last executing test programs: 58.444260718s ago: executing program 1 (id=277): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 57.221833101s ago: executing program 1 (id=280): syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002c5ba398e351c52b2963a010203010902120001024080000904e80900775e3812"], 0x0) 53.652653127s ago: executing program 1 (id=289): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x2, 0x0) syz_open_procfs(r1, &(0x7f00000005c0)='attr/prev\x00') (fail_nth: 2) 52.586562515s ago: executing program 1 (id=292): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x7) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 51.533404241s ago: executing program 1 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) r2 = io_uring_setup(0x160c, &(0x7f0000000140)={0x0, 0xca00, 0x10000, 0x3, 0x377}) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @reserved}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = fcntl$getown(r2, 0x9) fcntl$setown(r1, 0x8, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4048010) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0xe3, 0x8}, {0x6, 0xfffe, 0x49c, 0x8}}}}, 0x15) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r3, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r7, 0xfffffffffffffffd, 0x58) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@namecase}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@dmask={'dmask', 0x3d, 0x1ff}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x401}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") 13.193407432s ago: executing program 0 (id=382): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x4, 0x22000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x8, 0x9, 0x20}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 8.587720946s ago: executing program 2 (id=391): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fff8000}]}) r1 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0xb5fefb878ea45bf9}, 0xc) flock(0xffffffffffffffff, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x400) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f00000002c0)={0x8000000000000001, 0x4, 0x1}) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file1\x00', 0xcc0, &(0x7f0000000600)=ANY=[], 0x1, 0x444e, &(0x7f000000cd40)="$eJzs3c9vFNcdAPA3YxdsCtT8OFCpUlcqUqu2smxObY1aMAZjg0tFC6p6Wdb2Am7WXmSvoxyQ4tyQcoqSA8oBJVJuPiEfciV/Qi45kksuSMkhl0iRUBzt7qzZGe/KS+TBwfp8JDyeN+/Hd/3defvmsLy47kAc1+4urBQWVgqlpUJ17vbKmcKb1crqYjnEr8hej09v8siT3O+daxcu/fvmmRA+m//i2ebm5mao6w8djbb9/t239+fajy1xpk2938697Zb/hRBObourri+E8N9PQ4hCCOeTsvHkOBhCOJrEe/P+u7cKuxTN46fls8XnMw82xk5Prz/a6P7aoxA+rPz6z3cWv/5d39iXf9yl4QEAAAAAAAAAAAAAAAAAeM1NXr92418jo+FJFPrXo+3f151Mjt2+H7u5a36b/4sFAAAAAAAAAAAAAAAAAACAn6kX3/8vRMc7fP9/Ijme69J+8x/5x0h+pv55beLiyGiy/3u07fpfkqJvzveFYx32fc/u/34+077z/u/bx/mpWvG1xh0KUTycOo/j4eEQPk42fj8VHYor1ZXan25XV5fmdy2M11Y6/83d+1PZSTb07zX/45n+89///8S2d1P9/NbuvcX2tXT++7rW++SdqKf8X0g3e5hT2G1O5D/EPpbOf3+jbLC9wsHmoZ7/9/p3zv9Epv+87v+jIYRCVI+1kJoB6muYenm39Qpp6fz/olGWmjqTP2S3+//7TP4vZvrvlP+3d/UVdJ7/17IfRHSUzv+BRtlAqkZzAdDIf7zz/X8p0/9efP7X41/z+d+TdP6Tyb4/VaXxl+x1/p/M9J9X/m/ESZxHo9Q7YD1qlnf7/+pIS+d/YNv1F89/cU/rv8uZ9q/q+a81buv5rzX9/yFqPv/RWTr/g13r9Xr/T2Xa5T3/n2us/7ro/jhDIp3/Q42y9Np5qPGz1/xPZ/rPK/+NVclAK/8v5pMfDjbLP7L+60k6/79sFsbtNdYaPxvrv2jn9f+VTP97sf6rx78W5zvqfpHO/+Gu9er5/7yHz/+rmXb55z+Ekfob4O/v5z3MvpTO/5Gu9Rr3/8DO+Z/JtMs7/79/uepf5RUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF4ZT45DIYqHU+dxPDwcwoXk/FQ4FM2W5ouzlercGyshTCTlhXA8ulOpzpYqxYWl6ny5WKpUqnMhXEyunwwD0UqlWisulu5d2uprMLpbLi3XZsulWghhMin/TTjS6mt2obZYuhdCuBwOJtd+FVeX790tLRXnF5b/NjIyMhKmtmI4FpXfqpWXas3Rm1dDmN7qdyhqC65x+cpWLIej/1dXl5dKlUb51bY2lepcqdLWZia59kE4FtWWV5fmSrVysVK90xpvL51LjhNT1/9z/erotuu3ouZx/NWGBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBLejL214chhP7mWRxCKETJL1HyL+Xx0/LZ4vOZBxtjp6fXH20861QHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgR3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS/coGQNBGIBnV0FLj2EVks42oogWRgRPoMfwMHqUXMI7WFjYCv5ATOAjPxACX/c8zcC+zM7CDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrXd03D3dlFZHi+Ocovn+f3t5385u+vpzP9x9smHm4oYf9uL5tLi7LKtru39MkP+uPPurcpV+fz48xUwevoz1pR/v0bzpnbGnflt43zD2JlIuIqPv8NOVcFOvuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF8BAAD//wLSIE0=") socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0xff) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x68, 0x0) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/142, 0x8e}, {0x0}], 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = getpid() prlimit64(r9, 0x9, &(0x7f00000000c0)={0xc1, 0xa}, &(0x7f0000000100)) 7.661499665s ago: executing program 4 (id=392): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcmda12\x00', [0x2f00, 0x5, 0xd09a, 0xfff7ffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x110, 0x1001, 0x9, 0x4, 0xffff, 0x6, 0x5, 0x40000109, 0x830, 0x30000, 0x10003, 0x2, 0x800, 0xe2db, 0x2, 0xd, 0x7, 0x3, 0xc, 0x5, 0x70f]}) 6.314593625s ago: executing program 4 (id=393): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000700)={0x0, "307a54ea30397cb1d26ff917c28072bbbf90e8672c72d81a75c845d814d08cdc079369a86d7cbc0746600ee828ef2b7fd2dd81c62af2ad060713294724fba3fb6ae5dc609a9d9f6365df8084f6ac82a1758dff800d324d008c1dddfe8991b8bf11939cdd165ef074a2012033748314a0a827763b9e5793aa2e525c34751b3071de4e49f4493b1130563a0b5ce7a71753941d0f5cd1c1d2d24845f88277e8e89c42e8941b9313996b6d14474136bcb99ca6c5055f599914445c3748bfa31d3980ed7f6cf799f7f5a63204c7c77b2a9c7f28f989a7c5e279fe76ade05afec7b99f541135d7aeae80b69aaa453f7aed9c2601adb4ef6d3642bbe2bd14642b539e5cc78aab68e6e341bd70cd09d15f1faeaa5b0c09ee3df4cbd58d2720589d843f06486416b66027311101a8fc654582267e8442f937821698477e94d064e0d3d1612bc233105609536b99ccc49691bfb11b7e4845c3a5d8fa3815add3480b60387ce7313bb23498b03f09d9eeacc483169d1e3cff4aa371b715adfdd9abed6b746011bfca1c67f7a64adc3fb601d659ec78fd98af75ea80071fc06a4098d360aca4cc1460d346f307ae56364a37637f7a6b2bc71c254dc824ca45df6040bb6e53e01dec5c94eb514ec5d406a673926d4895384875e6ab109b32071cb3c01574ae803f85fe582f28ec4ba6df671fe841381f243c8a3e30cd5c7faa102a27ce0e8dea"}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="740000000208020300000000000000000500000009"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.01905588s ago: executing program 2 (id=394): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="740000000208020300000000000000000500000009"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.562735488s ago: executing program 5 (id=395): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000, 0x4000000, 0x0, 0x18}, 0x50) 4.900235491s ago: executing program 5 (id=396): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x3, 0x3}, 0xe) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x6de5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) 4.883219158s ago: executing program 4 (id=397): socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x20334e, 0x10, 0x6, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r12, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES16=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r9, 0x7277, 0x0, 0x28, 0x0, 0x0) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r1, @ANYBLOB="288da2cf", @ANYRES32, @ANYBLOB="00070000000003000001010104000000000073940726a9937785ca38a04db04441e9ac04c474a0d30fdd9cd30ded3eb0b9b01e0000000000000000"], 0x38}}, 0x0) fsopen(&(0x7f0000000200)='pipefs\x00', 0x1) (async) r13 = fsopen(&(0x7f0000000200)='pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000600)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\x93\x96mi\x0e\xf8s\x9e\x9f\ar\x06Ci0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e20, @empty}], 0x20) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000000)="fd", 0xfffffffffffffffd}], 0x1, 0x0, 0x0, 0x804c044}, 0x40081) setsockopt(r1, 0x8001, 0x4d, &(0x7f0000000c00)="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", 0x1000) r6 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x5}}, 0x20) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f00000002c0)={{}, {0x6}, 0x1, 0x0, 0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000280)='./file2\x00', &(0x7f0000000440)="025e722bd1521c47b0ac6a35867ca150c9ac2d1fbf595b1ca69fc135ab0c7f32e8192108a7074f3e37d78f36b3885fe0346bd09c655818030de96c3d9ec84464c8ccf13bb2c3cd455c491605ba06bceac2e5a53d1fbcbfe334852c809441a1568b12eabb368b50c11f91489750d2e330a3b974f2974b85333a58f8b2505665715f7e04e14e66c9fcb7fa514e1e2d26ed2be929dda005bdaafe66dd8059f766717fed0ecd7a78af0b33793dc18c123f1ada", 0xb1, 0x0, &(0x7f0000000740)={0x2, 0x1bc, {0x0, 0xc, 0xc7, "82b011c3af3057f20a35591bafae4ce8eae160c59012464dd5128259ebaea839a01c69bd611203f0609b76dc0d1924b55969eff17be2b4905111437349379277c98d869178440c15093dca2d381d7fa3832301f37195d9fb878d0654a1acf35fa7c4f906c5b22e5a59295bb9b1d0b01c3abb76825905dacb126a2e802197046bfb2cb6bd43f4a96baa3f6064cc39b3c6abcc8254e5142eb0c8d8e2f4ad3f8fa7d05de1ec1cc4f1d87b7fc1da706bfefc3b0449468f9a26ab035a462138030408d5e666f6d55711", 0xe8, "8d9600abb34c12addab38cf4504d6136f4f31231fce6dea1d89c2ffa66e092e35b78d1beedafab91a11c5ff31eccef08743af96b8b1e4dd524a284517a0566162bc0362cf5db054d83583b282f9fb656c2d8711e0e6f9ca940ae43337b14dec872e6521b41842750206889f366d6e18ef935a0194f8ee288d7aef4dcabef4562642ba3271fdb6f8555253572483463ae501bef86d6d843bd41d30a50fbf7292f51873b17433f885bf62a3e40aea37d4ccf6c5de6de4965385754112fe8ba22b1e92e0a10503f431585cd7b0bc418c03d204c5f3b2e2dbd52b414b70221c4300f3a04b446ca874054"}, 0x93, "6769be14ba85a99e8133cc88a49cfc39f5530fcc0fc52463ee2888413ce0651c197f353846e4b829fc59c4b759fc1a17515439b5152d282fa5d6fe414227b7de5636b751a2778898978e7ed0e430be22b1a094755701f32f7084bc4c3dde1ebcf35634aba91f8a1e5781b228165e4535a9928da0ff355ba327d8e80b2797fa8ecc705a693fc8f1508657d8ec838e2ea1c2805a"}, 0x25b}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x2582, 0x0) ioctl$TCSETS(r7, 0x5402, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb) write$binfmt_aout(r7, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f00000000c0)={0x7, 'syzkaller1\x00', {0x1}, 0x52}) ioctl$TCSETS(r7, 0x40045431, 0x0) shutdown(r2, 0x1) 3.066394467s ago: executing program 0 (id=405): syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x10, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8, 0x8dff}, {}, {}, {0x8, 0x88be, 0xb00}}}}}}}, 0x0) 2.276849923s ago: executing program 0 (id=406): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000000016609023b000101004000090400001202060000052406"], 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400ed0013259ba81400000000000007000000b56278f412e1092fb100000000000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c00028008001c0005000000"], 0x34}}, 0x4) r1 = mq_open(&(0x7f0000000040)='\\(\x00', 0x2, 0x21, &(0x7f0000000080)={0xfffffffffffffffd, 0x8, 0x47af, 0xfffffffffffffffa}) r2 = syz_usb_connect(0x0, 0x4bc, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000845dcf0886124620b705010203010902aa04010003f00109047a0008ff04010009050102100000ff0909050a"], 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000003, 0x800}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000004000000"], 0x8) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$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") add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {}, {@umask={'umask', 0x3d, 0x7f}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$nfs(&(0x7f0000000140)='\xa6\xb8\xae*/\xe4\xdb\x0e\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x03\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98\xea*Z\x91\x98\x9c', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000200)={0x14, &(0x7f00000002c0)={0x40, 0x2, 0x6c, {0x6c, 0x22, "68d1ddde507fd4449d2028f7a663bc6cbdab3e9afa55779522dba99c7fbbaaab64f49c2e64324bb55e9b0a58de9580fed0f01101abfa280d60823da62b285c4d4bdd782456dae5f7eb4b4d369359cc4d320e89684111e6baa8d588b9f845847ab5682ff775279f151a14"}}, &(0x7f0000000380)={0x0, 0x3, 0xd1, @string={0xd1, 0x3, "8220928fe6d994ca0c3f540b216a667430936e4969efc3e186ee047d55d98b1f4f8f881a3665ed5dfbcf1f201b9de25b95950c797921cbb88635871e859c2b1c18624de42d382e88f6279e6f5f53b2a19b4e752ebaa9bb4c995823f1656637502791accc377e311e8b0bf26a222d2dbdc3adc6360b988c26b40b6d786595d2b70e53a93169ee0e73a25d8f31ad7149f2cc59407c67e811d1dafb8c93559c987c1bcded4e1e75df516d4d120189050fb9dfb220dbf1a091c06d6c4af01c862e14ba2e6465175f66efa46e7440feb0ff"}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x20, 0xd, 0x2d, "96609486372e933c791d657de072e5863a95223c75501fd991369223a5039d407ab03161f4465220fcb9b1a9a8"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000680)={0x20, 0x81, 0x3, "9c03c2"}, &(0x7f00000006c0)={0x20, 0x82, 0x2, "2a8c"}, &(0x7f0000000700)={0x20, 0x83, 0x2, "ea02"}, &(0x7f0000000740)={0x20, 0x84, 0x3, "4740d3"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "d957d8"}}) sendto$inet6(r6, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x70, 0x9}, 0x8) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000280)={0x4, 0xfffffffc, 0x400008, 0x3, 0x100, 0x0}) mq_timedreceive(r1, &(0x7f00000000c0)=""/33, 0x21, 0x2, &(0x7f0000000140)={r3, r4+10000000}) 2.126133237s ago: executing program 2 (id=407): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000700)={0x0, "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"}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="740000000208020300000000000000000500000009"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.092275262s ago: executing program 3 (id=408): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0x0, 0x14}}, &(0x7f0000000100)='GPL\x00'}, 0x94) 2.092020804s ago: executing program 4 (id=409): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="740000000208020300000000000000000500000009"], 0x74}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.539788581s ago: executing program 3 (id=410): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0xee01, 0x0) setresgid(r2, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000380)="9a", 0x1}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c}}], 0x20, 0x4005}}], 0x1, 0x4000050) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf25040000000900010073797a31000000001400020076657468305f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) r8 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r8, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) ioctl$IOMMU_IOAS_COPY$syz(r8, 0x3b83, &(0x7f0000000000)={0x28, 0x10000, 0x0, 0x0, 0x3bf91, 0x9, 0x2, 0x1ff8a1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r9, 0x6, 0x1, &(0x7f0000000380)={0x682, 0x9, 0xc000, 0x4, 0x5, 0xa0, 0x400}, 0xc) 1.390642497s ago: executing program 5 (id=411): syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b29ab", 0x0, 0x11, 0x0, @private1, @empty, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x32}]}], "fb36eeca6fad50b340972a584d16ca55"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000007000079502800000000001e500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 905.288158ms ago: executing program 2 (id=412): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_follow}]}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x2b9, 0x0, r0}) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0}) 754.00661ms ago: executing program 5 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d3000fc000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 646.055186ms ago: executing program 4 (id=414): socket$netlink(0x10, 0x3, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000440)={0xfffc, [0x1040, 0xfffffffe], 0x2}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280074000000069078ac1414bbac1414aa00004e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) 86.894944ms ago: executing program 5 (id=415): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$eJzs3c9vI2cZAOB3nDhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP2zNXJCpxgiN/AOeeuHNBcOOyHJD4EYE2SByMZjzOerN2Ntps7BA/jzSa+ebz+n2/tWa+zJt4JoCxdT0i7kfEVER8GBHz+f4kX+K9zpK+7uHhvbWjw3trSbTbH/wjyfrTfdHzb1LX8vcsRcQPvhPx4+TJuM39g63VWq26m7cXW/Wdxeb+wa3N+upGdaO6XamsLK8svXP77cpzG+tr9al868sPfn//Gz9N05rL9/SO41kknSH32x8RxeM4qcmI+N55gl0iE/l4pkadCM+kEBEvR8Tr2fE/HxPZpwkAXGXt9ny053vbAMBVV8hqYEmhnNcC5qJQKJc7NbxXYrZQazRbN+829rbXO7WyhSgW7m7Wqkt5rXAhiknaXs62H7UrnfZ0t307Il6KiJ9Pz2Tt8lqjtj7KH3wAYIxdOzH//3u6M/8DAFdcadQJAABDZ/4HgPFj/geA8WP+B4Dx05n/Z0adBgAwRKde/7sfEABcSer/ADBWvv/+++nSPsrvf73+0f7eVuOjW+vV5la5vrdWXmvs7pQ3Go2N7J499ae9X63R2Fl+K/Y+XvjmTrO12Nw/uFNv7G237mT39b5TLWav6nurbABgSF567bM/JemM/O5MtkTPsxyKI80MuGiFUScAjMzEqBMARsZf98D4Osc1vvIAXBF9HtH7mFK/Lwi12+32xaUEXLAbX1D/h3HVU//3V8AwZtT/YXyp/8P4areTsz7zP876QgDgclPjBwb8/v/lfP2b/JcDP1o/+YpPLzIrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuNy6z/8t588Cn4tCoVyOeCEiFqKY3N2sVZci4sWI+ON0cTptL484ZwDgvAp/TfLnf92Yf3Pusa5Xrx1vTkXET375wS8+Xm21dv8QMZX8c7q7v/Vpvr8y/OwBgNOl1/rdeTpb91zIPzy8t9ZdhpnT374dEaVO/KPDqTg6jj8Zk9m6FMWImP1Xkrc7kp7axXnc/yQiPt9v/EnMZTWQzpNPT8ZPY78w1PiFx+IXsr7OOv2/+NxzyAXGzWfp+ee9fsdfIa5n6/7Hfyk7Q51ffv5L32rtKDsHPorfPf9NDDj/XT9rjLd+993O1syTfZ9EfHEyohv7qOf8042fDIj/5hnj//lLr74+qK/9q4gb0T9+b6zFVn1nsbl/cGuzvrpR3ahuVyoryytL79x+u7KY1agXB88Gf3/35ouD+tLxzw6IX3rK+L96xvH/+r8f/vArp8T/+hv94hfilVPip3Pi184Yf3X2t6VBfWn89QHjf9rnf/OM8R/85eCJx4YDAKPT3D/YWq3Vqrv/7xtzxc6ALks+Ni5iI/2EL0EafTe+NaxYU9G/62dvdA6BE13t9jPFGnTGeB5VN+AyOD7oI+I/o04GAAAAAAAAAAAAAADoaxjfWBr1GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6/hcAAP//leLMXA==") r0 = socket$alg(0x26, 0x5, 0x0) pread64(r0, 0x0, 0x0, 0x7df) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r2 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x64480000, 0x0, 0x0, 0x7, 0xa19, 0x0, 0x0, 0x1}}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000001c"], 0x24}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x401, 0x6, 0x80007b, 0x1, 0x6, 0x7, 0x1000, 0xf63, 0xfffffffc}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f767469300000dc45ce160000080007"], 0xf4}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000d40)=0x2, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, 0x0, 0x0, 0x4) bind$netlink(r4, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54fd2) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000001e80)={{0x0, 0x7f, 0x5, 0xfffffffffffffbde, 0x8, 0x6, 0x80, 0x3, 0x9, 0xcc, 0x3, 0x100000000, 0x0, 0x7fff, 0x1}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000000540)={{r8, 0x4000000000004, 0x5, 0x2, 0x8, 0xd, 0x8, 0x5, 0x55b8, 0x1, 0x3, 0x5, 0xe, 0x6, 0x6}}) 0s ago: executing program 3 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) syz_mount_image$jfs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x3210842, &(0x7f00000015c0)={[{@discard_size={'discard', 0x3d, 0x1}}, {@grpquota}, {@quota}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@grpquota}, {@nointegrity}, {@noquota}, {@nointegrity}, {@grpquota}]}, 0x21, 0x6306, &(0x7f0000006580)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jzE53vXYS76wzn4/kzP72mfE+k+/Ozq5nZp8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKHP/jxuSIirvwq3XEi4nPRj+hFrFT1WkSsrJ2oL/NCbDfH8xExXIqolt/+59mI1yPi4+MR9x/cWa/uPr/Pfnz/z//4w0+O/ejvfxqe+e9fbvXfmDbf7du//c9f7z76+gIAAEAXlWVZFulj/smIGKTP9gDA0y/v/8sk369euHpzwfqjVqvV6iNY15WT3a0XEbFZX6Z6z+BwPAAcMZvxSdtdoEXy77RBRBxruxPAQiva7gCH4v6DO+tFyreo7w/WdtrzuSBj+W8Wu9d3TJvO0jzHZF7Pr63ox3NT+rMypz4skpx/r5n/lZ32UZrvsPN/worBlIZp+Y92Ln3qnJx/v5l/wxHLf6qt6E3Mv6ty/oMD5d+XPwAAAAAALLD89/8TLR//XXr8VdmXvY7/rs2pDwAAAAAAAADwpB10/L9BY/y/Xcb/AwAAgIVVfVav/O74w/umfRdbdf/lIuKZxvxAx6SLZVbb7gcAAAAAAAAAAAAAdMlg5xzey0XEMCKeWV0ty7L6qWvWB/W4yx91XV9/6LK2X+QBAGDHx8cb1/IXEcsRcTl9199wdXW1LJdXVsvVcmUpv58dLS2XK7XPtXla3bc02scb4sGorH7Zcm25ulmfl2e1N39f9Vijsr+Pjs1Hi4EDQETs7I3uT9sj/c/+6mgqy2ej5Tc5HBF7bP8cUbZ/9qPt5ykAAABw+MqyLIv0dd4n0zH/XtudAgDmIu//m8cF1Gq1Wq1WP311XTnZ3XoREZv1Zar3DIbjB4AjZjM+absLtEj+nTaIiBfa7gSw0Iq2O8ChuP/gznqR8i3q+4M0vns+F2Qs/81ie7m8/KTpLM1zTOb1/NqKfjw3pT/Pz6kPiyTn32vmf2WnfZTme/z8y7E/E7Z1jtG0/Kv1PNFCf9qW8+8382847O1/XraiNzH/rsr5Dw6Uf1/+AAAAAACwwPLf/08s1PHf0aOuzkx7Hf9dm7jE4fUFAAAAAAAAAJ6U+w/urOfrXvPx/y9MmM/1n0+nnH8h/07K+fca+X+1MV+/diLMvbcf5v/vB3fW/3jrX5/P0/3mv5RvFOmZVaRnRNFP00GaPuYKNmwN+6PqkYZFrz9I5/yUw3fjWlyPjTg7Nm8v/X88bD831l71dLjdXvZ32s+PtQ922/PyF8bah+nsonIlt5+O9fh5XI93tturtqUZ6788o72c0Z7z79v+OynnP6j9VPmvpvaiMa3c+6j3me2+Pp30OG9d++Jvzh7+6sy0Ff3ddaur1u+lFvqz/X9ybBS/vLlx4/Ttq7du3TgXaTJ27/lIkycs5z9MP7uv/y/vtKdX47Ht9d5HowPnvyi2YjA1/5drt6v1fWXOfWtDzn+UfnL+76T2ydv/Uc5/+vb/agv9AQAAAAAAAAAAAAAAgL2UZbl9iehbEXExXf/T1rWZAMD8DGv7/zLJbfOq+3N+PLX60OqimMfjFQuzvi3Un5ZzfvzB+B1tr79a/STqunKyN+tFRPytvkz1nuHXk34ZALDIPo2If7bdCVoj/w7L3/dXTU+13Rlgrm5+8OFPr16/vnHjZts9AQAAAAAAAAAeVR7/c602/vOpsizvNuYbG//17Vh73PE/8+U0DwcYnTJQdf/g67SXrd6o36sNN/5iTBv/e7h7a6/xvwczHm84o300o31pRvvyjPaJF3rU5PxfrI13fioiTjaGX+/C+K/NMe+7IOf/Uu35XOX/lcZ89fzL3x/l/Htj+Z+59f4vztz84MPXrr1/9b2N9zZ+duHcubMXLl68dOnSmXevXd84u/Nviz0+XDn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X0m1/Lsl5/+1VMu/W3L+r6Za/t2S8/96quXfLTn/11It/27J+Z9Otfy7Jed/JtX7zH/lsPvFfOT88xEu23+35PzzmQ3y75ac//lUy79bcv4XUi3/bsn5v55q+XdLzv8bqZZ/t+T8L6Za/t2S8/9mquXfLTn/S6mWf7fk/L+Vavl3S87/26mWf7fk/N9Itfy7Jef/nVTLv1ty/t9Ntfy7Jef/vVTLv1ty/m+mWv7d8vD7/91www038o22X5kAAAAAAAAAAAAAgKZ5nE7c9joCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu7sYuc76fuBn9s1rBxIDIX8nfwMbxyQh2WTXduIX2hQTXhveSiAU+oLtetdmwW947RJoJJsGSiSMiirahkptAaE2NxW+4IJWgHKBWiFVgvaC3iAqVC4iFFBAqkQryFZzzvM8OzM7L7ve8XrmnM9Hsn/eM2fmPHPmOWf2t+vvHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3fq6+U/Vsiyr/8n/2pplL6j/e/PU1nzZq6/1CAEAAID1+lX+93M3pAUHV3GnhnX+5eXf+erS0tJS9t7RPx//3NJSumEqy8Y3ZVl+W3T5h++rNa4TPJ5N1kYavh7psfnRHreP9bh9vMftEz1u39Tj9sket6/YAStsLn4ekz/YzvyfW4tdmt2Yjee37Wxzr8drm0ZG4s9ycrX8Pkvjx7KF7EQ2n802rV+sW8vX//qt9W29OYvbGmnY1vb6DPnZY0fjGGphH+9s2tbyY0Y/eW029fOfPXb07849e3O72nM3ND1eMc47d9TH+YmwpBhrLduU9kkc50jDOLe3eU1Gm8ZZy+9X/3frOJ9b5ThHl4e5oVpf88lsJP/3d/P9NNb4Y720n7aHZb+4Lcuyi8vDbl1nxbaykWxL05KR5ddnspiR9ceoT6UXZ2Nrmqe3rmKe1uvczuZ52npMxNf/1nC/sQ5jaHyZfvLxiYbX/ZdLVzJPo/qz7nSstM7Bfh8rgzIH47z4bv6kn2g7B3eG5//Y7Z3nYNu502YOpufdMAd39JqDIxOj+ZjTi1DL77M8B3c1rT+ab6mW12du7z4HZ86dPDOz+NGP3bNw8sjx+ePzp/bs2jW7Z+/e/fv3zxxbODE/W/x9hXt78G3JRtIxsCPsu3gM3NGybuNUXfrixIrz75Ueh5NdjsOtLev2+zgca31ytY05IFfO6eLYeHd9p09eGsk6HGP563PX+o/D9LwbjsOxhuOw7XtKm+NwbBXHYX2dM3et7nuWsYY/7cbQ+b1gfXNwa8McbP1+pHUO9vv7kUGZg5NhXnz/rs7vBdvDeJ+YXuv3I6PZlqY31ZHlpxvOPfUl6fv9yf15aTcvb6nfcN1Edn5x/uy9jx45d+7sriyUDfGShrnSOl+3NDynbMV8HVnzfD248PInbmmzfGvYV5P31P+a7Pha1de5797ur1X+7tZ+fzYt3Z2F0mcbvT/bvZvX9+dEln3+Wx9/+BuPff51Hfdnvd/8xMz6vxdPfWnD+Xe8w/k39v3PF9tLD/X46PhYcfyOpr0z3nQ+bn6pxvJzVy3f9nMzqzsfj4c/G30+vrHL+Xhby7r9Ph+Ptz65eD6u9fppx/q0vp6TYZ6cmO1+Pq6vs233Wufk2Io52XiM3RZqLez/V4VOIZ3CG+ZOp3mbtjU2Nh6e11jcQvM83dO0/njozerbemp3+KYwjXJ18/TO24r1RxvuF23UPJ1qWbff8zT97KvTPK31+unblWl9PSfDvLhxT/d5Wl/n6fvWf+7cHP/ZcO6c6DUHx0cn6mMeT5MwP99nS5vjHLw3O5qdzk5kc/mtE/l8quXbmr5/defKifBno8+V27rMwTtb1u33HEzvY53mXm1s5ZPvg9bXczLMiyfv7z4H6+u8ft8VfO/atKT5XHlnWJLWafjetfXna51+5nVLy266WnNlLIzzW/u6/2y2vs6J/WvtM7vvp7vDkuva7KfW47fTMTWXbcx+2hbG+ez+zvupPp76Op87sMr5dDDLsgsffjD/eW/4/cqF89/7atPvXdr9TufChx/86QuP/fNaxg/A8Hu+KFuK97qGH6Kt5vf/AAAAwFCIff9IqIn+HwAAAEoj9v3xf4Un+n8AAAAojdj3j4WalKH//+Peq2x7/bMLz1/IUjJ/KYi3p93wULFezLjOhq+nlpbVlz/45fn//qcLqxveSJZlv3zoj9quv+2hOK7CVBjn5Tc0L1/hq/esatuHH7mQttuYX/9CePz4fFY7DdpFcGezLPv6DZ/JtzP1vkt5ffqhw3l9+OITj9fXee5A8XW8/zMvKdb/6xD+PXjsSNP9nwn74Uehzr6l/f6I9/vKpVdt3/ee5e3F+9V2XJ8/7SffXzxu/Jyczz5erB/3c6fxf+PTT32lvv6jr2w//gsj7cf/VHjcL4f6Py8r1m98Depfx/t9Mow/bi/e794vfbPt+C9/qlj/zBuL9Q6HGrd/Z/h65xufXWjcX4/WjjQ9r+xNxXpx+7Pf+9P89vh48fFbxz956FLT/midH0//e/E4My3rx+VxO9E/tmy//jiN8zNu/6k/Ody0n3tt//LDz7ys/rit27+7Zb0zH74r3/7y4zV/YtPffPIzbbcXx3PwH840PZ+D7wzHcdj+k+8P8zHc/r+Xi8dr/XSFw+9sPv/E9b+w9ULT84ne/PNi+5dfczyvmyY3b7nuBS+8/uIr6vsuy767qXi8Xts//renm8b/xZuK/RFvjxn91u13Erd/9iPTp04vnl+YS3v1sRvyz855azGeON4bwrm19etDp899YP7s1OzUbJZNlfcj9K7Yl0L9aVEudl97acUZ9K5Hwut5y19+fcvt//bpuPw/3l0sv/SW4n3rjrDeZ8PyreH1W9v2V3ry1pvy47v2dBjh0srPC16P7Tt/vH9VK4bn3/p9QZzvZ176gXw/1G/L3zficb3O8f9grnicr4X9uhQ+mXnHTcvba1w/fjbCpXcVx/u69184zcXX9e/D6/22HxWPH8cVn+8Pwvcx39zWfL6L8+NrF0ZaHz//FI+L4XySXSxuj2vF/X3puZvaDi9+Dkl28eb86z9Lj3Pzmp5mJ4sfXZw5sXDq/KMz5+YXz80sfvRjh06ePn/q3KH8szwPfbDLXf/qjizLls9PW/Lz09z83vuy/Gx1uihX2TrGn1vv+M88cnRu3+ztc/PHjpw/du6RM/Nnjx9dXDw6P7d4+5Fjx+Y/0uv+C3MP7Np9YM++3dPHF+Ye2H/gwJ4D0wunTteHUQyqh72zH5o+dfZQfpfFB+47sOv++++bnT55em7+gX2zs9Pne90/f2+art/7D6fPzp84cm7h5Pz04sLH5h/YdWDv3t09Pw3w5Jlji1MzZ8+fmjm/OH92pnguU+fyxfX3vl73p5wW/7P4frZVrfggvuwdd+9Nn89a9+WPd3yoYpWWDxB9NnwWzbdfdGb/ar6Off94qEkZ+n8AAAAgF/v+iVAT/T8AAACURuz7N4Wa6P8BAACgNGLfPxlq+i8BFen/S5f/33ZhVduX/5f/b9xf8v8Vy/+/a9Dy/8X5Qv6/P9abv5f/D+T/5f9Tfn4iy7KNyc9fnfHL/8v/cy0NWv4/9v2bs8zv/wEAAKCkYt+/JdRE/w8AAAClEfv+60JN9P8AAABQGrHvf0GoSUX6f/l/+X/5/wHK/4/L/8v/y/+vl/x/d/L/nRSfCC3/vziTXcP8fD/Gv8b8/8V+jv8a5P83N34h/88gGrT8f+z7XxhqUpH+HwAAAKog9v3Xh5ro/wEAAKA0Yt9/Q6iJ/h8AAABKI/b9W0NNKtL/y/+vK/+fMlfy/83jl/9v5vr/YT7I/8v/bwD5/+7k/3uQ/7+m188f9vG7/r/8PysNWv4/9v0vCjWpSP8PAAAApTW+/M/Y97841ET/DwAAAINn7MruFvv+l4SarOj/r3ADAAAAwDUX+/4bs5YgeEV+/y//7/r/8v/y//L/7be/+vz/aCb/Pzjk/7uT/+9B/l/+/yrk/zcPR/5/MpP/5yoYtPx/3vdnk9lLQ00q0v8DAABAFcS+/6ZQE/0/AAAAlEbs+/9fqIn+HwAAAEoj9v3bQk0q0v/L/5cm//+LxpdO/l/+v9v25f9d/7/M5P+7k//vQf5f/t/1/+X/6atBy//Hvv/mUJOK9P8AAABQBbHvvyXURP8PAAAApRH7/v8faqL/BwAAgNKIff/2UJOK9P/y/wOe/4/JUdf/l/+X/x/I/P+k/P/Akf/vTv6/B/l/+X/5f/l/+mrQ8v+x739ZqElF+n8AAACogtj3vzzURP8PAAAApRH7/leEmuj/AQAAoDRi3z8ValKR/n8t+f/aRfn/Tq7y9f8nVnH9/yby//L/3bYv/+/6/2Um/9+d/H8P8v/y//L/8v/01aDl/2Pff2uoSUX6fwAAAKiC2PfvCDXR/wMAAEBpxL7/tlAT/T8AAACURuz7d4aaVKT/d/3/ocj/Z/L/8v/y//L/8v+rI//fnfx/D/L/8v/y//L/9FWf8/8jrQvXmv+Pff8rQ00q0v8DAABAFcS+//ZQE/0/AAAAlEbs++8INdH/AwAAQGnEvv/OUJOK9P/y//L/8v/y//L/7bcv/z+c5P+7k//vQf5f/l/+X/6fvhq06//Hvv9VoSYV6f8BAACgCmLff1eoif4fAAAASiP2/XeHmuj/AQAAoDRi3z8dalKR/l/+X/5/ffn/TZn8v/y//L/8/yCR/+9O/r8H+X/5f/l/+X/6atDy/7HvvyfUpCL9PwAAAFRB7PvvDTXR/wMAAEBpxL5/JtRE/w8AAAClEfv+2VCTivT/8v/y/67/L/+/pvz/K5YfV/6/IP8/WOT/u5P/70H+X/7/muf/x+X/KZVBy//Hvn9XqElF+n8AAACogtj37w410f8DAABAacS+f0+oif4fAAAASiP2/feFmlSk/5f/l/+X/5f/d/3/9tuX/x9O8v/d9T//H5+i/L/8v/y/6//L/7PSoOX/Y99/f6hJRfp/AAAAqILY9+8NNdH/AwAAQGnEvn9fqIn+HwAAAEoj9v37Q00q0v/L/8v/y//L/8v/t9++/P9wkv/vzvX/e2jJ/0+E9yX5f/n/Ycj/1+eW/D+DZtDy/7HvPxBqUpH+HwAAAKog9v2vDjXR/wMAAEBpxL7/10JN9P8AAABQGrHv//VQk4r0//L/8v/y//L/g57/n5D/l/9fA/n/7uT/e3D9f/n/Ic7/u/4/g2jQ8v+x738g1KQi/T8AAABUQez7fyPURP8PAAAApRH7/teEmuj/AQAAoDRi338w1KQi/b/8/wbl/+NC+X/5f/l/1/+X/7+q5P+7k//vQf5f/l/+X/6fvhq0/H/s+18balKR/h8AAACqIPb9D4aa6P8BAACgNGLf/7pQE/0/AAAAlEbs+18falKR/l/+3/X/r33+f7xp7PL/y/eT/y/I/8v/r4X8f3fy/z3I/8v/y//L/9NXg5b/j33/G0JNKtL/AwAAQBXEvv+NoSb6fwAAACiN2Pe/KdRE/w8AAAClEfv+N4eaVKT/l/+X/7/2+X/X/5f/L8j/y//3g/x/d8OZ/6/vRvn/TP5/4Mcv/y//z0qDlv+Pff9vhppUpP8HAACAKoh9/0OhJvp/AAAAKI3Y978l1ET/DwAAAKUR+/63hppUpP+X/5f/l/+X/5f/b799+f/hJP/f3ZDl/391fVju+v8F+f/BHv9a8/9jLV9flfz/Dzvl/5c2td5f/p+rYdDy/7Hvf1uoSUX6fwAAAKiC2Pe/PdRE/w8AAAClEfv+d4Sa6P8BAACgNGLf/1uhJhXp/+X/6+NYTi/L/8v/5wvk/+X/5f+Hlvx/d0OW/w/X/5f/j+T/r/7442vh+v/y//THoOX/Y9//zlCTivT/AAAAUAWx73841ET/DwAAAKUR+/53hZro/wEAAKA0Yt//7lCTivT/8v+u/y//L/8v/99++/L/w6k/+f9R+X/5f/n/iub/N/L6/63a5v//S/6f4TZo+f/Y9z8SalKR/h8AAACqIPb97wk10f8DAABAacS+/7dDTfT/AAAAUBqx739vqElF+n/5/2HJ/0/J/68x/z8Rlsn/y//L/1eL6/93t33njzsnKxvJ/8v/y/8PRv7f9f8ZcoOW/499//tCTVbf/0+uek0AAADgmoh9/++EmlTk9/8AAABQBbHv/91QE/0/AAAAlEbs+38v1KR0/f/n2i6V/x+W/L/r/2eu/y//3/J85P/l/9vZuPx/PPMMXf7f9f+7kf+X/5f/75j/H+lxf/l/2hm0/H/s+38/1KR0/T8AAABUV+z73x9qov8HAACAodDu/2S3in3/oVAT/T8AAACURuz7D4eaVKT/l/+X/5f/H9D8/1/s+Nfvf+fth3fJ/8v/y/+vyYZe/79+8A/f9f/l/7uR/5f/l/93/X/6atDy/7HvPxJqstz4vdUF/gEAAGC4xb7/D0JNKvL7fwAAAKiC2PcfDTXR/wMAAEBpxL5/LtSkIv2//L/8v/z/gOb/h/j6/3F/DFP+f3rTEOX/40lX/r+tDc3/v2c5Jy7/v9b8/0Tbpa35/5r8fxP5/zWP/9tZlsn/y/9zDQ1a/j/2/fOhJhXp/wEAAKAKQt8/cqyoyzfo/wEAAKA0Yt9/PNRE/w8AAAClEfv+D4SaVKT/l/+X/5f/l/93/f/22x/Y/L/r/3cl/9/d4OT/23P9f/n/YR6//L/8PysNWv4/9v0LoSYV6f8BAACgCmLf/8FQE/0/AAAAlEbs+z8U6v+xdx9NltXnHcdvQ1P0FOUplzdeeIH3fgkszNJlvwAv2HjjKpfLxgHnxOAccc4B2zjggANICCUklAVKSCgLSShnIZSRVKOa7ud5psPpc7vpe/ue8/9/Pgs/TEPPvVhdwI/mO6fY/wAAANCM3P0/Erd0sv/1//p//b/+X/8//Pr6/3nS/4/T/y+h/9f/6//1/6zU1Pr/3P0/Grd0sv8BAACgB7n7b41b7H8AAABoRu7+H4tb7H8AAABoRu7+H49bZrn/t546bSWo/9f/N9v/f7f+/7jX1//r/1um/x+n/1/ivPr/iwv9/xps+v2fof9/eqH/p1FT6/9z9/9E3DLL/Q8AAAAMyd3/k3GL/Q8AAADNyN1/W9xi/wMAAEAzcvf/VNzSyf4/1P9vLfrs/zPj1f+31P9f7fW3F/r/A6+v/9f/t+x8+/87rvyVT/+v//f8/6D/9/x//T+HTa3/z93/03FLJ/sfAAAAepC7/2fiFvsfAAAAmpG7/2fjFvsfAAAAmpG7/+filk72/wSf/7/7P4Ln/+/9WP+/kv7f8/8Pvb7+X//fsr6f/7+z9I/oqf+/7fEbbn36ge948DSvr//X/+v/9f+s1tT6/9z9Px+3dLL/AQAAoAe5+38hbrH/AQAAoBm5+38xbrH/AQAAYIYuDH40d/8vxS2d7P8J9v9772vu/f91+v+h9z/p/n9H/6//1/+3oO/+f7me+v9n8/qd9P/D/1A8gX7+rFb2/u9e6P/1/6zI1Pr/3P2/HLd0sv8BAACgB7n7fyVusf8BAABguoYexDYid//tcYv9DwAAAM3I3X8pbulk/+v/1//8/2/o/+fR/3v+v/5f/98E/f84/f8SffT/x9L/e/6//p9Vm1r/n7v/jrilk/0PAAAAPcjd/6txi/0PAAAAzcjd/2txi/0PAAAAzcjd/+txSyf7X/+//v7f8//1//r/+HrQ/+v/z4H+f5z+fwn9/1n7+ev0//p//T/7nbL/f2bkL9sr6f9z9/9G3NLJ/gcAAIAe5O7/zbjF/gcAAIBm5O7/rbjF/gcAAIBm5O7/7bilk/2v/9f/6//P2P9fvPrzdNf/H/3S26X/H6b/Px/6/3GT6f+3tgc/rP+fff/v+f/6f/0/B0zt+f+5+38nbulk/wMAAEAPcvf/btwysv9P/S/zAQAAgI3K3f97cYvv/wMAAMDsZXWWu//345ZO9r/+X/+v//f8f8//H379sf7/wX3vT/8/Lfr/cZPp/4+h/9f/z/n96//1/xw1tf4/d/8fxC2d7H8AAADoQe7+O+MW+x8AAACakbv/D+MW+x8AAACakbv/j+KWTvb/cP9/9ffr/09G/3/w/ev/h78+VtX/58+o/x/t/2/2/P8+6f/H6f+X0P/r//X/x/X/F5Z9vv6fIVPr/3P3/3Hc0sn+BwAAgB7k7v+TuMX+BwAAgGbk7v/TuMX+BwAAgGbk7v+zuKWT/e/5//p//f/8+n/P/9+zyef/L869/9/W/5+Q/n+c/n8J/b/+X/8//vz/kV8FQP/PkKn1/7n7/zxu6WT/AwAAQA9y9/9F3GL/AwAAwDzs/28HDv8HpSF3/1/GLfY/AAAANCN3/1/FLe3s/9Fnder/9f/6f/2//n/49afV/3v+/0np/8fp/5fQ/6+jn99urP+/67jPn0L/f/u6+/8R+n+GHOj/H7r68U31/7n7/zpuaWf/AwAAQPdy9/9N3GL/AwAAQDNy9/9t3GL/AwAAQDNy9/9d3NLJ/l97/z/yqw/o//X/+n/9v/5f/79q+v9x+v8l9P+e/+/5//p/VupA/7/Ppvr/3P1/H7d0sv8BAACgB7n7/yFusf8BAACgGbn774pb7H8AAABoRu7+f4xbOtn/nv+v/9f/6//1/8Ovr/+fpzP199fo/4v+X/+v/9f/6/9Zgan1/7n7/ylu6WT/AwAAQA9y9/9z3GL/AwAAQDNy998dt9j/AAAA0Izc/f8St3Sy//X/6+3/8+P6f/3/Qv+v/9f/n4tun/+/NfR3oqOO6f8f/aFL33fwI/p//b/+X/+v/+eEvnXk902i/7989Z8uc/f/a9zSyf4HAACAHuTu/7e4xf4HAACAZuTu//e4xf4HAACAZuTuvyduOeX+H2sehj1146k/ZQ30/57/r//X/+v/h19f/z9P3fb/J+T5/0vo//X/+n/9Pys1if5/349z9/9H3OL7/wAAANCM3P3/GbfY/wAAANCM3P3/FbfY/wAAANCM3P3/Hbd0sv/1//p//b/+X/8//Pr6/3nS/4/T/y8xp/7/njP0/9vDH950P39Wm37/+n/9P0dNrf/P3X9v3NLJ/gcAAIAe5O7/n7jF/gcAAIBm5O7/37jF/gcAAIBm5O7/v7ilk/2v/9f/6//1//r/4dfX/8+T/n+c/n+xWNw38gaG+v/L10+z//f8/8m9f/2//p+jptb/5+7//7ilk/0PAAAAPcjdf1/cYv8DAABAM3L33x+32P8AAADQjNz9z4lbOtn/+n/9v/5f/7+C/v9AX6v/H6b/Px/6/3H6/yXm9Px//f/k3r/+X//PUVPr/3P3Pzdu6WT/AwAAQA9y9z8Qd8+19j8AAAA0JHf/8+IW+x8AAACakbv/wbilk/2v/9f/6//1/57/P/z6+v95Wl//v9D/6//1/0vo//X/+n8Om1r/n7v/+XFLJ/sfAAAAepC7/wVxi/0PAAAAzcjd/8K4xf4HAACAZuTuf1Hc0sn+1//r/3f7+XgD+n/9/2Jj/f+Vvwbp//X/Z+f5/+P0/0vo//X/+n/9Pys13P/fvrH+P3f/i+OWTvY/AAAA9CB3/0Nxi/0PAAAAzcjd/5K4xf4HAACAZuTuf2nc0sn+1//r/w8+/3+x0P/r/z3/f8859P87C/3/yun/x+n/l9D/t9n/X7NoqP+/cOzn6/+Zoqk9/z93/8NxSyf7HwAAAHqQu/9lcYv9DwAAAM3I3f/yuMX+BwAAgGbk7n9F3NLJ/tf/6/8P9v+e/7/7Af2//t/z/2dL/z9O/7+E/r/N/t/z//X/bMzU+v/c/a+MWzrZ/wAAANCD3P2vilvsfwAAAGhG7v5Xxy32PwAAADQjd/9r4pZO9r/+X/+v/9f/6/+HX1//P0/6/3H6/yX0//r/efT/3zP0+fp/pmhq/X/u/tfGLZ3sfwAAAOhB7v5H4hb7HwAAAJqRu//RuMX+BwAAgGbk7n9d3NLJ/tf/6//1//Ps/3f0//p//f+gqfT/N930vY/p//X/+n/9v+f/6/97N7X+P3f/6+OWTvY/AAAA9CB3/xviFvsfAAAAmpG7/41xi/0PAAAAzcjd/6a4pZP9f7T/v26xV6juGer/o1HT/++j/z/4/vX/w18fnv+v/9f/r99U+n/P/39271//fx79/zXH/p5N9/Nnten3f6r+/zuPfr7+nxZNrf/P3f9Y3NLJ/gcAAIAe5O5/c9xi/wMAAEAzcve/JW6x/wEAAKAZufsfj1s62f+e/6//1//r//X/w6+v/58n/f84/f8Sp+3/L86x/z/epvv5ub//Zp7/f63+n9WZWv+fu/+tcUsn+x8AAAB6kLv/bXGL/Q8AAADNyN3/9rjF/gcAAIBm5O5/R9zSyf7X/+v/9f9r6P+3h78+9P/6f/3/+un/x+n/y+E/tT1dPP9/187QBzfdz5/Vpt//mvr/h2/w/H9mbGr9f+7+d8Ytnex/AAAA6EHu/nfFLfY/AAAANCN3/7vjFvsfAAAAmpG7/z1xSyf7X//feP9/5Qfd9/8/4Pn/h15f/6//b5n+P/+OPkz/v0Q//f+gTffzc3//zTz/X//PCk2t/8/d/0Tc0sn+BwAAgB7k7n9v3GL/AwAAQDNy978vbrH/AQAAoBm5+98ft3Sy//X/jff/h57/v7Xosf/fwPP/j/n60P/r//X/66f/H6f/X0L/r//X/+v/Wamp9f+5+5/c2u5y/wMAAMBcff93/fATJ/1jn9z9vzuLD8QtNy8un/Db2AAAAMDEXdn9W9uLxQd3f+T7/wAAANCi3P0fils62f/6/776/z6f/7/G/v/KC+v/9f/6/0nR/4/bQP+/c5r3p//X/8/5/ev/9f8cNbX+P3f/h+OWfcNv+9R/lgAAAMCU5O7/SNzSyff/AQAAoAe5+z8atxzZ/345QAAAAJir3P0fi1s6+f6//n/i/f9iTf1//HH6/z2e/6//H3p9/f886f/HnbH/v7zl+f/6/xH6f/2//p/Dptb/5+7/eNzSyf4HAACARh34Nwq5+z8Rt9j/AAAA0Izc/Z+MW+x/AAAAaEbu/k/FLZ3sf/3/uff/maqv8fn/F+q3PP+/8/7/zp3B19f/6/9bpv8ft4Hn/+v/D/78+v812vf+r9f/6/+Zhqn1/7n7Px23dLL/AQAAoAe5+z8Tt9j/AAAA0Izc/Z+NW+x/AAAAaEbu/qeunG/pb/9vpP+Pn6TT/v90z/8/Yf//bRcPvvbS5//r//vo/495/Xb6/2+/4dIjt/zg/ffq/7nqPPv//FrQ/+v/9f97JtT/e/6//p+JWH3/v33gg6ft/3d3/2Jn8bm4pZP9DwAAAD3I3f903GL/AwAAQDNy938+brH/AQAAoBm5+78Qt3Sy/z3/v43+/7A59v/5/+sN9P+XnnX/f2GxWGyk/8+muPf+3/P/9f9Hef7/OP3/Evp//b/+X//PSq2+/z/4wdP2/7n7vxi3dLL/AQAAoAe5+78Ut+T+3zr1v7oHAAAAJiZ3/5fjFt//BwAAgGbk7v9K3NLJ/tf/6/+n0v8nz/+/+nltPf//lopT++z/b6zf0v+vl/5/nP5/Cf2//l//r/9npabW/+fu/2rc0sn+BwAAgB7k7n8mbrH/AQAAoBm5+78Wt9j/AAAA0Izc/V+PWzrZ//r/Vvv/LOL1//r/qfT/nv/v+f/nQ/8/Tv+/hP5/5v1/fMEs9P/6f6Ziav1/7v5vBgAA//8xAGhk") ioctl(r0, 0x4, &(0x7f0000000940)="77b23408babde5a57d00657e9f85aa47463a9791733b4a985ba00ca70bd588d5ec3edd172989349a2bb98a18b28eaa6edb47cdc07091369664f297d797ba8c01bc5e04e9fa2b443ca4660e67dc351cedf4a5a67bb6274edd9adf508272da6e659101a4ad0ae4c87641540581968513c2485395a6d9ad300a1c040cc5d6b6ad9b216e5fa2f73853d9dd136f505c17a2bad690120233446450") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0x1, 0xfffffff8, 'syz1\x00', 0x20}, 0x2, 0x2, 0x5, 0x0, 0x0, 0x502, 'syz0\x00', 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40800, 0x15a) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) kernel console output (not intermixed with test programs): 0 [ 238.103477][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 238.103661][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 238.103868][ T5785] do_sync+0x6c4/0x1610 [ 238.104020][ T5785] ? gfs2_quota_sync+0x68e/0xb00 [ 238.104212][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 238.104381][ T5785] ? gfs2_quota_sync+0x68e/0xb00 [ 238.104562][ T5785] gfs2_quota_sync+0x68e/0xb00 [ 238.104744][ T5785] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 238.104935][ T5785] gfs2_sync_fs+0x57/0x100 [ 238.105076][ T5785] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 238.105223][ T5785] sync_filesystem+0x131/0x3c0 [ 238.105380][ T5785] ? shrink_dcache_for_umount+0xf9/0x210 [ 238.105521][ T5785] generic_shutdown_super+0x8d/0x4b0 [ 238.105672][ T5785] kill_block_super+0x42/0xd0 [ 238.105823][ T5785] gfs2_kill_sb+0x4a9/0x580 [ 238.105964][ T5785] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 238.106089][ T5785] deactivate_locked_super+0xcb/0x3c0 [ 238.106245][ T5785] deactivate_super+0x12f/0x140 [ 238.106387][ T5785] cleanup_mnt+0x7eb/0x870 [ 238.106527][ T5785] ? __pfx___cleanup_mnt+0x10/0x10 [ 238.106648][ T5785] __cleanup_mnt+0x22/0x30 [ 238.106763][ T5785] task_work_run+0x208/0x2b0 [ 238.106918][ T5785] exit_to_user_mode_loop+0x2ff/0x1b10 [ 238.107077][ T5785] ? user_path_at+0x241/0x3e0 [ 238.107228][ T5785] ? __x64_sys_umount+0x1dc/0x250 [ 238.107397][ T5785] do_syscall_64+0x1d7/0xf80 [ 238.107556][ T5785] ? clear_bhb_loop+0x40/0x90 [ 238.107695][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.107826][ T5785] RIP: 0033:0x7fcd2239c1d7 [ 238.107918][ T5785] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 238.108021][ T5785] RSP: 002b:00007ffd16de1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 238.108139][ T5785] RAX: 0000000000000000 RBX: 00007fcd22430b3b RCX: 00007fcd2239c1d7 [ 238.108221][ T5785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd16de10e0 [ 238.108299][ T5785] RBP: 00007ffd16de10e0 R08: 00007ffd16de20e0 R09: 00000000ffffffff [ 238.108386][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd16de2170 [ 238.108474][ T5785] R13: 00007fcd22430b3b R14: 0000000000039b58 R15: 00007ffd16de21b0 [ 238.108595][ T5785] [ 238.193353][ T6398] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.203208][ T5785] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 238.352876][ T6397] tmpfs: Unknown parameter 'usrquota' [ 238.514339][ T5851] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 238.542144][ T6393] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.125: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 238.848642][ T6402] loop4: detected capacity change from 0 to 2048 [ 238.913540][ T6402] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 238.956061][ T6402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.011663][ T6402] UDF-fs: error (device loop4): udf_read_inode: (ino 1408) failed !bh [ 239.022539][ T5792] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 239.056251][ T6402] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 239.070507][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.465657][ T5851] gspca_nw80x: reg_r err -71 [ 239.470875][ T5851] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 239.516210][ T5851] usb 2-1: USB disconnect, device number 3 [ 239.665674][ T6404] loop2: detected capacity change from 0 to 1024 [ 239.802833][ T6408] loop4: detected capacity change from 0 to 1024 [ 239.850465][ T6408] EXT4-fs: Ignoring removed orlov option [ 239.959823][ T6408] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 0 [ 240.096309][ T6410] loop3: detected capacity change from 0 to 8 [ 240.230871][ T6410] SQUASHFS error: lzo decompression failed, data probably corrupt [ 240.239097][ T6410] SQUASHFS error: Failed to read block 0x91: -5 [ 240.245497][ T6410] SQUASHFS error: Unable to read metadata cache entry [8f] [ 240.253090][ T6410] SQUASHFS error: Unable to read inode 0x11f [ 240.544458][ T6412] netlink: 14 bytes leftover after parsing attributes in process `syz.2.133'. [ 240.723735][ T6410] loop3: detected capacity change from 0 to 2048 [ 240.794266][ T6414] loop4: detected capacity change from 0 to 512 [ 240.843553][ T6414] EXT4-fs: Ignoring removed nobh option [ 240.845977][ T6410] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 240.861589][ T6410] UDF-fs: error (device loop3): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (32 > 12) [ 240.875286][ T6410] UDF-fs: Scanning with blocksize 512 failed [ 240.984492][ T6414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.078347][ T6410] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 241.086168][ T6410] UDF-fs: Scanning with blocksize 1024 failed [ 241.112079][ T6410] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 241.122933][ T6410] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 241.130951][ T6410] UDF-fs: Scanning with blocksize 2048 failed [ 241.133786][ T6414] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.196016][ T6410] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 241.265598][ T6410] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 241.275645][ T6410] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 241.283795][ T6410] UDF-fs: Scanning with blocksize 4096 failed [ 241.290174][ T6410] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 241.487884][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 241.647895][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 241.684589][ T5843] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 241.693181][ T5843] usb 5-1: config 8 has an invalid descriptor of length 117, skipping remainder of the config [ 241.703833][ T5843] usb 5-1: config 8 has no interface number 0 [ 241.778009][ T5843] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 241.790394][ T5843] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 127, changing to 10 [ 241.802095][ T5843] usb 5-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 241.815452][ T5843] usb 5-1: config 8 interface 206 has no altsetting 0 [ 241.833708][ T5843] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 241.843527][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.852068][ T5843] usb 5-1: Product: syz [ 241.862239][ T5843] usb 5-1: Manufacturer: syz [ 241.867022][ T5843] usb 5-1: SerialNumber: syz [ 242.151887][ T6414] netlink: 280 bytes leftover after parsing attributes in process `syz.4.134'. [ 242.313838][ T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 242.382720][ T6427] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.134: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 242.406024][ T6421] overlay: filesystem on ./file0 not supported as upperdir [ 242.503832][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 242.564003][ T36] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 242.579235][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.623265][ T36] usb 2-1: config 0 descriptor?? [ 242.803502][ T5843] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 242.850275][ T36] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 242.868496][ T5843] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 242.908644][ T5843] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 242.921975][ T36] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.937932][ T795] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 242.950640][ T36] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 242.968553][ T5843] usb 5-1: USB disconnect, device number 2 [ 242.975236][ T36] usb 2-1: media controller created [ 243.101150][ T5843] garmin_gps 5-1:8.206: device disconnected [ 243.164440][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 243.164819][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.178566][ T795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 243.198603][ T795] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 243.208621][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.280784][ T6436] loop2: detected capacity change from 0 to 512 [ 243.373399][ T795] usb 4-1: config 0 descriptor?? [ 243.400388][ T6431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 243.416695][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.518604][ T6436] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.568606][ T5785] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 564 [ 243.583334][ T5785] CPU: 0 UID: 0 PID: 5785 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.583467][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 243.583537][ T5785] Call Trace: [ 243.583582][ T5785] [ 243.583626][ T5785] __dump_stack+0x26/0x30 [ 243.583774][ T5785] dump_stack_lvl+0x14c/0x1c0 [ 243.583922][ T5785] dump_stack+0x1e/0x25 [ 243.584061][ T5785] gfs2_assert_warn_i+0x2d8/0x470 [ 243.584212][ T5785] gfs2_make_fs_ro+0x4f9/0x500 [ 243.584349][ T5785] ? __pfx_autoremove_wake_function+0x10/0x10 [ 243.584539][ T5785] gfs2_put_super+0x3bc/0x1090 [ 243.584689][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 243.584862][ T5785] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 243.585048][ T5785] ? __pfx_gfs2_put_super+0x10/0x10 [ 243.585186][ T5785] generic_shutdown_super+0x1b0/0x4b0 [ 243.585339][ T5785] kill_block_super+0x42/0xd0 [ 243.585490][ T5785] gfs2_kill_sb+0x4a9/0x580 [ 243.585628][ T5785] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 243.585749][ T5785] deactivate_locked_super+0xcb/0x3c0 [ 243.585900][ T5785] deactivate_super+0x12f/0x140 [ 243.586040][ T5785] cleanup_mnt+0x7eb/0x870 [ 243.586166][ T5785] ? __pfx___cleanup_mnt+0x10/0x10 [ 243.586283][ T5785] __cleanup_mnt+0x22/0x30 [ 243.586394][ T5785] task_work_run+0x208/0x2b0 [ 243.586542][ T5785] exit_to_user_mode_loop+0x2ff/0x1b10 [ 243.586693][ T5785] ? user_path_at+0x241/0x3e0 [ 243.586837][ T5785] ? __x64_sys_umount+0x1dc/0x250 [ 243.587001][ T5785] do_syscall_64+0x1d7/0xf80 [ 243.587146][ T5785] ? clear_bhb_loop+0x40/0x90 [ 243.587279][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.587414][ T5785] RIP: 0033:0x7fcd2239c1d7 [ 243.587515][ T5785] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 243.587616][ T5785] RSP: 002b:00007ffd16de1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 243.587739][ T5785] RAX: 0000000000000000 RBX: 00007fcd22430b3b RCX: 00007fcd2239c1d7 [ 243.587819][ T5785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd16de10e0 [ 243.587896][ T5785] RBP: 00007ffd16de10e0 R08: 00007ffd16de20e0 R09: 00000000ffffffff [ 243.587978][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd16de2170 [ 243.588061][ T5785] R13: 00007fcd22430b3b R14: 0000000000039b58 R15: 00007ffd16de21b0 [ 243.588178][ T5785] [ 243.604224][ T6433] tmpfs: Unknown parameter 'usrquota' [ 243.808709][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.894591][ T6435] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.140: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 244.039778][ T6431] loop3: detected capacity change from 0 to 128 [ 244.130368][ T6431] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 244.268823][ T6431] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.305147][ T6423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.330256][ T6423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.355591][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.548390][ T36] stb0899_attach: Driver disabled by Kconfig [ 244.549466][ T795] usbhid 4-1:0.0: can't add hid device: -71 [ 244.554613][ T36] az6027: no front-end attached [ 244.554613][ T36] [ 244.555780][ T36] az6027: usb out operation failed. (-71) [ 244.561256][ T795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 244.568125][ T36] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 244.679979][ T795] usb 4-1: USB disconnect, device number 6 [ 244.743260][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 244.855747][ T36] dvb-usb: schedule remote query interval to 400 msecs. [ 244.863167][ T36] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 244.950005][ T36] usb 2-1: USB disconnect, device number 4 [ 245.461653][ T5789] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.380538][ T36] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 246.880089][ T6450] loop2: detected capacity change from 0 to 1024 [ 246.936272][ T6446] loop4: detected capacity change from 0 to 65536 [ 247.164364][ T6450] FAULT_INJECTION: forcing a failure. [ 247.164364][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 247.179366][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.2.145 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.179497][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 247.179578][ T6450] Call Trace: [ 247.179624][ T6450] [ 247.179669][ T6450] __dump_stack+0x26/0x30 [ 247.179820][ T6450] dump_stack_lvl+0x14c/0x1c0 [ 247.179972][ T6450] dump_stack+0x1e/0x25 [ 247.180106][ T6450] should_fail_ex+0x7e2/0x8c0 [ 247.180273][ T6450] should_failslab+0x158/0x200 [ 247.180418][ T6450] __kmalloc_noprof+0x1e4/0x1bf0 [ 247.180554][ T6450] ? filter_irq_stacks+0x49/0x190 [ 247.180689][ T6450] ? hfsplus_find_init+0x90/0x1d0 [ 247.180837][ T6450] ? stack_depot_save_flags+0x35/0x790 [ 247.180977][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.181171][ T6450] hfsplus_find_init+0x90/0x1d0 [ 247.181308][ T6450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.181498][ T6450] hfsplus_lookup+0x104/0xf70 [ 247.181624][ T6450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.181805][ T6450] ? kmsan_get_metadata+0x146/0x160 [ 247.181997][ T6450] ? stack_depot_save_flags+0x35/0x790 [ 247.182131][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.182303][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.182475][ T6450] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 247.182655][ T6450] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 247.182827][ T6450] ? d_alloc_parallel+0x2553/0x2740 [ 247.182956][ T6450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.183166][ T6450] ? stack_depot_save_flags+0x35/0x790 [ 247.183328][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.183497][ T6450] ? __pfx_hfsplus_lookup+0x10/0x10 [ 247.183621][ T6450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 247.183803][ T6450] ? __pfx_hfsplus_lookup+0x10/0x10 [ 247.183921][ T6450] __lookup_slow+0x56a/0x770 [ 247.184078][ T6450] lookup_slow+0x6a/0xd0 [ 247.184209][ T6450] link_path_walk+0x170f/0x2650 [ 247.184437][ T6450] path_openat+0x308/0x7160 [ 247.184593][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.184770][ T6450] ? do_sys_openat2+0x1c6/0x430 [ 247.184906][ T6450] ? filter_irq_stacks+0x13f/0x190 [ 247.185052][ T6450] ? stack_depot_save_flags+0x35/0x790 [ 247.185188][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.185351][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.185527][ T6450] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 247.185695][ T6450] ? kmsan_get_metadata+0xf1/0x160 [ 247.185881][ T6450] do_filp_open+0x27f/0x660 [ 247.186084][ T6450] do_sys_openat2+0x1c6/0x430 [ 247.186233][ T6450] __x64_sys_openat+0x240/0x300 [ 247.186384][ T6450] x64_sys_call+0x3597/0x3e70 [ 247.186549][ T6450] do_syscall_64+0xc9/0xf80 [ 247.186698][ T6450] ? clear_bhb_loop+0x40/0x90 [ 247.186833][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.186968][ T6450] RIP: 0033:0x7f5ea759af79 [ 247.187061][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.187166][ T6450] RSP: 002b:00007f5ea83aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.187284][ T6450] RAX: ffffffffffffffda RBX: 00007f5ea7815fa0 RCX: 00007f5ea759af79 [ 247.187373][ T6450] RDX: 0000000000002840 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 247.187460][ T6450] RBP: 00007f5ea83aa090 R08: 0000000000000000 R09: 0000000000000000 [ 247.187539][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.187609][ T6450] R13: 00007f5ea7816038 R14: 00007f5ea7815fa0 R15: 00007ffe97024f78 [ 247.187730][ T6450] [ 247.342021][ T30] audit: type=1326 audit(1770677775.422:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.366204][ T6454] loop3: detected capacity change from 0 to 16 [ 247.370811][ T30] audit: type=1326 audit(1770677775.432:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.379969][ T6454] erofs: Unknown parameter '' [ 247.380523][ T30] audit: type=1326 audit(1770677775.432:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.560990][ T6455] loop1: detected capacity change from 0 to 16 [ 247.571403][ T30] audit: type=1326 audit(1770677775.452:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.665120][ T30] audit: type=1326 audit(1770677775.452:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.687756][ T30] audit: type=1326 audit(1770677775.452:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.715573][ T30] audit: type=1326 audit(1770677775.492:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.739993][ T30] audit: type=1326 audit(1770677775.492:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.762529][ T30] audit: type=1326 audit(1770677775.492:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 247.784982][ T30] audit: type=1326 audit(1770677775.542:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.3.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff25b39af79 code=0x7ffc0000 [ 248.050988][ T6455] erofs: Unknown parameter 'nouser_8attr' [ 248.291125][ T6047] udevd[6047]: incorrect erofs checksum on /dev/loop1 [ 249.263634][ T6462] loop4: detected capacity change from 0 to 64 [ 249.263963][ T6458] loop0: detected capacity change from 0 to 32768 [ 249.344352][ T6458] [ 249.344352][ T6458] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.344352][ T6458] [ 249.366255][ T6461] loop2: detected capacity change from 0 to 1024 [ 249.461609][ T5785] [ 249.461609][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.461609][ T5785] [ 249.496834][ T5785] [ 249.496834][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 249.496834][ T5785] [ 249.521695][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.695070][ T36] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 249.817244][ T6461] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: comm syz.2.149: inode #2846395488: comm syz.2.149: iget: illegal inode # [ 249.855254][ T6470] loop3: detected capacity change from 0 to 512 [ 249.917713][ T6461] EXT4-fs (loop2): Remounting filesystem read-only [ 249.982463][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.998394][ T6461] EXT4-fs warning (device loop2): ext4_xattr_block_set:2200: inode #19: comm syz.2.149: dec ref error=-30 [ 250.059392][ T36] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 250.071485][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 250.082858][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 250.092924][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.141538][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.141904][ T36] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 250.172981][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 250.174352][ T6474] loop1: detected capacity change from 0 to 512 [ 250.181474][ T36] usb 5-1: Product: syz [ 250.181572][ T36] usb 5-1: Manufacturer: syz [ 250.181661][ T36] usb 5-1: SerialNumber: syz [ 250.200076][ T6470] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.313403][ T36] usb 5-1: config 0 descriptor?? [ 250.726794][ T36] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x762f [ 250.747077][ T6474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.923929][ T36] radio-si470x 5-1:0.0: software version 100, hardware version 101 [ 250.940619][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.977122][ T6481] netlink: 48 bytes leftover after parsing attributes in process `syz.3.151'. [ 251.058156][ T6474] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.135711][ T6468] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.151: corrupted inode contents [ 251.151110][ T36] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 251.512472][ T6471] tmpfs: Unknown parameter 'usrquota' [ 251.578958][ T6468] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #2: comm syz.3.151: mark_inode_dirty error [ 251.628035][ T6476] loop0: detected capacity change from 0 to 65536 [ 251.726146][ T6476] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 251.753219][ T6471] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.152: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 251.811845][ T6468] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #2: comm syz.3.151: corrupted inode contents [ 251.898294][ T6468] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.151: mark_inode_dirty error [ 251.940912][ T36] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 252.001918][ T36] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 252.056718][ T6476] XFS (loop0): Ending clean mount [ 252.083329][ T6476] XFS (loop0): Quotacheck needed: Please wait. [ 252.119933][ T36] usb 5-1: USB disconnect, device number 3 [ 252.132871][ T6476] XFS (loop0): Quotacheck: Done. [ 252.452660][ T5785] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 252.865792][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.950409][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.273085][ T6496] loop2: detected capacity change from 0 to 256 [ 253.390571][ T6500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.499741][ T6500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.551183][ T6503] loop3: detected capacity change from 0 to 64 [ 253.628744][ T36] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 253.723714][ T6508] net_ratelimit: 11 callbacks suppressed [ 253.723785][ T6508] netlink: zone id is out of range [ 253.742301][ T6508] netlink: zone id is out of range [ 253.749712][ T6508] netlink: zone id is out of range [ 253.754959][ T6508] netlink: zone id is out of range [ 253.760349][ T6508] netlink: zone id is out of range [ 253.765585][ T6508] netlink: zone id is out of range [ 253.771088][ T6508] netlink: zone id is out of range [ 253.776425][ T6508] netlink: zone id is out of range [ 253.782004][ T6508] netlink: zone id is out of range [ 253.787240][ T6508] netlink: zone id is out of range [ 253.903614][ T36] usb 5-1: config 210 has an invalid interface number: 31 but max is 0 [ 253.912610][ T36] usb 5-1: config 210 has no interface number 0 [ 253.989120][ T36] usb 5-1: config 210 interface 31 has no altsetting 0 [ 254.081501][ T36] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=a8.5c [ 254.091377][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.099826][ T36] usb 5-1: Product: syz [ 254.104181][ T36] usb 5-1: Manufacturer: syz [ 254.109104][ T36] usb 5-1: SerialNumber: syz [ 254.319925][ T36] ttusb_dec_send_command: command bulk message failed: error -22 [ 254.404331][ T36] ttusb-dec 5-1:210.31: probe with driver ttusb-dec failed with error -22 [ 254.516477][ T36] usb 5-1: USB disconnect, device number 4 [ 255.087879][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 255.130514][ T6516] warning: `syz.2.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 255.258974][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 255.300881][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.312883][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 255.323208][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 20 [ 255.429592][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.439149][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.447336][ T36] usb 4-1: SerialNumber: syz [ 255.467074][ T6521] loop1: detected capacity change from 0 to 2048 [ 255.505271][ T6514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.549082][ T6523] netlink: 20 bytes leftover after parsing attributes in process `syz.4.164'. [ 255.818722][ T6514] cgroup: Unknown subsys name 'cpuset' [ 255.847105][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.858938][ T6514] fuse: Bad value for 'fd' [ 256.164979][ T6523] loop4: detected capacity change from 0 to 256 [ 256.763297][ T6514] loop3: detected capacity change from 0 to 40427 [ 256.772177][ T6514] F2FS-fs: heap/no_heap options were deprecated [ 256.796144][ T6514] F2FS-fs (loop3): build fault injection rate: 19 [ 256.802849][ T6514] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 256.822123][ T6514] F2FS-fs (loop3): invalid crc value [ 256.875674][ T6514] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 257.088239][ T6523] FAT-fs (loop4): Directory bread(block 64) failed [ 257.152027][ T6523] FAT-fs (loop4): Directory bread(block 65) failed [ 257.158797][ T6514] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 257.181280][ T6514] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 257.238479][ T6523] FAT-fs (loop4): Directory bread(block 66) failed [ 257.257074][ T6514] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.287901][ T6523] FAT-fs (loop4): Directory bread(block 67) failed [ 257.328538][ T6523] FAT-fs (loop4): Directory bread(block 68) failed [ 257.338030][ T6523] FAT-fs (loop4): Directory bread(block 69) failed [ 257.376193][ T36] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 257.394517][ T6523] FAT-fs (loop4): Directory bread(block 70) failed [ 257.447866][ T6523] FAT-fs (loop4): Directory bread(block 71) failed [ 257.454764][ T6523] FAT-fs (loop4): Directory bread(block 72) failed [ 257.481755][ T36] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 257.506499][ T6523] FAT-fs (loop4): Directory bread(block 73) failed [ 257.570689][ T36] usb 4-1: USB disconnect, device number 7 [ 257.663472][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.752099][ T6532] loop2: detected capacity change from 0 to 4096 [ 257.774071][ T6532] ntfs3: Unknown parameter '1844674407370955161500000000000000000000000' [ 258.064392][ T6541] loop0: detected capacity change from 0 to 512 [ 258.294262][ T6541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.348022][ T6541] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.374930][ T6550] loop4: detected capacity change from 0 to 256 [ 259.411145][ T6550] exfat: Deprecated parameter 'utf8' [ 259.430569][ T6550] exfat: Deprecated parameter 'namecase' [ 259.436862][ T6550] exfat: Deprecated parameter 'namecase' [ 259.442921][ T6550] exfat: Deprecated parameter 'utf8' [ 259.615267][ T6550] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 259.639127][ T6550] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 259.920414][ T6550] Zero length message leads to an empty skb [ 260.238075][ T6553] loop1: detected capacity change from 0 to 512 [ 260.445442][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.464498][ T795] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 260.658031][ T795] usb 5-1: device descriptor read/64, error -71 [ 260.771649][ T6553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.775371][ T6546] loop2: detected capacity change from 0 to 32768 [ 260.793713][ T6546] jfs: Unknown parameter '8' [ 260.988468][ T795] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 261.068786][ T6553] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.190522][ T795] usb 5-1: device descriptor read/64, error -71 [ 261.200808][ T6548] tmpfs: Unknown parameter 'usrquota' [ 261.312961][ T795] usb usb5-port1: attempt power cycle [ 261.375440][ T6557] loop2: detected capacity change from 0 to 2048 [ 261.422295][ T6548] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.167: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 261.497613][ T6557] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 261.510202][ T6557] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 261.538092][ T6552] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.167: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 261.701666][ T795] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 261.751366][ T795] usb 5-1: device descriptor read/8, error -71 [ 262.028887][ T795] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 262.108580][ T795] usb 5-1: device descriptor read/8, error -71 [ 262.180779][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.222802][ T795] usb usb5-port1: unable to enumerate USB device [ 262.611578][ T6564] loop3: detected capacity change from 0 to 1024 [ 262.645329][ T6564] EXT4-fs: Ignoring removed nobh option [ 262.819200][ T6564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.439737][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.934393][ T6580] binder: BINDER_SET_CONTEXT_MGR already set [ 263.941686][ T6580] binder: 6579:6580 ioctl 4018620d 2000000002c0 returned -16 [ 264.006081][ T6583] netlink: 16378 bytes leftover after parsing attributes in process `syz.3.177'. [ 264.035481][ T6584] sp0: Synchronizing with TNC [ 264.460156][ T6581] loop1: detected capacity change from 0 to 4096 [ 264.523460][ T6581] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 264.597367][ T6579] [U] [ 264.873350][ T6591] loop3: detected capacity change from 0 to 512 [ 264.882371][ T6581] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 265.058157][ T6581] ntfs3(loop1): ino=5, "/" indx_read [ 265.219190][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.336627][ T6598] ntfs3(loop1): ino=5, "/" indx_read [ 265.394128][ T6591] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.449197][ T6581] bond0: (slave bond_slave_1): Releasing backup interface [ 265.558060][ T6603] loop0: detected capacity change from 0 to 512 [ 265.595132][ T6596] loop2: detected capacity change from 0 to 32768 [ 265.707928][ T6596] JBD2: Ignoring recovery information on journal [ 265.827847][ T795] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 266.051377][ T795] usb 2-1: config 0 has an invalid interface number: 97 but max is 0 [ 266.062008][ T795] usb 2-1: config 0 has no interface number 0 [ 266.106166][ T6603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.120985][ T6603] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.136113][ T6606] netlink: 44 bytes leftover after parsing attributes in process `syz.4.184'. [ 266.156148][ T6596] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 266.165820][ T795] usb 2-1: config 0 interface 97 has no altsetting 0 [ 266.173015][ T795] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=30.45 [ 266.182450][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.213810][ T6595] tmpfs: Unknown parameter 'usrquota' [ 266.273154][ T6595] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:105: comm syz.0.183: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 266.376547][ T795] usb 2-1: config 0 descriptor?? [ 266.475038][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.648400][ T795] usb 2-1: string descriptor 0 read error: -71 [ 266.699559][ T795] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 266.782429][ T795] command write [95] error -22 [ 266.785730][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.838651][ T795] usb 2-1: USB disconnect, device number 5 [ 266.897355][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 267.325856][ T6618] loop0: detected capacity change from 0 to 128 [ 267.386526][ T6618] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 267.464864][ T6619] loop2: detected capacity change from 0 to 4096 [ 267.479957][ T6619] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 267.503547][ T6619] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 267.513571][ T6619] NILFS (loop2): mounting unchecked fs [ 267.523375][ T6619] NILFS (loop2): invalid segment: Checksum error in segment payload [ 267.531801][ T6619] NILFS (loop2): unable to fall back to spare super block [ 267.539338][ T6619] NILFS (loop2): error -22 while searching super root [ 268.047397][ T6624] loop5: detected capacity change from 0 to 7 [ 268.093606][ T6624] loop5: [POWERTEC] p1 p2 p3 p4 p5 [ 268.120710][ T6624] loop5: p1 start 1769107558 is beyond EOD, truncated [ 268.129869][ T6624] loop5: p2 size 20971520 extends beyond EOD, truncated [ 268.241582][ T6624] loop5: p3 start 3190190390 is beyond EOD, truncated [ 268.249132][ T6624] loop5: p4 start 4009231647 is beyond EOD, truncated [ 268.256105][ T6624] loop5: p5 start 3512340812 is beyond EOD, truncated [ 268.285176][ T6629] comedi comedi0: Minor 2147483639 is invalid! [ 268.424440][ T795] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 268.638656][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 268.703617][ T795] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 268.713189][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.838346][ T795] usb 3-1: config 0 descriptor?? [ 269.055273][ T795] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 269.115171][ T795] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.134940][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 269.182050][ T795] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 269.221986][ T795] usb 3-1: media controller created [ 269.523051][ T795] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.887024][ T6644] loop0: detected capacity change from 0 to 1024 [ 269.939479][ T6644] EXT4-fs: Ignoring removed bh option [ 269.970767][ T6625] netlink: 36 bytes leftover after parsing attributes in process `syz.2.189'. [ 270.017593][ T6644] EXT4-fs: Mount option(s) incompatible with ext3 [ 270.039167][ T6625] netlink: 176 bytes leftover after parsing attributes in process `syz.2.189'. [ 270.199903][ T6648] loop3: detected capacity change from 0 to 512 [ 270.345951][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.352593][ T6648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.356031][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.466611][ T6648] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.499311][ T6645] tmpfs: Unknown parameter 'usrquota' [ 270.564120][ T6650] loop1: detected capacity change from 0 to 1024 [ 270.569851][ T6645] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.196: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 270.576028][ T6650] EXT4-fs: Ignoring removed orlov option [ 270.604511][ T795] stb0899_attach: Driver disabled by Kconfig [ 270.611338][ T795] az6027: no front-end attached [ 270.611338][ T795] [ 270.639557][ T6647] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.196: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 270.669665][ T6650] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0 [ 270.681241][ T5851] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 270.690321][ T795] az6027: usb out operation failed. (-71) [ 270.696182][ T795] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 270.711993][ T795] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 270.761120][ T795] dvb-usb: schedule remote query interval to 400 msecs. [ 270.771117][ T795] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 270.805573][ T795] usb 3-1: USB disconnect, device number 5 [ 270.878063][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 270.951218][ T5851] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 270.964713][ T5851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.056934][ T5851] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 271.066479][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.074909][ T5851] usb 5-1: Product: syz [ 271.079329][ T5851] usb 5-1: Manufacturer: syz [ 271.084083][ T5851] usb 5-1: SerialNumber: syz [ 271.166897][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.207179][ T6656] loop0: detected capacity change from 0 to 1024 [ 271.281849][ T6656] EXT4-fs: Ignoring removed orlov option [ 271.289382][ T795] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 271.300712][ T5851] usb 5-1: config 0 descriptor?? [ 271.303182][ T6656] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 0 [ 271.310704][ T6654] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 271.611001][ T5851] usb 5-1: USB disconnect, device number 9 [ 272.135867][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 272.265631][ T6669] loop2: detected capacity change from 0 to 2048 [ 272.315692][ T6669] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 272.326128][ T6669] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.337384][ T6669] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)! [ 272.337685][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 272.353087][ T6669] EXT4-fs (loop2): group descriptors corrupted! [ 272.413051][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.444889][ T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.455568][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.506064][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.515687][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.524676][ T36] usb 1-1: Product: syz [ 272.529893][ T36] usb 1-1: Manufacturer: syz [ 272.534638][ T36] usb 1-1: SerialNumber: syz [ 272.816711][ T6665] loop0: detected capacity change from 0 to 64 [ 272.872258][ T6665] hfs: Unknown parameter 'co' [ 272.947300][ T6665] syz.0.205 uses obsolete (PF_INET,SOCK_PACKET) [ 273.127371][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.365084][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.439077][ T5851] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 273.641472][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 273.679966][ T5851] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 273.688564][ T5851] usb 5-1: config 0 has no interface number 0 [ 273.709117][ T5851] usb 5-1: config 0 interface 12 has no altsetting 0 [ 273.753203][ T5851] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 273.763890][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.773119][ T5851] usb 5-1: Product: syz [ 273.778423][ T5851] usb 5-1: Manufacturer: syz [ 273.783198][ T5851] usb 5-1: SerialNumber: syz [ 273.822469][ T5851] usb 5-1: config 0 descriptor?? [ 273.875398][ T36] usb 1-1: cannot find UAC_HEADER [ 273.975717][ T36] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 274.037610][ T36] usb 1-1: USB disconnect, device number 4 [ 274.158379][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 274.158466][ T30] audit: type=1326 audit(1770677802.522:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6677 comm="syz.4.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x0 [ 274.204746][ T6687] loop0: detected capacity change from 0 to 1024 [ 274.227202][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.272255][ T6687] EXT4-fs: Ignoring removed bh option [ 274.303389][ T6687] EXT4-fs: Mount option(s) incompatible with ext3 [ 274.920076][ T6690] FAULT_INJECTION: forcing a failure. [ 274.920076][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 274.936267][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.0.211 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.936398][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 274.936471][ T6690] Call Trace: [ 274.936517][ T6690] [ 274.936558][ T6690] __dump_stack+0x26/0x30 [ 274.936707][ T6690] dump_stack_lvl+0x14c/0x1c0 [ 274.936860][ T6690] dump_stack+0x1e/0x25 [ 274.936987][ T6690] should_fail_ex+0x7e2/0x8c0 [ 274.937149][ T6690] should_failslab+0x158/0x200 [ 274.937273][ T6690] kmem_cache_alloc_noprof+0x14f/0x1730 [ 274.937411][ T6690] ? getname_flags+0x101/0xac0 [ 274.937572][ T6690] ? filter_irq_stacks+0x49/0x190 [ 274.937710][ T6690] ? kmsan_get_metadata+0xf1/0x160 [ 274.937888][ T6690] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 274.938074][ T6690] getname_flags+0x101/0xac0 [ 274.938253][ T6690] do_sys_openat2+0xaa/0x430 [ 274.938416][ T6690] __x64_sys_openat+0x240/0x300 [ 274.938567][ T6690] x64_sys_call+0x3597/0x3e70 [ 274.938726][ T6690] do_syscall_64+0xc9/0xf80 [ 274.938893][ T6690] ? clear_bhb_loop+0x40/0x90 [ 274.939030][ T6690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.939165][ T6690] RIP: 0033:0x7fcd2235b84e [ 274.939258][ T6690] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 274.939364][ T6690] RSP: 002b:00007fcd205f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 274.939483][ T6690] RAX: ffffffffffffffda RBX: 00007fcd205f66c0 RCX: 00007fcd2235b84e [ 274.939573][ T6690] RDX: 0000000000000002 RSI: 00007fcd205f5f90 RDI: ffffffffffffff9c [ 274.939660][ T6690] RBP: 00007fcd205f6090 R08: 0000000000000000 R09: 0000000000000000 [ 274.939739][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.939820][ T6690] R13: 00007fcd22616038 R14: 00007fcd22615fa0 R15: 00007ffd16de1db8 [ 274.939943][ T6690] [ 275.202556][ T6696] loop2: detected capacity change from 0 to 512 [ 275.282809][ T6696] ext4: Unknown parameter '' [ 275.416029][ T6694] tmpfs: Unknown parameter 'usrquota' [ 275.842866][ T3492] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.128405][ T6703] loop1: detected capacity change from 0 to 256 [ 276.822061][ T5851] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 276.829964][ T5851] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 276.838143][ T5851] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 276.846123][ T5851] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 276.958407][ T5851] usb 5-1: USB disconnect, device number 10 [ 277.074852][ T6717] loop0: detected capacity change from 0 to 1024 [ 277.122863][ T6717] EXT4-fs: Ignoring removed bh option [ 277.678245][ T6715] loop1: detected capacity change from 0 to 32768 [ 277.764891][ T6717] EXT4-fs: Mount option(s) incompatible with ext3 [ 277.863190][ T6715] [ 277.863190][ T6715] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 277.863190][ T6715] [ 277.888132][ T5787] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 277.975107][ T6721] loop2: detected capacity change from 0 to 40427 [ 278.006274][ T6715] ERROR: (device loop1): diWrite: ixpxd invalid [ 278.006274][ T6715] [ 278.006594][ T6721] F2FS-fs (loop2): invalid crc value [ 278.022570][ T6715] ERROR: (device loop1): remounting filesystem as read-only [ 278.030385][ T6715] ERROR: (device loop1): txAbort: [ 278.030385][ T6715] [ 278.095182][ T795] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 278.332024][ T6720] loop4: detected capacity change from 0 to 1024 [ 278.408961][ T795] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.427056][ T6721] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 278.450342][ T6721] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.481956][ T6721] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 278.992403][ T6729] loop1: detected capacity change from 0 to 2048 [ 279.061878][ T6729] udf: Unknown parameter '' [ 279.158339][ T3492] hfsplus: b-tree write err: -5, ino 4 [ 280.171719][ T6745] loop1: detected capacity change from 0 to 512 [ 280.398470][ T6745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.458175][ T795] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 280.474285][ T6745] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.528347][ T6740] tmpfs: Unknown parameter 'usrquota' [ 280.647930][ T6740] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.227: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 280.693320][ T795] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.704075][ T795] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 280.851404][ T795] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 280.860185][ T6742] fido_id[6742]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.860877][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.886762][ T795] usb 5-1: Product: syz [ 280.891193][ T795] usb 5-1: Manufacturer: syz [ 280.896014][ T795] usb 5-1: SerialNumber: syz [ 281.100480][ T795] usb 5-1: config 0 descriptor?? [ 281.291060][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.353443][ T36] usb 5-1: USB disconnect, device number 11 [ 281.805512][ T6759] loop1: detected capacity change from 0 to 2048 [ 281.915319][ T6759] udf: Unknown parameter 'udf' [ 282.008910][ T36] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.053992][ T6761] loop0: detected capacity change from 0 to 1024 [ 282.111194][ T6761] EXT4-fs: Ignoring removed bh option [ 282.184074][ T6761] EXT4-fs: Mount option(s) incompatible with ext3 [ 282.233962][ T36] usb 3-1: config index 0 descriptor too short (expected 38, got 36) [ 282.242543][ T36] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 282.253069][ T36] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.262396][ T36] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 282.271912][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.491016][ T36] usb 3-1: config 0 descriptor?? [ 282.700393][ T6766] loop1: detected capacity change from 0 to 256 [ 282.722864][ T6766] exfat: Deprecated parameter 'utf8' [ 282.729230][ T6766] exfat: Deprecated parameter 'namecase' [ 282.735575][ T6766] exfat: Deprecated parameter 'namecase' [ 282.742119][ T6766] exfat: Deprecated parameter 'utf8' [ 282.888478][ T6768] loop0: detected capacity change from 0 to 256 [ 282.937044][ T6768] exfat: Deprecated parameter 'utf8' [ 282.955803][ T6766] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 283.038235][ T6766] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 283.078276][ T6766] x_tables: duplicate underflow at hook 2 [ 283.106404][ T6768] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 284.375622][ T6778] loop5: detected capacity change from 0 to 7 [ 284.394339][ T6780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.241'. [ 284.409954][ T6778] Dev loop5: unable to read RDB block 7 [ 284.415783][ T6778] loop5: unable to read partition table [ 284.458611][ T6778] loop5: partition table beyond EOD, truncated [ 284.465194][ T6778] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 284.809656][ T6785] loop3: detected capacity change from 0 to 512 [ 284.944000][ T6785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.962451][ T795] usb 3-1: USB disconnect, device number 6 [ 284.971288][ T6785] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.050069][ T6788] tipc: Enabling not permitted [ 285.056033][ T6788] tipc: Enabling of bearer rejected, failed to enable media [ 285.095366][ T6782] tmpfs: Unknown parameter 'usrquota' [ 285.189750][ T6782] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.242: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 285.585222][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.694691][ T6793] loop2: detected capacity change from 0 to 2048 [ 285.828818][ T6793] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 285.841377][ T6793] UDF-fs: error (device loop2): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (32 > 12) [ 285.855042][ T6793] UDF-fs: Scanning with blocksize 512 failed [ 285.923648][ T6799] 9pnet_fd: Insufficient options for proto=fd [ 285.928994][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.936647][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.005311][ T6793] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 286.013378][ T6793] UDF-fs: Scanning with blocksize 1024 failed [ 286.030676][ T6801] loop0: detected capacity change from 0 to 1024 [ 286.078146][ T6801] EXT4-fs: Ignoring removed bh option [ 286.120094][ T6793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 286.130447][ T6793] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 286.138480][ T6793] UDF-fs: Scanning with blocksize 2048 failed [ 286.174363][ T6801] EXT4-fs: Mount option(s) incompatible with ext3 [ 286.255569][ T6793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 286.359826][ T6793] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 286.369910][ T6793] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 286.377878][ T6793] UDF-fs: Scanning with blocksize 4096 failed [ 286.384081][ T6793] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 286.831267][ T6804] loop0: detected capacity change from 0 to 128 [ 286.989299][ T6809] netlink: 14 bytes leftover after parsing attributes in process `syz.4.250'. [ 287.084890][ T6809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.190194][ T6809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.252360][ T6809] bond0 (unregistering): Released all slaves [ 287.497915][ T36] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 287.789553][ T36] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 287.797359][ T36] usb 3-1: can't read configurations, error -61 [ 287.923000][ T6819] loop5: detected capacity change from 0 to 7 [ 287.957883][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 287.959089][ T6820] loop4: detected capacity change from 0 to 512 [ 287.984218][ T6819] Dev loop5: unable to read RDB block 7 [ 287.990449][ T6819] loop5: unable to read partition table [ 288.054409][ T6820] EXT4-fs: Ignoring removed nobh option [ 288.062211][ T6819] loop5: partition table beyond EOD, truncated [ 288.068894][ T6819] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 288.152427][ T36] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 288.160503][ T36] usb 3-1: can't read configurations, error -61 [ 288.189122][ T36] usb usb3-port1: attempt power cycle [ 288.195781][ T6820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.267864][ T6820] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.431253][ T6820] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.255: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 288.541819][ T6830] loop3: detected capacity change from 0 to 256 [ 288.617839][ T36] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 288.656435][ T6833] loop1: detected capacity change from 0 to 512 [ 288.664991][ T36] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 288.673620][ T36] usb 3-1: can't read configurations, error -61 [ 288.788624][ T6833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.863005][ T36] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 288.889014][ T6833] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.910696][ T36] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 288.919048][ T36] usb 3-1: can't read configurations, error -61 [ 288.931458][ T36] usb usb3-port1: unable to enumerate USB device [ 288.940623][ T6830] FAT-fs (loop3): Directory bread(block 64) failed [ 288.996182][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.019494][ T6830] FAT-fs (loop3): Directory bread(block 65) failed [ 289.026386][ T6830] FAT-fs (loop3): Directory bread(block 66) failed [ 289.046300][ T6825] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.256: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 289.066877][ T6830] FAT-fs (loop3): Directory bread(block 67) failed [ 289.067124][ T6830] FAT-fs (loop3): Directory bread(block 68) failed [ 289.109914][ T6830] FAT-fs (loop3): Directory bread(block 69) failed [ 289.116791][ T6830] FAT-fs (loop3): Directory bread(block 70) failed [ 289.126929][ T6830] FAT-fs (loop3): Directory bread(block 71) failed [ 289.143028][ T6830] FAT-fs (loop3): Directory bread(block 72) failed [ 289.158856][ T6830] FAT-fs (loop3): Directory bread(block 73) failed [ 289.175539][ T6839] loop0: detected capacity change from 0 to 512 [ 289.377587][ T6839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.454890][ T6839] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.610852][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.815895][ T6845] loop5: detected capacity change from 0 to 7 [ 289.835666][ T6845] loop5: [POWERTEC] p1 p2 p3 p4 p5 [ 289.869298][ T6845] loop5: p1 start 1769107558 is beyond EOD, truncated [ 289.876388][ T6845] loop5: p2 size 20971520 extends beyond EOD, truncated [ 289.948740][ T6847] netlink: 24 bytes leftover after parsing attributes in process `syz.1.261'. [ 289.958613][ T6847] netlink: 100 bytes leftover after parsing attributes in process `syz.1.261'. [ 289.972102][ T6845] loop5: p3 start 3190190390 is beyond EOD, truncated [ 289.979475][ T6845] loop5: p4 start 4009231647 is beyond EOD, truncated [ 289.988084][ T6845] loop5: p5 start 3512340812 is beyond EOD, truncated [ 290.048844][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.261'. [ 290.487058][ T6008] udevd[6008]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 290.501168][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.117748][ T6861] loop3: detected capacity change from 0 to 1024 [ 291.135896][ T6861] EXT4-fs: Ignoring removed orlov option [ 291.144330][ T6861] EXT4-fs warning (device loop3): read_mmp_block:111: Error -117 while reading MMP block 0 [ 291.438093][ T6867] comedi comedi0: Minor 2147483639 is invalid! [ 291.968381][ T6873] loop0: detected capacity change from 0 to 1024 [ 291.975473][ T6874] loop2: detected capacity change from 0 to 512 [ 292.090158][ T6873] EXT4-fs: Invalid commit interval 2147483647, must be smaller than 21474836 [ 292.160438][ T6874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.303244][ T6874] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.528624][ T6876] loop3: detected capacity change from 0 to 32768 [ 292.535146][ T6869] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.271: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 292.589611][ T6876] [ 292.589611][ T6876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 292.589611][ T6876] [ 292.659926][ T6876] ERROR: (device loop3): diWrite: ixpxd invalid [ 292.659926][ T6876] [ 292.677139][ T6876] ERROR: (device loop3): remounting filesystem as read-only [ 292.685135][ T6876] ERROR: (device loop3): txAbort: [ 292.685135][ T6876] [ 293.091256][ T6863] Bluetooth: hci1: command 0x0406 tx timeout [ 293.098967][ T6863] Bluetooth: hci4: command 0x0406 tx timeout [ 293.105133][ T6863] Bluetooth: hci0: command 0x0406 tx timeout [ 293.112467][ T6863] Bluetooth: hci2: command 0x0406 tx timeout [ 293.118923][ T6863] Bluetooth: hci3: command 0x0406 tx timeout [ 293.363648][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.831588][ T6885] loop0: detected capacity change from 0 to 32768 [ 293.863894][ T6885] [ 293.863894][ T6885] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 293.863894][ T6885] [ 294.334339][ T6895] loop2: detected capacity change from 0 to 512 [ 294.518125][ T6895] EXT4-fs (loop2): 1 truncate cleaned up [ 294.525849][ T6895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.677312][ T30] audit: type=1800 audit(1770677823.052:124): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 294.688858][ T6894] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.278: bg 0: block 465: padding at end of block bitmap is not set [ 294.775671][ T6903] FAULT_INJECTION: forcing a failure. [ 294.775671][ T6903] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 294.789228][ T6903] CPU: 0 UID: 0 PID: 6903 Comm: syz.3.276 Not tainted syzkaller #0 PREEMPT(voluntary) [ 294.789353][ T6903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 294.789425][ T6903] Call Trace: [ 294.789475][ T6903] [ 294.789515][ T6903] __dump_stack+0x26/0x30 [ 294.789665][ T6903] dump_stack_lvl+0x14c/0x1c0 [ 294.789807][ T6903] dump_stack+0x1e/0x25 [ 294.789932][ T6903] should_fail_ex+0x7e2/0x8c0 [ 294.790095][ T6903] should_fail+0x2a/0x40 [ 294.790225][ T6903] should_fail_usercopy+0x2e/0x40 [ 294.790370][ T6903] strncpy_from_user+0x38/0x4b0 [ 294.790508][ T6903] ? __msan_memcpy+0x105/0x1c0 [ 294.790668][ T6903] __se_sys_memfd_create+0x5d9/0xb10 [ 294.790807][ T6903] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 294.790990][ T6903] __x64_sys_memfd_create+0x78/0xb0 [ 294.791124][ T6903] x64_sys_call+0x319b/0x3e70 [ 294.791282][ T6903] do_syscall_64+0xc9/0xf80 [ 294.791426][ T6903] ? clear_bhb_loop+0x40/0x90 [ 294.791569][ T6903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.791700][ T6903] RIP: 0033:0x7ff25b39af79 [ 294.791796][ T6903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.791903][ T6903] RSP: 002b:00007ff25c193e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 294.792024][ T6903] RAX: ffffffffffffffda RBX: 000000000000057d RCX: 00007ff25b39af79 [ 294.792112][ T6903] RDX: 00007ff25c193ee0 RSI: 0000000000000000 RDI: 00007ff25b4318dd [ 294.792195][ T6903] RBP: 0000200000002e80 R08: 00000000ffffffff R09: 0000000000000000 [ 294.792274][ T6903] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000c80 [ 294.792358][ T6903] R13: 00007ff25c193ee0 R14: 00007ff25c193ea0 R15: 0000200000000580 [ 294.792485][ T6903] [ 294.806802][ T36] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 295.051439][ T5785] [ 295.051439][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.051439][ T5785] [ 295.127391][ T5785] [ 295.127391][ T5785] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 295.127391][ T5785] [ 295.451115][ T36] usb 2-1: device descriptor read/64, error -71 [ 295.475995][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.487858][ T795] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 295.633210][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 295.670778][ T795] usb 5-1: Using ep0 maxpacket: 32 [ 295.720915][ T795] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 295.731169][ T795] usb 5-1: config 0 has no interface number 0 [ 295.738078][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 295.778417][ T795] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 295.834709][ T795] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 295.844974][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.853608][ T795] usb 5-1: Product: syz [ 295.858092][ T795] usb 5-1: Manufacturer: syz [ 295.862958][ T795] usb 5-1: SerialNumber: syz [ 295.878337][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.889571][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.898087][ T36] usb 2-1: device descriptor read/64, error -71 [ 295.900127][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.918973][ T10] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 295.929478][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.031499][ T795] usb 5-1: config 0 descriptor?? [ 296.073653][ T6904] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.286728][ T10] usb 4-1: config 0 descriptor?? [ 296.329320][ T36] usb usb2-port1: attempt power cycle [ 296.390806][ T6902] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 296.717820][ T36] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 296.746737][ T6912] loop2: detected capacity change from 0 to 32768 [ 296.770420][ T36] usb 2-1: device descriptor read/8, error -71 [ 297.028565][ T36] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 297.125774][ T36] usb 2-1: device descriptor read/8, error -71 [ 297.235375][ T10] hid-multitouch 0003:0EEF:72D0.0002: item fetching failed at offset 1/5 [ 297.275666][ T36] usb usb2-port1: unable to enumerate USB device [ 297.367015][ T10] hid-multitouch 0003:0EEF:72D0.0002: probe with driver hid-multitouch failed with error -22 [ 297.446549][ T10] usb 4-1: USB disconnect, device number 8 [ 298.402452][ T6927] loop0: detected capacity change from 0 to 512 [ 298.434988][ T6924] FAULT_INJECTION: forcing a failure. [ 298.434988][ T6924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.448640][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.1.289 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 298.448806][ T6924] Tainted: [L]=SOFTLOCKUP [ 298.448856][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 298.448931][ T6924] Call Trace: [ 298.448980][ T6924] [ 298.449026][ T6924] __dump_stack+0x26/0x30 [ 298.449182][ T6924] dump_stack_lvl+0x14c/0x1c0 [ 298.449335][ T6924] dump_stack+0x1e/0x25 [ 298.449466][ T6924] should_fail_ex+0x7e2/0x8c0 [ 298.449637][ T6924] should_fail+0x2a/0x40 [ 298.449769][ T6924] should_fail_usercopy+0x2e/0x40 [ 298.449922][ T6924] strncpy_from_user+0x38/0x4b0 [ 298.450050][ T6924] ? kmsan_get_metadata+0xf1/0x160 [ 298.450232][ T6924] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 298.450431][ T6924] getname_flags+0x178/0xac0 [ 298.450624][ T6924] do_sys_openat2+0xaa/0x430 [ 298.450774][ T6924] __x64_sys_openat+0x240/0x300 [ 298.450930][ T6924] x64_sys_call+0x3597/0x3e70 [ 298.451091][ T6924] do_syscall_64+0xc9/0xf80 [ 298.451249][ T6924] ? clear_bhb_loop+0x40/0x90 [ 298.451387][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.451527][ T6924] RIP: 0033:0x7f355cb5b84e [ 298.451626][ T6924] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 298.451739][ T6924] RSP: 002b:00007f355dacbec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 298.451865][ T6924] RAX: ffffffffffffffda RBX: 00007f355dacc6c0 RCX: 00007f355cb5b84e [ 298.451955][ T6924] RDX: 0000000000000002 RSI: 00007f355dacbf90 RDI: ffffffffffffff9c [ 298.452035][ T6924] RBP: 00007f355dacc090 R08: 0000000000000000 R09: 0000000000000000 [ 298.452115][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.452192][ T6924] R13: 00007f355ce16038 R14: 00007f355ce15fa0 R15: 00007fff97e20a28 [ 298.452311][ T6924] [ 298.490854][ T6927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.721193][ T6927] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.835093][ T6923] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:105: comm syz.0.288: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 299.091525][ T6902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 299.146706][ T795] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 299.171211][ T6933] kvm: kvm [6932]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8166 [ 299.190003][ T795] asix 5-1:0.188: probe with driver asix failed with error -71 [ 299.261181][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.311055][ T795] usb 5-1: USB disconnect, device number 12 [ 299.498745][ T6937] netlink: 83 bytes leftover after parsing attributes in process `syz.1.292'. [ 299.686392][ T6942] loop0: detected capacity change from 0 to 128 [ 299.838084][ T795] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 300.037834][ T795] usb 3-1: Using ep0 maxpacket: 32 [ 300.088715][ T795] usb 3-1: config index 0 descriptor too short (expected 195, got 18) [ 300.097113][ T795] usb 3-1: config 3 has an invalid interface number: 136 but max is 0 [ 300.105653][ T795] usb 3-1: config 3 has no interface number 0 [ 300.174975][ T795] usb 3-1: config 3 interface 136 has no altsetting 0 [ 300.218333][ T795] usb 3-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice= 0.4b [ 300.229367][ T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.238561][ T795] usb 3-1: Product: syz [ 300.242882][ T795] usb 3-1: Manufacturer: syz [ 300.247734][ T795] usb 3-1: SerialNumber: syz [ 300.712003][ T6948] loop4: detected capacity change from 0 to 2048 [ 300.777028][ T6941] netlink: 140 bytes leftover after parsing attributes in process `syz.2.291'. [ 300.806578][ T6946] loop3: detected capacity change from 0 to 32768 [ 300.822497][ T6941] netlink: 72 bytes leftover after parsing attributes in process `syz.2.291'. [ 300.914233][ T795] ums-realtek 3-1:3.136: USB Mass Storage device detected [ 300.965543][ T6946] JBD2: Ignoring recovery information on journal [ 301.000617][ T6948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.105414][ T3492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.142758][ T6946] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 301.192282][ T795] usb 3-1: USB disconnect, device number 11 [ 301.372889][ T3492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.583798][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 301.685875][ T3492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.752861][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.827774][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 301.859484][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 301.871623][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.882102][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 301.955981][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.966939][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 301.975746][ T10] usb 4-1: SerialNumber: syz [ 302.012493][ T3492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.073205][ T6960] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 302.750801][ T3492] bridge_slave_1: left allmulticast mode [ 302.756740][ T3492] bridge_slave_1: left promiscuous mode [ 302.763892][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.824932][ T3492] bridge_slave_0: left allmulticast mode [ 302.831082][ T3492] bridge_slave_0: left promiscuous mode [ 302.838121][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.477903][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.516597][ T3492] bond0 (unregistering): Released all slaves [ 303.572191][ T6966] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.300'. [ 303.607216][ T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 303.702016][ T6967] netlink: 48 bytes leftover after parsing attributes in process `syz.4.302'. [ 303.882673][ T6967] loop6: detected capacity change from 0 to 7 [ 303.953712][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 304.074247][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.084114][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.130906][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.140907][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.152830][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.162826][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.219896][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.229743][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.248861][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.258848][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.277535][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.287590][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.297665][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.307645][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.330651][ T6967] ldm_validate_partition_table(): Disk read failed. [ 304.373630][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.383613][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.403700][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.413694][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.431158][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 304.441147][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 304.450374][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.471785][ T6968] loop0: detected capacity change from 0 to 40427 [ 304.481220][ T6968] F2FS-fs: heap/no_heap options were deprecated [ 304.499817][ T6968] F2FS-fs (loop0): build fault injection rate: 19 [ 304.506402][ T6968] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 304.506507][ T6967] Dev loop6: unable to read RDB block 0 [ 304.519622][ T10] usb 4-1: USB disconnect, device number 9 [ 304.534021][ T6968] F2FS-fs (loop0): invalid crc value [ 304.554910][ T6967] loop6: unable to read partition table [ 304.589828][ T6968] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 304.631297][ T6967] loop6: partition table beyond EOD, truncated [ 304.638439][ T6967] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 304.658616][ T36] usb 5-1: device descriptor read/64, error -71 [ 304.853218][ T6968] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 304.873144][ T6968] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 304.899264][ T6968] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 304.963782][ T36] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 305.152365][ T36] usb 5-1: device descriptor read/64, error -71 [ 305.304571][ T36] usb usb5-port1: attempt power cycle [ 305.404646][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.422509][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.435324][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.455727][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.475944][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.874800][ T36] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 305.906126][ T3492] hsr_slave_0: left promiscuous mode [ 305.931730][ T36] usb 5-1: device descriptor read/8, error -71 [ 305.958318][ T3492] hsr_slave_1: left promiscuous mode [ 305.979635][ T6986] loop2: detected capacity change from 0 to 256 [ 305.981394][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.993919][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.119383][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.127051][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.177737][ T36] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 306.236073][ T3492] veth1_macvtap: left promiscuous mode [ 306.261569][ T3492] veth0_macvtap: left promiscuous mode [ 306.269883][ T36] usb 5-1: device descriptor read/8, error -71 [ 306.286564][ T3492] veth1_vlan: left promiscuous mode [ 306.320353][ T3492] veth0_vlan: left promiscuous mode [ 306.418757][ T36] usb usb5-port1: unable to enumerate USB device [ 306.739915][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 306.990049][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.000996][ T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 307.056409][ T7002] loop3: detected capacity change from 0 to 512 [ 307.118895][ T10] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 307.128602][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.136788][ T10] usb 1-1: Product: syz [ 307.141294][ T10] usb 1-1: Manufacturer: syz [ 307.146052][ T10] usb 1-1: SerialNumber: syz [ 307.314265][ T10] usb 1-1: config 0 descriptor?? [ 307.532091][ T7002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.570523][ T5080] Bluetooth: hci4: command tx timeout [ 307.591730][ T7002] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.627128][ T6998] tmpfs: Unknown parameter 'usrquota' [ 307.635749][ T36] usb 1-1: USB disconnect, device number 5 [ 307.765360][ T6998] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:105: comm syz.3.303: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 307.983723][ T7016] netlink: 'syz.2.311': attribute type 16 has an invalid length. [ 307.992810][ T7016] netlink: 'syz.2.311': attribute type 2 has an invalid length. [ 308.000813][ T7016] netlink: 64102 bytes leftover after parsing attributes in process `syz.2.311'. [ 308.085596][ T7015] loop4: detected capacity change from 0 to 1024 [ 308.430707][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.499284][ T7021] 9p: Bad value for 'rfdno' [ 308.837934][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 309.072816][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 309.303743][ T7027] loop4: detected capacity change from 0 to 2048 [ 309.423321][ T7036] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.459646][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 309.494211][ T7027] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 309.577753][ T7027] Remounting filesystem read-only [ 309.606608][ T7038] sctp: [Deprecated]: syz.4.314 (pid 7038) Use of int in maxseg socket option. [ 309.606608][ T7038] Use struct sctp_assoc_value instead [ 309.621786][ T7039] netlink: 35 bytes leftover after parsing attributes in process `syz.0.315'. [ 309.621872][ T7039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 309.653129][ T5080] Bluetooth: hci4: command tx timeout [ 309.806632][ T7027] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 309.845251][ T7027] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 310.023529][ T7039] veth1_to_hsr: entered promiscuous mode [ 310.055227][ T7039] macvtap1: entered promiscuous mode [ 310.061809][ T7039] macvtap1: entered allmulticast mode [ 310.067654][ T7039] veth1_to_hsr: entered allmulticast mode [ 310.206750][ T7037] macvtap2: entered promiscuous mode [ 310.212397][ T7037] macvtap2: entered allmulticast mode [ 310.302243][ T7043] loop5: detected capacity change from 0 to 7 [ 310.351414][ T7043] Dev loop5: unable to read RDB block 7 [ 310.357272][ T7043] loop5: unable to read partition table [ 310.388173][ T7043] loop5: partition table beyond EOD, truncated [ 310.394761][ T7043] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 311.330423][ T36] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 311.519003][ T36] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 311.554346][ T36] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.564880][ T36] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 311.578388][ T36] usb 3-1: config 0 interface 0 has no altsetting 0 [ 311.585215][ T36] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 311.598868][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.726612][ T36] usb 3-1: config 0 descriptor?? [ 311.732053][ T5080] Bluetooth: hci4: command tx timeout [ 312.230908][ T36] hid-alps 0003:044E:120C.0003: hidraw0: USB HID v0.04 Device [HID 044e:120c] on usb-dummy_hcd.2-1/input0 [ 312.320503][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 312.372552][ T7047] loop5: detected capacity change from 0 to 7 [ 312.426912][ T7047] Dev loop5: unable to read RDB block 7 [ 312.432977][ T7047] loop5: unable to read partition table [ 312.495412][ T7047] loop5: partition table beyond EOD, truncated [ 312.502690][ T7047] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 312.583830][ T7061] orangefs_mount: mount request failed with -4 [ 312.677782][ T36] usb 3-1: USB disconnect, device number 12 [ 312.805953][ T7067] fido_id[7067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 313.795657][ T7085] loop0: detected capacity change from 0 to 512 [ 313.816932][ T5080] Bluetooth: hci4: command tx timeout [ 313.894872][ T7085] EXT4-fs: Ignoring removed nobh option [ 313.917377][ T7089] 9p: Bad value for 'rfdno' [ 313.939307][ T7076] loop4: detected capacity change from 0 to 4096 [ 314.006429][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.014636][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.031590][ T6982] bridge_slave_0: entered allmulticast mode [ 314.049832][ T7076] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 314.064342][ T6982] bridge_slave_0: entered promiscuous mode [ 314.071954][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.083909][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.092628][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.100603][ T6982] bridge_slave_1: entered allmulticast mode [ 314.109747][ T6982] bridge_slave_1: entered promiscuous mode [ 314.185110][ T7085] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.429346][ T7085] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.325: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 314.472591][ T7076] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 314.543241][ T7098] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 314.593551][ T7079] ntfs3(loop4): ino=5, "/" indx_read [ 314.606552][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.630165][ T7079] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 314.695789][ T7098] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.325: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 314.721906][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.127831][ T6982] team0: Port device team_slave_0 added [ 315.229732][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.268619][ T6982] team0: Port device team_slave_1 added [ 315.307577][ T7107] net_ratelimit: 11 callbacks suppressed [ 315.307649][ T7107] netlink: zone id is out of range [ 315.318833][ T7107] netlink: zone id is out of range [ 315.324067][ T7107] netlink: zone id is out of range [ 315.329688][ T7107] netlink: zone id is out of range [ 315.334917][ T7107] netlink: zone id is out of range [ 315.340245][ T7107] netlink: zone id is out of range [ 315.345463][ T7107] netlink: zone id is out of range [ 315.350791][ T7107] netlink: zone id is out of range [ 315.356035][ T7107] netlink: zone id is out of range [ 315.361409][ T7107] netlink: zone id is out of range [ 315.654047][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.661241][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.692513][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.956360][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.964472][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.992741][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.370174][ T7121] FAULT_INJECTION: forcing a failure. [ 316.370174][ T7121] name failslab, interval 1, probability 0, space 0, times 0 [ 316.383438][ T7121] CPU: 0 UID: 0 PID: 7121 Comm: syz.3.334 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 316.383603][ T7121] Tainted: [L]=SOFTLOCKUP [ 316.383652][ T7121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 316.383734][ T7121] Call Trace: [ 316.383785][ T7121] [ 316.383831][ T7121] __dump_stack+0x26/0x30 [ 316.383989][ T7121] dump_stack_lvl+0x14c/0x1c0 [ 316.384150][ T7121] dump_stack+0x1e/0x25 [ 316.384287][ T7121] should_fail_ex+0x7e2/0x8c0 [ 316.384457][ T7121] should_failslab+0x158/0x200 [ 316.384590][ T7121] kmem_cache_alloc_noprof+0x14f/0x1730 [ 316.384724][ T7121] ? alloc_empty_file+0x116/0x920 [ 316.384874][ T7121] ? kmsan_get_metadata+0xf1/0x160 [ 316.385054][ T7121] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.385248][ T7121] alloc_empty_file+0x116/0x920 [ 316.385392][ T7121] path_openat+0x9a/0x7160 [ 316.385532][ T7121] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.385725][ T7121] ? kmsan_get_metadata+0xf1/0x160 [ 316.385911][ T7121] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 316.386097][ T7121] ? kernel_tmpfile_open+0x141/0x190 [ 316.386243][ T7121] ? filter_irq_stacks+0x49/0x190 [ 316.386394][ T7121] ? stack_depot_save_flags+0x35/0x790 [ 316.386531][ T7121] ? kmsan_get_metadata+0xf1/0x160 [ 316.386707][ T7121] ? kmsan_get_metadata+0xf1/0x160 [ 316.386886][ T7121] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 316.387057][ T7121] ? kmsan_get_metadata+0xf1/0x160 [ 316.387246][ T7121] do_filp_open+0x27f/0x660 [ 316.387470][ T7121] do_sys_openat2+0x1c6/0x430 [ 316.387621][ T7121] __x64_sys_openat+0x240/0x300 [ 316.387777][ T7121] x64_sys_call+0x3597/0x3e70 [ 316.387943][ T7121] do_syscall_64+0xc9/0xf80 [ 316.388095][ T7121] ? clear_bhb_loop+0x40/0x90 [ 316.388234][ T7121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.388380][ T7121] RIP: 0033:0x7ff25b35b84e [ 316.388476][ T7121] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 316.388588][ T7121] RSP: 002b:00007ff25c172ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 316.388710][ T7121] RAX: ffffffffffffffda RBX: 00007ff25c1736c0 RCX: 00007ff25b35b84e [ 316.388806][ T7121] RDX: 0000000000000002 RSI: 00007ff25c172f90 RDI: ffffffffffffff9c [ 316.388900][ T7121] RBP: 00007ff25c173090 R08: 0000000000000000 R09: 0000000000000000 [ 316.388982][ T7121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.389062][ T7121] R13: 00007ff25b616128 R14: 00007ff25b616090 R15: 00007ffc008a94f8 [ 316.389188][ T7121] [ 316.660620][ T7118] orangefs_mount: mount request failed with -4 [ 316.694760][ T7112] loop4: detected capacity change from 0 to 32768 [ 316.923099][ T6982] hsr_slave_0: entered promiscuous mode [ 316.932731][ T6982] hsr_slave_1: entered promiscuous mode [ 316.942502][ T6982] debugfs: 'hsr0' already exists in 'hsr' [ 316.948553][ T6982] Cannot create hsr debugfs directory [ 316.961332][ T7112] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 317.078119][ T7131] netlink: 32 bytes leftover after parsing attributes in process `syz.0.335'. [ 317.174901][ T7135] loop0: detected capacity change from 0 to 128 [ 317.263149][ T7112] XFS (loop4): Ending clean mount [ 317.279029][ T7112] XFS (loop4): Quotacheck needed: Please wait. [ 317.361012][ T7135] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.497051][ T7135] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.780032][ T7135] overlayfs: failed to resolve './file2': -2 [ 318.104487][ T7141] loop2: detected capacity change from 0 to 32768 [ 318.133807][ T7112] XFS (loop4): Quotacheck: Done. [ 318.489781][ T36] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 318.687734][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 318.734643][ T36] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 318.743238][ T36] usb 5-1: config 0 has no interface number 0 [ 318.827692][ T36] usb 5-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0x7A, changing to 0xA [ 318.839852][ T36] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xA has an invalid bInterval 70, changing to 10 [ 318.851373][ T36] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 319.025186][ T36] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 319.034618][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.043108][ T36] usb 5-1: Product: syz [ 319.047596][ T36] usb 5-1: Manufacturer: syz [ 319.052363][ T36] usb 5-1: SerialNumber: syz [ 319.060657][ T7144] loop3: detected capacity change from 0 to 32768 [ 319.111734][ T5785] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.350250][ T36] usb 5-1: config 0 descriptor?? [ 319.661685][ T36] usb 5-1: can't set config #0, error -71 [ 319.742504][ T36] usb 5-1: USB disconnect, device number 17 [ 319.956750][ T5795] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 321.176172][ T6982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.349096][ T6982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.499776][ T6982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.659134][ T6982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.921685][ T7172] orangefs_mount: mount request failed with -4 [ 322.017004][ T7183] loop3: detected capacity change from 0 to 16 [ 322.120800][ T7183] erofs: Unknown parameter 'nouser_8attr' [ 322.529239][ T7186] loop2: detected capacity change from 0 to 128 [ 322.599193][ T7186] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 322.681143][ T7186] hpfs: filesystem error: improperly stopped [ 322.687378][ T7186] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 322.699082][ T7186] hpfs: You really don't want any checks? You are crazy... [ 322.708372][ T7189] net_ratelimit: 11 callbacks suppressed [ 322.708443][ T7189] netlink: zone id is out of range [ 322.719830][ T7189] netlink: zone id is out of range [ 322.725059][ T7189] netlink: zone id is out of range [ 322.730396][ T7189] netlink: zone id is out of range [ 322.735619][ T7189] netlink: zone id is out of range [ 322.740922][ T7189] netlink: zone id is out of range [ 322.746141][ T7189] netlink: zone id is out of range [ 322.756322][ T7189] netlink: zone id is out of range [ 322.763155][ T7189] netlink: zone id is out of range [ 322.768511][ T7189] netlink: zone id is out of range [ 322.818320][ T7186] hpfs: hpfs_map_sector(): read error [ 322.823854][ T7186] hpfs: code page support is disabled [ 322.878644][ T7186] hpfs: hpfs_map_4sectors(): unaligned read [ 322.884894][ T7186] hpfs: hpfs_map_4sectors(): unaligned read [ 322.891169][ T7186] hpfs: filesystem error: unable to find root dir [ 323.405169][ T7191] loop0: detected capacity change from 0 to 32768 [ 323.758982][ T7202] loop2: detected capacity change from 0 to 128 [ 323.793847][ T7202] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 323.899283][ T7205] netlink: 56 bytes leftover after parsing attributes in process `syz.4.351'. [ 324.146487][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.551025][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.706241][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.713818][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.842828][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.850368][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.024510][ T7214] sctp: [Deprecated]: syz.2.355 (pid 7214) Use of struct sctp_assoc_value in delayed_ack socket option. [ 325.024510][ T7214] Use struct sctp_sack_info instead [ 325.029438][ T7212] loop4: detected capacity change from 0 to 2048 [ 325.147289][ T7214] binder: 7213:7214 ioctl c038943b 200000000180 returned -22 [ 325.174141][ T7212] UDF-fs: warning (device loop4): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 325.186820][ T7212] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 325.304596][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 325.319648][ T7214] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 325.500420][ T7214] binder: 7213:7214 ioctl c00c620f 200000000040 returned -22 [ 326.880810][ T7240] loop0: detected capacity change from 0 to 128 [ 326.942353][ T7240] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 327.018054][ T795] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 327.063038][ T7240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.212814][ T795] usb 3-1: Using ep0 maxpacket: 16 [ 327.250962][ T795] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 327.261955][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.349430][ T795] usb 3-1: config 0 descriptor?? [ 327.922908][ T795] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0 [ 327.930265][ T795] saitek 0003:06A3:0CCD.0004: unknown main item tag 0x0 [ 327.937640][ T795] saitek 0003:06A3:0CCD.0004: item fetching failed at offset 4/5 [ 328.037549][ T7245] loop4: detected capacity change from 0 to 32768 [ 328.126078][ T7248] loop3: detected capacity change from 0 to 1024 [ 328.158861][ T795] saitek 0003:06A3:0CCD.0004: parse failed [ 328.174192][ T795] saitek 0003:06A3:0CCD.0004: probe with driver saitek failed with error -22 [ 328.310099][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.323927][ T795] usb 3-1: USB disconnect, device number 13 [ 328.411344][ T7248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.543231][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.234969][ T7271] loop5: detected capacity change from 0 to 7 [ 330.268046][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 330.275242][ T7271] loop5: [POWERTEC] p1 p2 p3 p4 p5 [ 330.277055][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 330.338333][ T7271] loop5: p1 start 1769107558 is beyond EOD, truncated [ 330.345431][ T7271] loop5: p2 size 20971520 extends beyond EOD, truncated [ 330.481718][ T7271] loop5: p3 start 3190190390 is beyond EOD, truncated [ 330.489237][ T7271] loop5: p4 start 4009231647 is beyond EOD, truncated [ 330.496206][ T7271] loop5: p5 start 3512340812 is beyond EOD, truncated [ 330.742653][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 330.752009][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 330.767008][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.825823][ T1333] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.887110][ T7283] loop2: detected capacity change from 0 to 164 [ 330.918706][ T3481] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.934748][ T3481] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.012239][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 331.220509][ T7277] fuse: Bad value for 'group_id' [ 331.225656][ T7277] fuse: Bad value for 'group_id' [ 332.667243][ T6982] veth0_vlan: entered promiscuous mode [ 333.042965][ T6982] veth1_vlan: entered promiscuous mode [ 333.082249][ T7291] loop4: detected capacity change from 0 to 65536 [ 333.302993][ T7291] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 333.423361][ T7305] loop3: detected capacity change from 0 to 512 [ 333.539427][ T7305] EXT4-fs: Ignoring removed nobh option [ 333.616079][ T7291] XFS (loop4): Ending clean mount [ 333.626757][ T7291] XFS (loop4): Quotacheck needed: Please wait. [ 333.826299][ T7291] XFS (loop4): Quotacheck: Done. [ 333.866900][ T6982] veth0_macvtap: entered promiscuous mode [ 333.882901][ T7305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.984924][ T7299] loop0: detected capacity change from 0 to 32768 [ 333.985469][ T7296] loop2: detected capacity change from 0 to 4096 [ 334.023283][ T7305] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 334.037279][ T7299] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 334.046357][ T7299] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 334.131797][ T7299] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 334.143173][ T6982] veth1_macvtap: entered promiscuous mode [ 334.150489][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 334.150664][ T7296] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 334.157756][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 334.225302][ T7305] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.375: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 334.407728][ T7305] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.375: iget: bad i_size value: 2533274857506816 [ 334.449653][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.598064][ T5795] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 334.614865][ T7296] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 334.681155][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.728394][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 570ms [ 334.788576][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 334.794157][ T7299] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 335.008208][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.079859][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.101863][ T1072] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.168510][ T1072] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.179547][ T36] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 335.268119][ T54] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.326763][ T7299] gfs2: fsid=syz:syz.0: found 1 quota changes [ 335.402918][ T36] usb 3-1: Using ep0 maxpacket: 32 [ 335.440777][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 335.501559][ T36] usb 3-1: config 7 has an invalid interface number: 187 but max is 0 [ 335.515052][ T36] usb 3-1: config 7 has no interface number 0 [ 335.530427][ T7322] loop4: detected capacity change from 0 to 1024 [ 335.571643][ T36] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.581955][ T36] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 335.592113][ T36] usb 3-1: config 7 interface 187 has no altsetting 0 [ 335.695991][ T36] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 335.706210][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.714577][ T36] usb 3-1: Product: syz [ 335.719035][ T36] usb 3-1: Manufacturer: syz [ 335.723786][ T36] usb 3-1: SerialNumber: syz [ 335.937280][ T7322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.306114][ T7332] FAULT_INJECTION: forcing a failure. [ 336.306114][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 336.319488][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.3.377 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 336.319648][ T7332] Tainted: [L]=SOFTLOCKUP [ 336.319699][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 336.319774][ T7332] Call Trace: [ 336.319820][ T7332] [ 336.319870][ T7332] __dump_stack+0x26/0x30 [ 336.320023][ T7332] dump_stack_lvl+0x14c/0x1c0 [ 336.320172][ T7332] dump_stack+0x1e/0x25 [ 336.320309][ T7332] should_fail_ex+0x7e2/0x8c0 [ 336.320482][ T7332] should_failslab+0x158/0x200 [ 336.320616][ T7332] kmem_cache_alloc_noprof+0x14f/0x1730 [ 336.320750][ T7332] ? kmsan_get_metadata+0xf1/0x160 [ 336.320920][ T7332] ? security_inode_alloc+0x85/0x6c0 [ 336.321068][ T7332] ? kmsan_get_metadata+0xf1/0x160 [ 336.321244][ T7332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 336.321431][ T7332] ? kmsan_get_metadata+0xf1/0x160 [ 336.321608][ T7332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 336.321798][ T7332] security_inode_alloc+0x85/0x6c0 [ 336.321957][ T7332] inode_init_always_gfp+0x755/0x890 [ 336.322145][ T7332] alloc_inode+0x129/0x4a0 [ 336.322306][ T7332] new_inode+0x38/0x460 [ 336.322473][ T7332] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 336.322649][ T7332] shmem_get_inode+0x660/0x1c20 [ 336.322813][ T7332] __shmem_file_setup+0x20f/0x590 [ 336.322954][ T7332] shmem_file_setup+0x61/0x80 [ 336.323081][ T7332] memfd_alloc_file+0x8c/0x980 [ 336.323232][ T7332] __se_sys_memfd_create+0x858/0xb10 [ 336.323375][ T7332] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 336.323577][ T7332] __x64_sys_memfd_create+0x78/0xb0 [ 336.323726][ T7332] x64_sys_call+0x319b/0x3e70 [ 336.323891][ T7332] do_syscall_64+0xc9/0xf80 [ 336.324042][ T7332] ? clear_bhb_loop+0x40/0x90 [ 336.324179][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.324313][ T7332] RIP: 0033:0x7ff25b39af79 [ 336.324409][ T7332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.324523][ T7332] RSP: 002b:00007ff25c193e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 336.324644][ T7332] RAX: ffffffffffffffda RBX: 000000000000057d RCX: 00007ff25b39af79 [ 336.324731][ T7332] RDX: 00007ff25c193ee0 RSI: 0000000000000000 RDI: 00007ff25b4318dd [ 336.324816][ T7332] RBP: 0000200000002e80 R08: 00000000ffffffff R09: 0000000000000000 [ 336.324898][ T7332] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000c80 [ 336.324978][ T7332] R13: 00007ff25c193ee0 R14: 00007ff25c193ea0 R15: 0000200000000580 [ 336.325101][ T7332] [ 336.596567][ T36] usb 3-1: can't set config #7, error -71 [ 336.622137][ T36] usb 3-1: USB disconnect, device number 14 [ 337.350593][ T7336] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20004 [ 337.535710][ T5795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.635889][ T7336] loop2: detected capacity change from 0 to 4096 [ 337.679920][ T7336] ntfs3: Unknown parameter ':' [ 338.399914][ T5785] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 338.414976][ T5785] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 338.429020][ T5785] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5785 [syz-executor] gfs2_quota_sync+0x68e/0xb00 [ 338.440540][ T5785] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 338.451089][ T5785] CPU: 1 UID: 0 PID: 5785 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 338.451252][ T5785] Tainted: [L]=SOFTLOCKUP [ 338.451303][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 338.451378][ T5785] Call Trace: [ 338.451426][ T5785] [ 338.451471][ T5785] __dump_stack+0x26/0x30 [ 338.451624][ T5785] dump_stack_lvl+0x14c/0x1c0 [ 338.451774][ T5785] dump_stack+0x1e/0x25 [ 338.451909][ T5785] gfs2_withdraw+0xd5/0x270 [ 338.452054][ T5785] gfs2_consist_inode_i+0x1a9/0x240 [ 338.452202][ T5785] inode_go_instantiate+0x13bf/0x1ea0 [ 338.452374][ T5785] ? __pfx_inode_go_instantiate+0x10/0x10 [ 338.452501][ T5785] gfs2_instantiate+0x24f/0x4b0 [ 338.452654][ T5785] gfs2_glock_wait+0x26a/0x3b0 [ 338.452804][ T5785] gfs2_glock_nq+0x152f/0x2c80 [ 338.452941][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 338.453134][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 338.453344][ T5785] do_sync+0x6c4/0x1610 [ 338.453501][ T5785] ? gfs2_quota_sync+0x68e/0xb00 [ 338.453697][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 338.453866][ T5785] ? gfs2_quota_sync+0x68e/0xb00 [ 338.454059][ T5785] gfs2_quota_sync+0x68e/0xb00 [ 338.454242][ T5785] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 338.454435][ T5785] gfs2_sync_fs+0x57/0x100 [ 338.454574][ T5785] ? __pfx_gfs2_sync_fs+0x10/0x10 [ 338.454722][ T5785] sync_filesystem+0x131/0x3c0 [ 338.454887][ T5785] ? shrink_dcache_for_umount+0xf9/0x210 [ 338.455025][ T5785] generic_shutdown_super+0x8d/0x4b0 [ 338.455188][ T5785] kill_block_super+0x42/0xd0 [ 338.455346][ T5785] gfs2_kill_sb+0x4a9/0x580 [ 338.455488][ T5785] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 338.455619][ T5785] deactivate_locked_super+0xcb/0x3c0 [ 338.455775][ T5785] deactivate_super+0x12f/0x140 [ 338.455917][ T5785] cleanup_mnt+0x7eb/0x870 [ 338.456057][ T5785] ? __pfx___cleanup_mnt+0x10/0x10 [ 338.456178][ T5785] __cleanup_mnt+0x22/0x30 [ 338.456295][ T5785] task_work_run+0x208/0x2b0 [ 338.456453][ T5785] exit_to_user_mode_loop+0x2ff/0x1b10 [ 338.456611][ T5785] ? user_path_at+0x241/0x3e0 [ 338.456761][ T5785] ? __x64_sys_umount+0x1dc/0x250 [ 338.456925][ T5785] do_syscall_64+0x1d7/0xf80 [ 338.457084][ T5785] ? clear_bhb_loop+0x40/0x90 [ 338.457226][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.457360][ T5785] RIP: 0033:0x7fcd2239c1d7 [ 338.457463][ T5785] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 338.457570][ T5785] RSP: 002b:00007ffd16de1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 338.457684][ T5785] RAX: 0000000000000000 RBX: 00007fcd22430b3b RCX: 00007fcd2239c1d7 [ 338.457767][ T5785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd16de10e0 [ 338.457844][ T5785] RBP: 00007ffd16de10e0 R08: 00007ffd16de20e0 R09: 00000000ffffffff [ 338.457927][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd16de2170 [ 338.458007][ T5785] R13: 00007fcd22430b3b R14: 0000000000052422 R15: 00007ffd16de21b0 [ 338.458135][ T5785] [ 338.760751][ T5785] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 339.177667][ T7355] loop4: detected capacity change from 0 to 256 [ 339.431828][ T7355] loop4: detected capacity change from 0 to 2048 [ 339.612348][ T5966] Alternate GPT is invalid, using primary GPT. [ 339.619950][ T5966] loop4: p2 p3 p7 [ 339.846307][ T7355] Alternate GPT is invalid, using primary GPT. [ 339.858768][ T7355] loop4: p2 p3 p7 [ 339.876637][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 340.820764][ T7369] loop4: detected capacity change from 0 to 1024 [ 340.869401][ T7369] EXT4-fs: Ignoring removed bh option [ 340.935286][ T7369] EXT4-fs: Mount option(s) incompatible with ext3 [ 341.223757][ T7372] loop2: detected capacity change from 0 to 40427 [ 341.258421][ T7372] F2FS-fs (loop2): invalid crc value [ 341.823730][ T7372] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 342.217827][ T7372] F2FS-fs (loop2): Start checkpoint disabled! [ 342.291091][ T7380] loop3: detected capacity change from 0 to 40427 [ 342.330196][ T7380] F2FS-fs (loop3): invalid crc value [ 342.338402][ T7372] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 342.347895][ T7372] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 342.612695][ T7380] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 342.629704][ T7380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 342.711109][ T7380] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 342.853860][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.862016][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.303353][ T1072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.311533][ T1072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.322522][ T6631] udevd[6631]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 343.362191][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 343.374653][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 343.776331][ T6175] udevd[6175]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 343.792902][ T6631] udevd[6631]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 343.918179][ T5966] udevd[5966]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 344.088003][ T5785] gfs2: fsid=syz:syz.0: warning: assertion "gfs2_log_is_empty(sdp)" failed - function = gfs2_make_fs_ro, file = fs/gfs2/super.c, line = 564 [ 344.102946][ T5785] CPU: 1 UID: 0 PID: 5785 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 344.103109][ T5785] Tainted: [L]=SOFTLOCKUP [ 344.103159][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 344.103236][ T5785] Call Trace: [ 344.103281][ T5785] [ 344.103326][ T5785] __dump_stack+0x26/0x30 [ 344.103483][ T5785] dump_stack_lvl+0x14c/0x1c0 [ 344.103643][ T5785] dump_stack+0x1e/0x25 [ 344.103783][ T5785] gfs2_assert_warn_i+0x2d8/0x470 [ 344.103940][ T5785] gfs2_make_fs_ro+0x4f9/0x500 [ 344.104082][ T5785] ? __pfx_autoremove_wake_function+0x10/0x10 [ 344.104282][ T5785] gfs2_put_super+0x3bc/0x1090 [ 344.104439][ T5785] ? kmsan_get_metadata+0xf1/0x160 [ 344.104617][ T5785] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 344.104810][ T5785] ? __pfx_gfs2_put_super+0x10/0x10 [ 344.104957][ T5785] generic_shutdown_super+0x1b0/0x4b0 [ 344.105112][ T5785] kill_block_super+0x42/0xd0 [ 344.105271][ T5785] gfs2_kill_sb+0x4a9/0x580 [ 344.105418][ T5785] ? __pfx_gfs2_kill_sb+0x10/0x10 [ 344.105541][ T5785] deactivate_locked_super+0xcb/0x3c0 [ 344.105746][ T5785] deactivate_super+0x12f/0x140 [ 344.105889][ T5785] cleanup_mnt+0x7eb/0x870 [ 344.106019][ T5785] ? __pfx___cleanup_mnt+0x10/0x10 [ 344.106143][ T5785] __cleanup_mnt+0x22/0x30 [ 344.106259][ T5785] task_work_run+0x208/0x2b0 [ 344.106413][ T5785] exit_to_user_mode_loop+0x2ff/0x1b10 [ 344.106572][ T5785] ? user_path_at+0x241/0x3e0 [ 344.106725][ T5785] ? __x64_sys_umount+0x1dc/0x250 [ 344.106886][ T5785] do_syscall_64+0x1d7/0xf80 [ 344.107038][ T5785] ? clear_bhb_loop+0x40/0x90 [ 344.107175][ T5785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.107312][ T5785] RIP: 0033:0x7fcd2239c1d7 [ 344.107415][ T5785] Code: a2 c7 05 bc c3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 344.107524][ T5785] RSP: 002b:00007ffd16de1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 344.107650][ T5785] RAX: 0000000000000000 RBX: 00007fcd22430b3b RCX: 00007fcd2239c1d7 [ 344.107738][ T5785] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd16de10e0 [ 344.107818][ T5785] RBP: 00007ffd16de10e0 R08: 00007ffd16de20e0 R09: 00000000ffffffff [ 344.107908][ T5785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd16de2170 [ 344.107990][ T5785] R13: 00007fcd22430b3b R14: 0000000000052422 R15: 00007ffd16de21b0 [ 344.108111][ T5785] [ 344.347939][ T7394] loop2: detected capacity change from 0 to 32768 [ 344.679406][ T7394] (syz.2.391,7394,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 344.747381][ T7394] (syz.2.391,7394,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 344.840306][ T7408] tipc: Failed to remove unknown binding: 66,0,0/0:968542983/968542984 [ 344.951487][ T7408] tipc: Failed to remove unknown binding: 66,0,0/0:968542983/968542984 [ 346.981253][ T7427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.398'. [ 347.038390][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.398'. [ 347.400920][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.408189][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.924826][ T7435] loop2: detected capacity change from 0 to 32768 [ 348.018146][ T7435] JBD2: Ignoring recovery information on journal [ 348.122260][ T7435] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 348.201068][ T7435] overlayfs: upper fs does not support tmpfile. [ 348.209718][ T7435] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 348.218940][ T7435] overlayfs: upper fs missing required features. [ 348.220170][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 348.432519][ T5792] ocfs2: Unmounting device (7,2) on (node local) [ 348.519325][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.530320][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 348.614436][ T30] audit: type=1800 audit(1770677876.982:125): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.404" name="file1" dev="tmpfs" ino=459 res=0 errno=0 [ 348.652229][ T10] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 348.664270][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.673654][ T10] usb 6-1: Product: syz [ 348.678198][ T10] usb 6-1: Manufacturer: syz [ 348.682960][ T10] usb 6-1: SerialNumber: syz [ 348.741203][ T30] audit: type=1326 audit(1770677877.102:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 348.767266][ T30] audit: type=1326 audit(1770677877.102:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 348.792535][ T30] audit: type=1326 audit(1770677877.122:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 348.800619][ T7452] netlink: 14 bytes leftover after parsing attributes in process `syz.3.403'. [ 348.815363][ T30] audit: type=1326 audit(1770677877.122:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 348.886370][ T10] usb 6-1: config 0 descriptor?? [ 349.090749][ T30] audit: type=1326 audit(1770677877.202:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 349.113719][ T30] audit: type=1326 audit(1770677877.242:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 349.136583][ T30] audit: type=1326 audit(1770677877.242:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 349.159260][ T30] audit: type=1326 audit(1770677877.242:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 349.184810][ T30] audit: type=1326 audit(1770677877.252:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7447 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f207519af79 code=0x7ffc0000 [ 349.233611][ T36] usb 6-1: USB disconnect, device number 2 [ 349.857943][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 350.071856][ T10] usb 1-1: too many configurations: 102, using maximum allowed: 8 [ 350.114249][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.168049][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.273808][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.326294][ T7474] netlink: 200 bytes leftover after parsing attributes in process `syz.3.410'. [ 350.351925][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.424798][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.457961][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.534924][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.568516][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.674381][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.741801][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.821290][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.854386][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.921810][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.947234][ T7483] overlay: ./bus is not a directory [ 350.987927][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 351.075864][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.111803][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 351.206610][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.216068][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 351.227932][ T10] usb 1-1: SerialNumber: syz [ 351.331758][ T1072] Bluetooth: hci5: Frame reassembly failed (-84) [ 351.353642][ T10] usb 1-1: bad CDC descriptors [ 351.575462][ T7463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.651470][ T7463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.788204][ T7463] loop0: detected capacity change from 0 to 128 [ 351.823679][ T7493] loop5: detected capacity change from 0 to 512 [ 351.849937][ T7463] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 351.900401][ T7493] EXT4-fs: Ignoring removed nobh option [ 351.906664][ T7463] hpfs: filesystem error: improperly stopped [ 351.914240][ T7463] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 351.922756][ T7463] hpfs: You really don't want any checks? You are crazy... [ 352.025217][ T7463] hpfs: hpfs_map_sector(): read error [ 352.033859][ T7463] hpfs: code page support is disabled [ 352.143462][ T7463] hpfs: hpfs_map_4sectors(): unaligned read [ 352.171634][ T7463] hpfs: hpfs_map_4sectors(): unaligned read [ 352.177777][ T7463] hpfs: filesystem error: unable to find root dir [ 352.539897][ T7493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.624603][ T7496] loop3: detected capacity change from 0 to 32768 [ 352.643738][ T36] usb 1-1: USB disconnect, device number 6 [ 352.666564][ T7493] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 352.797937][ T7493] ===================================================== [ 352.805110][ T7493] BUG: KMSAN: uninit-value in dvb_demux_read+0x580/0xa40 [ 352.812564][ T7493] dvb_demux_read+0x580/0xa40 [ 352.817556][ T7493] vfs_readv+0x931/0xf30 [ 352.821926][ T7493] __x64_sys_preadv+0x2a3/0x510 [ 352.826951][ T7493] x64_sys_call+0x3033/0x3e70 [ 352.832294][ T7493] do_syscall_64+0xc9/0xf80 [ 352.836969][ T7493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.843340][ T7493] [ 352.845827][ T7493] Uninit was created at: [ 352.850740][ T7493] __alloc_frozen_pages_noprof+0x6df/0xf50 [ 352.861976][ T7493] alloc_pages_mpol+0x328/0x860 [ 352.867042][ T7493] alloc_pages_noprof+0x101/0x280 [ 352.873460][ T7493] __vmalloc_node_range_noprof+0xa97/0x2d80 [ 352.879654][ T7493] __vmalloc_noprof+0x128/0x1f0 [ 352.884655][ T7493] vmalloc_array_noprof+0x48/0x80 [ 352.890132][ T7493] dvb_dmxdev_init+0xd8/0x680 [ 352.895002][ T7493] vidtv_bridge_probe+0x1bfd/0x2690 [ 352.900563][ T7493] platform_probe+0x213/0x370 [ 352.905407][ T7493] really_probe+0x4d5/0xe40 [ 352.911491][ T7493] __driver_probe_device+0x25e/0x370 [ 352.916960][ T7493] driver_probe_device+0x70/0x8f0 [ 352.922345][ T7493] __driver_attach+0x53e/0xaa0 [ 352.927278][ T7493] bus_for_each_dev+0x33b/0x580 [ 352.932442][ T7493] driver_attach+0x51/0x70 [ 352.933719][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.415'. [ 352.937001][ T7493] bus_add_driver+0x54f/0xdb0 [ 352.937116][ T7493] driver_register+0x42e/0x6a0 [ 352.937261][ T7493] __platform_driver_register+0x65/0x80 [ 352.963818][ T7493] vidtv_bridge_init+0x73/0x100 [ 352.969947][ T7493] do_one_initcall+0x22b/0xad0 [ 352.974892][ T7493] do_initcall_level+0x157/0x2e0 [ 352.980277][ T7493] do_initcalls+0x176/0x310 [ 352.984946][ T7493] do_basic_setup+0x1d/0x30 [ 352.989750][ T7493] kernel_init_freeable+0x213/0x430 [ 352.995121][ T7493] kernel_init+0x2f/0x5e0 [ 352.999816][ T7493] ret_from_fork+0x207/0x6f0 [ 353.004687][ T7493] ret_from_fork_asm+0x1a/0x30 [ 353.009787][ T7493] [ 353.012210][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.5.415 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 353.023941][ T7493] Tainted: [L]=SOFTLOCKUP [ 353.028495][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 353.038876][ T7493] ===================================================== [ 353.045895][ T7493] Disabling lock debugging due to kernel taint [ 353.052345][ T7493] Kernel panic - not syncing: kmsan.panic set ... [ 353.058879][ T7493] CPU: 0 UID: 0 PID: 7493 Comm: syz.5.415 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 353.070277][ T7493] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 353.075916][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 353.086089][ T7493] Call Trace: [ 353.089460][ T7493] [ 353.092478][ T7493] __dump_stack+0x26/0x30 [ 353.096980][ T7493] dump_stack_lvl+0x50/0x1c0 [ 353.101749][ T7493] ? dump_stack+0x12/0x25 [ 353.106248][ T7493] dump_stack+0x1e/0x25 [ 353.110562][ T7493] vpanic+0x435/0xd40 [ 353.114734][ T7493] panic+0x15d/0x160 [ 353.118846][ T7493] kmsan_report+0x31a/0x320 [ 353.123568][ T7493] ? __msan_warning+0x1b/0x30 [ 353.128421][ T7493] ? dvb_demux_read+0x580/0xa40 [ 353.133418][ T7493] ? vfs_readv+0x931/0xf30 [ 353.137968][ T7493] ? __x64_sys_preadv+0x2a3/0x510 [ 353.143179][ T7493] ? x64_sys_call+0x3033/0x3e70 [ 353.148213][ T7493] ? do_syscall_64+0xc9/0xf80 [ 353.153059][ T7493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.159282][ T7493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.165310][ T7493] ? __rcu_read_unlock+0x6c/0xd0 [ 353.170412][ T7493] ? aa_file_perm+0x417/0x27c0 [ 353.175342][ T7493] ? aa_file_perm+0x532/0x27c0 [ 353.180269][ T7493] ? stack_depot_save_flags+0x35/0x790 [ 353.185884][ T7493] ? kmsan_get_metadata+0xf1/0x160 [ 353.191211][ T7493] ? kmsan_get_metadata+0xf1/0x160 [ 353.196530][ T7493] ? kmsan_get_metadata+0xf1/0x160 [ 353.201845][ T7493] ? kmsan_get_metadata+0x146/0x160 [ 353.207249][ T7493] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 353.213769][ T7493] ? __pfx_dvb_demux_read+0x10/0x10 [ 353.219132][ T7493] ? kmsan_get_metadata+0x146/0x160 [ 353.224547][ T7493] __msan_warning+0x1b/0x30 [ 353.229226][ T7493] dvb_demux_read+0x580/0xa40 [ 353.234082][ T7493] ? __pfx_dvb_demux_read+0x10/0x10 [ 353.239445][ T7493] vfs_readv+0x931/0xf30 [ 353.243869][ T7493] ? kmsan_get_metadata+0xf1/0x160 [ 353.249184][ T7493] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 353.255211][ T7493] __x64_sys_preadv+0x2a3/0x510 [ 353.260262][ T7493] x64_sys_call+0x3033/0x3e70 [ 353.265125][ T7493] do_syscall_64+0xc9/0xf80 [ 353.269790][ T7493] ? clear_bhb_loop+0x40/0x90 [ 353.274608][ T7493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.280639][ T7493] RIP: 0033:0x7f9f20d9af79 [ 353.285147][ T7493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.304887][ T7493] RSP: 002b:00007f9f21bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 353.313445][ T7493] RAX: ffffffffffffffda RBX: 00007f9f21015fa0 RCX: 00007f9f20d9af79 [ 353.321524][ T7493] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000005 [ 353.329590][ T7493] RBP: 00007f9f20e316e0 R08: 000000000000000d R09: 0000000000000000 [ 353.337750][ T7493] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 353.345813][ T7493] R13: 00007f9f21016038 R14: 00007f9f21015fa0 R15: 00007ffe26094458 [ 353.353929][ T7493] [ 353.357410][ T7493] Kernel Offset: disabled [ 353.361791][ T7493] Rebooting in 86400 seconds..