: Out of memory at tomoyo_realpath_from_path. [ 190.446792][ T8532] loop3: detected capacity change from 0 to 131072 [ 190.467140][ T8532] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 190.469754][ T8568] hugetlbfs: Bad value for 'nr_inodes' [ 190.472517][ T8532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 190.476353][ T8532] F2FS-fs (loop3): invalid crc value [ 190.482514][ T8571] loop1: detected capacity change from 0 to 2048 [ 190.502532][ T8571] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 190.506945][ T8532] F2FS-fs (loop3): Found nat_bits in checkpoint [ 190.545132][ T8532] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 190.547175][ T8532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 190.567781][ T8576] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.584129][ T8571] overlayfs: missing 'lowerdir' [ 190.868203][ T8586] loop2: detected capacity change from 0 to 64 [ 191.175322][ T8578] loop0: detected capacity change from 0 to 32768 [ 191.190276][ T8578] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1321 (8578) [ 191.209581][ T8578] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.214702][ T8578] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 191.220500][ T8578] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 191.232244][ T8578] BTRFS info (device loop0): use zstd compression, level 3 [ 191.236530][ T8578] BTRFS info (device loop0): using free space tree [ 191.247353][ T8596] loop3: detected capacity change from 0 to 1024 [ 191.255259][ T8596] UDF-fs: bad mount option "udf" or missing value [ 191.356278][ T8578] BTRFS info (device loop0): enabling ssd optimizations [ 191.467557][ T4960] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.652979][ T4304] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 191.982705][ T8626] loop1: detected capacity change from 0 to 64 [ 192.115404][ T4378] binder: undelivered TRANSACTION_ERROR: 29201 [ 192.264466][ T8630] FAULT_INJECTION: forcing a failure. [ 192.264466][ T8630] name failslab, interval 1, probability 0, space 0, times 0 [ 192.268286][ T8630] CPU: 0 PID: 8630 Comm: syz.1.1330 Not tainted 6.1.131-syzkaller #0 [ 192.270454][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.273179][ T8630] Call trace: [ 192.274070][ T8630] dump_backtrace+0x1c8/0x1f4 [ 192.275356][ T8630] show_stack+0x2c/0x3c [ 192.276457][ T8630] dump_stack_lvl+0x108/0x170 [ 192.277684][ T8630] dump_stack+0x1c/0x58 [ 192.278742][ T8630] should_fail_ex+0x3c0/0x51c [ 192.279951][ T8630] __should_failslab+0xc8/0x128 [ 192.281214][ T8630] should_failslab+0x10/0x28 [ 192.282406][ T8630] __kmem_cache_alloc_node+0x80/0x388 [ 192.283834][ T8630] __kmalloc+0xc4/0x1c4 [ 192.284910][ T8630] tomoyo_realpath_from_path+0xc8/0x4cc [ 192.286384][ T8630] tomoyo_path_number_perm+0x1dc/0x688 [ 192.287824][ T8630] tomoyo_path_mknod+0x168/0x1b0 [ 192.289102][ T8630] security_path_mknod+0xf8/0x14c [ 192.290402][ T8630] path_openat+0x964/0x2548 [ 192.291577][ T8630] do_filp_open+0x1bc/0x3cc [ 192.292737][ T8630] do_sys_openat2+0x128/0x3e0 [ 192.294007][ T8630] __arm64_sys_openat+0x1f0/0x240 [ 192.295338][ T8630] invoke_syscall+0x98/0x2bc [ 192.296501][ T8630] el0_svc_common+0x138/0x258 [ 192.297720][ T8630] do_el0_svc+0x58/0x13c [ 192.298830][ T8630] el0_svc+0x58/0x168 [ 192.299876][ T8630] el0t_64_sync_handler+0x84/0xf0 [ 192.301290][ T8630] el0t_64_sync+0x18c/0x190 [ 192.302678][ T8630] ERROR: Out of memory at tomoyo_realpath_from_path. [ 192.978292][ T8632] overlayfs: failed to resolve './file2': -2 [ 193.084105][ T8636] loop1: detected capacity change from 0 to 2048 [ 193.131624][ T8636] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 193.172390][ T8641] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.201306][ T8636] overlayfs: unrecognized mount option "/" or missing value [ 193.370674][ T8647] loop1: detected capacity change from 0 to 256 [ 193.405477][ T8647] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.408395][ T8647] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 193.429757][ T8647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.601316][ T8632] loop4: detected capacity change from 0 to 32768 [ 193.603423][ T8632] XFS: ikeep mount option is deprecated. [ 193.648245][ T8632] XFS (loop4): Mounting V5 Filesystem [ 193.764859][ T8632] XFS (loop4): Ending clean mount [ 193.767749][ T8632] XFS (loop4): Quotacheck needed: Please wait. [ 193.803334][ T8661] binder: BINDER_SET_CONTEXT_MGR already set [ 193.805049][ T8661] binder: 8660:8661 ioctl 4018620d 400000000040 returned -16 [ 193.807611][ T8661] binder: 8660:8661 got transaction to invalid handle, 1 [ 193.810289][ T8661] binder: 8661:8660 cannot find target node [ 193.811768][ T8661] binder: 8660:8661 transaction call to 0:0 failed 110/29201/-22, size 0-0 line 3054 [ 193.830419][ T8632] XFS (loop4): Quotacheck: Done. [ 193.885111][ T8645] loop0: detected capacity change from 0 to 32768 [ 193.909194][ T8645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1337 (8645) [ 193.938063][ T8645] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.945609][ T8645] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 193.947955][ T8645] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.983265][ T8645] BTRFS info (device loop0): use zstd compression, level 3 [ 193.985187][ T8645] BTRFS info (device loop0): using free space tree [ 194.019464][ T4310] XFS (loop4): Unmounting Filesystem [ 194.219193][ T8645] BTRFS info (device loop0): enabling ssd optimizations [ 194.286797][ T8670] loop3: detected capacity change from 0 to 32768 [ 194.300229][ T8670] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 194.302419][ T8670] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 194.345705][ T8670] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 194.353887][ T5051] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 194.355938][ T5051] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 194.401580][ T5051] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 45ms [ 194.404299][ T5051] gfs2: fsid=syz:syz.0: jid=0: Done [ 194.407644][ T8670] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 194.434700][ T4304] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.657833][ T8690] loop4: detected capacity change from 0 to 1024 [ 194.669174][ T8690] UDF-fs: bad mount option "udf" or missing value [ 194.971321][ T8698] FAULT_INJECTION: forcing a failure. [ 194.971321][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 194.974780][ T8698] CPU: 1 PID: 8698 Comm: syz.0.1347 Not tainted 6.1.131-syzkaller #0 [ 194.976856][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.979508][ T8698] Call trace: [ 194.980379][ T8698] dump_backtrace+0x1c8/0x1f4 [ 194.981640][ T8698] show_stack+0x2c/0x3c [ 194.982700][ T8698] dump_stack_lvl+0x108/0x170 [ 194.983980][ T8698] dump_stack+0x1c/0x58 [ 194.985076][ T8698] should_fail_ex+0x3c0/0x51c [ 194.986297][ T8698] __should_failslab+0xc8/0x128 [ 194.987534][ T8698] should_failslab+0x10/0x28 [ 194.988716][ T8698] __kmem_cache_alloc_node+0x80/0x388 [ 194.990088][ T8698] __kmalloc_node+0xcc/0x1d0 [ 194.991280][ T8698] kvmalloc_node+0x84/0x1e4 [ 194.992411][ T8698] bpf_test_run_xdp_live+0x238/0x18a0 [ 194.993779][ T8698] bpf_prog_test_run_xdp+0x670/0xf60 [ 194.995206][ T8698] bpf_prog_test_run+0x2dc/0x364 [ 194.996491][ T8698] __sys_bpf+0x390/0x654 [ 194.997595][ T8698] __arm64_sys_bpf+0x80/0x98 [ 194.998800][ T8698] invoke_syscall+0x98/0x2bc [ 195.000049][ T8698] el0_svc_common+0x138/0x258 [ 195.001292][ T8698] do_el0_svc+0x58/0x13c [ 195.002403][ T8698] el0_svc+0x58/0x168 [ 195.003474][ T8698] el0t_64_sync_handler+0x84/0xf0 [ 195.004897][ T8698] el0t_64_sync+0x18c/0x190 [ 195.006110][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.322041][ T8706] loop3: detected capacity change from 0 to 2048 [ 195.325301][ T8706] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 195.331988][ T8707] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 195.341839][ T8706] overlayfs: unrecognized mount option "/" or missing value [ 195.405719][ T8709] loop0: detected capacity change from 0 to 64 [ 195.885533][ T8714] loop4: detected capacity change from 0 to 40427 [ 195.890185][ T8714] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 195.893377][ T8714] F2FS-fs (loop4): invalid crc value [ 195.897438][ T8714] F2FS-fs (loop4): Found nat_bits in checkpoint [ 195.913221][ T8714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 196.182635][ T8721] FAULT_INJECTION: forcing a failure. [ 196.182635][ T8721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.186130][ T8721] CPU: 1 PID: 8721 Comm: syz.4.1354 Not tainted 6.1.131-syzkaller #0 [ 196.188157][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.191017][ T8721] Call trace: [ 196.191953][ T8721] dump_backtrace+0x1c8/0x1f4 [ 196.193179][ T8721] show_stack+0x2c/0x3c [ 196.194370][ T8721] dump_stack_lvl+0x108/0x170 [ 196.195628][ T8721] dump_stack+0x1c/0x58 [ 196.196775][ T8721] should_fail_ex+0x3c0/0x51c [ 196.198010][ T8721] should_fail_alloc_page+0x74/0xb8 [ 196.199345][ T8721] prepare_alloc_pages+0x1c0/0x508 [ 196.200681][ T8721] __alloc_pages+0x150/0x730 [ 196.201949][ T8721] alloc_pages+0x494/0x760 [ 196.203161][ T8721] folio_alloc+0x28/0x6c [ 196.204390][ T8721] filemap_alloc_folio+0xc4/0x4a4 [ 196.205717][ T8721] __filemap_get_folio+0x704/0xb6c [ 196.207224][ T8721] pagecache_get_page+0x3c/0x16c [ 196.208545][ T8721] grab_cache_page_write_begin+0x58/0x70 [ 196.210090][ T8721] f2fs_grab_cache_page+0x19c/0x4b0 [ 196.211475][ T8721] f2fs_get_read_data_page+0xfc/0x6f8 [ 196.212893][ T8721] f2fs_get_lock_data_page+0x64/0x2ac [ 196.214312][ T8721] __exchange_data_block+0xf08/0x22e8 [ 196.215711][ T8721] f2fs_collapse_range+0x200/0x308 [ 196.217051][ T8721] f2fs_fallocate+0x3c4/0x938 [ 196.218230][ T8721] vfs_fallocate+0x478/0x5b4 [ 196.219457][ T8721] __arm64_sys_fallocate+0xc0/0x110 [ 196.220776][ T8721] invoke_syscall+0x98/0x2bc [ 196.222005][ T8721] el0_svc_common+0x138/0x258 [ 196.223225][ T8721] do_el0_svc+0x58/0x13c [ 196.224347][ T8721] el0_svc+0x58/0x168 [ 196.225401][ T8721] el0t_64_sync_handler+0x84/0xf0 [ 196.226771][ T8721] el0t_64_sync+0x18c/0x190 [ 196.228048][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.694630][ T8719] loop3: detected capacity change from 0 to 32768 [ 196.707366][ T4310] syz-executor: attempt to access beyond end of device [ 196.707366][ T4310] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.708197][ T8719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1355 (8719) [ 196.717856][ T8719] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 196.720796][ T8719] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 196.723183][ T8719] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 196.726044][ T8719] BTRFS info (device loop3): use zstd compression, level 3 [ 196.728127][ T8719] BTRFS info (device loop3): using free space tree [ 196.867516][ T4341] binder: undelivered TRANSACTION_ERROR: 29201 [ 196.941433][ T8739] FAULT_INJECTION: forcing a failure. [ 196.941433][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 196.956026][ T8739] CPU: 1 PID: 8739 Comm: syz.1.1358 Not tainted 6.1.131-syzkaller #0 [ 196.958157][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.960934][ T8739] Call trace: [ 196.961827][ T8739] dump_backtrace+0x1c8/0x1f4 [ 196.963029][ T8739] show_stack+0x2c/0x3c [ 196.964161][ T8739] dump_stack_lvl+0x108/0x170 [ 196.965396][ T8739] dump_stack+0x1c/0x58 [ 196.966506][ T8739] should_fail_ex+0x3c0/0x51c [ 196.967734][ T8739] __should_failslab+0xc8/0x128 [ 196.968990][ T8739] should_failslab+0x10/0x28 [ 196.970170][ T8739] kmem_cache_alloc+0x8c/0x37c [ 196.971406][ T8739] skb_clone+0x19c/0x304 [ 196.972546][ T8739] __netlink_deliver_tap+0x36c/0x6ec [ 196.973908][ T8739] netlink_deliver_tap+0x1ac/0x1b0 [ 196.975295][ T8739] netlink_unicast+0x640/0x898 [ 196.976511][ T8739] netlink_sendmsg+0x844/0xb28 [ 196.977734][ T8739] ____sys_sendmsg+0x55c/0x8c4 [ 196.978937][ T8739] __sys_sendmsg+0x26c/0x33c [ 196.980102][ T8739] __arm64_sys_sendmsg+0x80/0x94 [ 196.981438][ T8739] invoke_syscall+0x98/0x2bc [ 196.982609][ T8739] el0_svc_common+0x138/0x258 [ 196.983764][ T8739] do_el0_svc+0x58/0x13c [ 196.984907][ T8739] el0_svc+0x58/0x168 [ 196.985910][ T8739] el0t_64_sync_handler+0x84/0xf0 [ 196.987218][ T8739] el0t_64_sync+0x18c/0x190 [ 197.013055][ T8742] ipt_REJECT: ECHOREPLY no longer supported. [ 197.031843][ T8719] BTRFS info (device loop3): enabling ssd optimizations [ 197.244826][ T4301] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.391248][ T8757] loop0: detected capacity change from 0 to 2048 [ 197.426226][ T8757] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 197.427408][ T8759] loop1: detected capacity change from 0 to 1024 [ 197.447582][ T8759] UDF-fs: bad mount option "udf" or missing value [ 197.481485][ T8761] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.496910][ T8757] overlayfs: unrecognized mount option "/" or missing value [ 198.898923][ T28] INFO: task udevd:4287 blocked for more than 143 seconds. [ 198.900885][ T28] Not tainted 6.1.131-syzkaller #0 [ 198.902382][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 198.904684][ T28] task:udevd state:D stack:0 pid:4287 ppid:3913 flags:0x00000004 [ 198.911241][ T28] Call trace: [ 198.912189][ T28] __switch_to+0x308/0x598 [ 198.913410][ T28] __schedule+0xef4/0x1d44 [ 198.914658][ T28] schedule+0xc4/0x170 [ 198.915717][ T28] schedule_preempt_disabled+0x18/0x2c [ 198.917124][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 198.918513][ T28] mutex_lock_nested+0x38/0x44 [ 198.966095][ T28] uevent_show+0x178/0x338 [ 198.968268][ T8778] binder: BINDER_SET_CONTEXT_MGR already set [ 198.973607][ T28] dev_attr_show+0x60/0xcc [ 198.976048][ T28] sysfs_kf_seq_show+0x2d0/0x43c [ 198.979710][ T28] kernfs_seq_show+0x150/0x1fc [ 198.980894][ T8778] binder: 8775:8778 ioctl 4018620d 400000000040 returned -16 [ 198.984802][ T28] seq_read_iter+0x3e0/0xc44 [ 198.988361][ T28] kernfs_fop_read_iter+0x144/0x5c8 [ 198.992155][ T28] vfs_read+0x5bc/0x8b4 [ 198.993240][ T8778] binder: 8775:8778 got transaction to invalid handle, 1 [ 198.994715][ T28] ksys_read+0x15c/0x26c [ 198.995354][ T8778] binder: 8778:8775 cannot find target node [ 198.998633][ T28] __arm64_sys_read+0x7c/0x90 [ 199.001271][ T28] invoke_syscall+0x98/0x2bc [ 199.005495][ T8778] binder: 8775:8778 transaction call to 0:0 failed 113/29201/-22, size 0-0 line 3054 [ 199.009997][ T28] el0_svc_common+0x138/0x258 [ 199.013362][ T28] do_el0_svc+0x58/0x13c [ 199.016013][ T28] el0_svc+0x58/0x168 [ 199.018304][ T28] el0t_64_sync_handler+0x84/0xf0 [ 199.025490][ T28] el0t_64_sync+0x18c/0x190 [ 199.032520][ T28] [ 199.032520][ T28] Showing all locks held in the system: [ 199.042736][ T28] 1 lock held by rcu_tasks_kthre/12: [ 199.047595][ T28] #0: ffff800015cd79b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 199.058962][ T28] 1 lock held by rcu_tasks_trace/13: [ 199.063887][ T28] #0: ffff800015cd81b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 199.071457][ T28] 1 lock held by khungtaskd/28: [ 199.075276][ T28] #0: ffff800015cd77e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 199.080279][ T28] 3 locks held by kworker/u4:4/181: [ 199.084265][ T28] 2 locks held by getty/4051: [ 199.087067][ T28] #0: ffff0000d6599098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 199.093257][ T28] #1: ffff80001d9002f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 199.098486][ T28] 4 locks held by udevd/4287: [ 199.102215][ T28] #0: ffff0000f2f448b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xac/0xc44 [ 199.106969][ T28] #1: ffff0000f3137c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x58/0x384 [ 199.113292][ T28] #2: ffff0000f292ce88 (kn->active#4){.+.+}-{0:0}, at: kernfs_seq_start+0x74/0x384 [ 199.118199][ T28] #3: ffff0000cd0e4190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x178/0x338 [ 199.124197][ T28] 6 locks held by kworker/1:9/4352: [ 199.126878][ T28] #0: ffff0000c46a9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x6bc/0x1484 [ 199.133303][ T28] #1: ffff800021587c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x1484 [ 199.139810][ T28] #2: ffff0000d19b0190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b0/0x42e4 [ 199.144644][ T28] #3: ffff0000cd0e4190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x90/0x480 [ 199.150687][ T28] #4: ffff0000f2fa2118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x90/0x480 [ 199.157107][ T28] #5: ffff800015b86530 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0x12c/0x2d0 [ 199.162322][ T28] 1 lock held by syz.2.1325/8586: [ 199.166003][ T28] #0: ffff0000d19b0190 (&dev->mutex){....}-{3:3}, at: usbdev_open+0x13c/0x6c0 [ 199.170857][ T28] 1 lock held by syz.4.1360/8749: [ 199.173384][ T28] 2 locks held by syz.4.1360/8755: [ 199.177053][ T28] 2 locks held by syz.1.1370/8781: [ 199.179673][ T28] [ 199.180327][ T28] ============================================= [ 199.180327][ T28] [ 199.186010][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 199.187803][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.131-syzkaller #0 [ 199.189986][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.192832][ T28] Call trace: [ 199.193743][ T28] dump_backtrace+0x1c8/0x1f4 [ 199.194997][ T28] show_stack+0x2c/0x3c [ 199.196124][ T28] dump_stack_lvl+0x108/0x170 [ 199.197360][ T28] dump_stack+0x1c/0x58 [ 199.198584][ T28] panic+0x300/0x804 [ 199.199669][ T28] hung_task_panic+0x0/0x2c [ 199.200866][ T28] kthread+0x250/0x2d8 [ 199.201989][ T28] ret_from_fork+0x10/0x20 [ 199.203233][ T28] SMP: stopping secondary CPUs [ 199.204495][ T28] Kernel Offset: disabled [ 199.205601][ T28] CPU features: 0x080000,02070084,26017203 [ 199.207141][ T28] Memory Limit: none [ 199.539363][ T28] Rebooting in 86400 seconds..