last executing test programs: 11m1.77727045s ago: executing program 3 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)={0x14, 0x1e, 0x301, 0x20000002, 0x0, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x3d, 0x20, 0x70bd25, 0x25dfdbff, {0xa}, [@typed={0x4, 0x16b}, @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40030}, 0x80c4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'lo\x00', 0x2}, 0x18) 11m0.264499753s ago: executing program 3 (id=30): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback, 0xdbb}, 0x1c) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 10m57.512687866s ago: executing program 3 (id=36): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @private2, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000c000000aa0000000000000018000000000000008400000001000100000000000000000000000000001501000000000000"], 0x40}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f00000001c0)={0x30000000, 0x8, '\x00', 0x1, &(0x7f0000000180)=[0x0]}) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001900010000000000000000008020000000110005000000000c0009"], 0x30}}, 0x0) (async) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, &(0x7f0000000440)=0x10) (async) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000240)={0x2d75}) 10m56.910294285s ago: executing program 3 (id=38): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/mapper/control', 0x13) lseek(r0, 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x92}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) setpriority(0x1, r2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BLKRAGET(r5, 0x1263, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) stat(&(0x7f0000009000)='./file0\x00', &(0x7f0000009040)) r6 = openat(r1, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents64(r6, &(0x7f0000000000)=""/256, 0x100) read(r0, &(0x7f0000000100), 0x14) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r7, 0xc138fd00, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") mount$fuseblk(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x0, 0x1840, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 10m55.087551637s ago: executing program 3 (id=41): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="726f6f746469723d30303030303030303030303030303030303030362c616e63686f723d30303030303030303030303030303030303132372c7569643d666f726765742c616e63686f723d30303030303030303030303030303030303030332c766f6c756d653d30303030303030303030303030303030313032332c757466382c6e6f6164696e6963622c6c617374626c6f636b3d30303030303030303030303030303030303030322c696f636861727365743d6d616363656c7469632c00de94bafa4af612c980e4d9302173ef495bdcd64890c1a24a8760a5d06fe5659a20bcc3796dbc0ed5e2b53ef0dc06e9bda18c2dfcb0afc57ba9f310f47226bb68fb13776ae17723504afe498a7656f07942e66415e914ac0a3218733df64ce877413393073ea8f0f2b8548c4c650da79e982a816930cfe7dac991323e187105f29fde1b773fc15fa6f653d2540eac44176341d52fb605b4a6b33e8f8c59caf8ed4ce0d4e0bf34e995733863772208028d14"], 0xff, 0xc34, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x327461, 0x0, 0xfd, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x820, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x3, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chdir(&(0x7f0000000280)='./bus\x00') 10m52.142874986s ago: executing program 3 (id=47): unshare(0x40200) r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x10}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2500, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x0, 0x4a, 0x5, 0x0, r2, 0x7, '\x00', r3, r4, 0x3}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r7}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000400001"], 0x54}}, 0x0) 10m51.291838556s ago: executing program 32 (id=47): unshare(0x40200) r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000280)=[0x6, 0x7fff]) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x10}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_debug_messages', 0x2500, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x0, 0x4a, 0x5, 0x0, r2, 0x7, '\x00', r3, r4, 0x3}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r7}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000400001"], 0x54}}, 0x0) 38.391401815s ago: executing program 0 (id=1892): pipe(&(0x7f0000000440)={0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x101000) fanotify_mark(r1, 0x1, 0x1, r0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffa) write(r2, &(0x7f0000000100)="d3f76ed5711d1a90b4a64994feeb0525b5a62c4faba3fbdafde38545312abcebecea155fce80eafafe6de81b328b709c70a4e0c7", 0x34) socket$inet6(0xa, 0x80002, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f000001fcc0)={'syztnl1\x00', &(0x7f000001fc40)={'ip6gre0\x00', r4, 0x2f, 0x6, 0x74, 0x101, 0x40, @dev={0xfe, 0x80, '\x00', 0x42}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x8000, 0x8, 0x401}}) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000002f80)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002f40)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000002580)='.\x00', &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x13, 0x0, 0x0) 30.715652692s ago: executing program 0 (id=1898): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) unshare(0x6020400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0x0, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xfeffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x101, 0x1, 0x4, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x8, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8001, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x3, 0x1000000a, 0x0, 0x5, 0x219, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x440bb33, 0xffffffff, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x400, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0xc, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8800003, 0x2, 0x1, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffec, 0x1000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x643, 0xffffffff, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11b1, 0x20002, 0x0, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x20, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xd) 30.175236711s ago: executing program 0 (id=1900): chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 29.900864335s ago: executing program 0 (id=1902): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, &(0x7f0000000180)) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 28.729715394s ago: executing program 0 (id=1906): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) 27.563996211s ago: executing program 0 (id=1913): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20008880}, 0x24008010) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") chdir(&(0x7f00000003c0)='./bus\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x40, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 12.208173756s ago: executing program 33 (id=1913): sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20008880}, 0x24008010) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0080000001010400000000141a000002000000180001801400018008000100e0000001080002ffdf000001181011dd8c221f9d978f2c58c84b9920a03af6376e41af2e8e4dd3a3755c880afdf521c454d4277672708688012837442a9cbe16201d7542e0e86d5b3485909b0631c32b91aec2e05ac96d08270e9d4a3eac899eeb08763efbccd6e67f2a22ea3b82c338d5ca05842ee18b063fc85b79f095482fe761b3e242a01abae0ffe37882853fc96ecffd5aedabbaeb11eed220238f34ac4cc695abc1a3a24247128f9cf37402b8484738b686a71e0a7f5ecc8314d37733b36aeba48f6291a65158a3e55eb96c835fa7aacd88fb01428f7eb6642be5eb66d11dfa45a2ce2fd600000000000000007eecd4cfe0d7a4434387d12395b202a30bc79ff9ba11f2f2003294df344ed9a649534905cbeed0664ffa141f"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") chdir(&(0x7f00000003c0)='./bus\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, &(0x7f0000000040)) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x40, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 11.514369716s ago: executing program 2 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x4040800) 11.259480484s ago: executing program 6 (id=1956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, &(0x7f0000000180)) io_uring_enter(r4, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) syz_open_pts(0xffffffffffffffff, 0x149300) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448e7, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a58000000060a0b040000000000000000020000072c0004802800018007000100637400001c0002800800014000000010080002400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 11.148330687s ago: executing program 1 (id=1957): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x18, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000008d510000000000000000000079a00000000000007b00e0ff00000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002800000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000008000000000000000000008500000041000000850000002a00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x200}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() io_setup(0x9bb1, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) splice(r7, 0x0, r10, 0x0, 0x25a5, 0x4) vmsplice(r8, &(0x7f0000000600)=[{&(0x7f00000000c0)='*', 0x1}, {0x0}], 0x2, 0xd) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r11, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c) 9.275587042s ago: executing program 1 (id=1960): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x4, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) 6.96159172s ago: executing program 6 (id=1963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 6.736614223s ago: executing program 2 (id=1964): creat(&(0x7f0000000100)='./file0\x00', 0x7a) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x449) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40000, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_FLOW={0x8, 0x1f, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}]}, 0x2c}}, 0x20000050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) 6.609095211s ago: executing program 5 (id=1965): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f0000000200)=[{r2, 0x2d}, {0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xc4}], 0x3, 0x101) ioctl(r1, 0x8b18, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_BLKSECTGET(r2, 0x1267, &(0x7f0000000480)) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="5b00330050300200080211000001080211000000ffffffffffff360004000000000000000300019803010504"], 0x78}}, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000b00)={0xd, @raw_data="277dd5a6101fe59266092c1d385f6e32935665335a0181db4e0a59a0d57fa5c267c8e9439a7b2f460f37317d55c024e8497696aec3808b4bb262cdb29f7201b956a0b6ecf566c64ff1b5c1ec5e764aa2cad336787562a1088a7382dad1f0886995dd40d990a0eb7f32f879776a7a4e1ed64f87133aa06b136029be213e7f90822b1c0bfc29eb9ee635a36284c0131771e57965aa0f2a420bbb4e632c7abd1796dc1b774e1cfb4d8c26ddb1b9e4e22d859742745830ece49e01e6d21d67307b10b007519e1c750c1a"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r8 = syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$eJxUk9Mf54W7BzfvZtt2TbZt27Y9ue/HRrZt1yLbtrHZbRvP63d5nj/guXjPzJi51t3wngHeO8D7Bnj/AB8Y4IMDHD7AEQMcOcBRA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXAxw9wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D3DMAP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQEOC3DiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkACXCpAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAA3w5ABPCfDUAE8L8PQAzwjwzADPCnAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/g2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAQ4PcESAIwMcFeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhng6AC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AMcE+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NcViIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhkiIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4VoiCeHeEqIp4Z4Woinh3hGiGeGeFaIgxCDEMMQoxDjEJMQ0xCHjIN5iEWIZYhViHWITYhtiF2IfYhnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+GODzEESGODHFUiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYijQ/wqxK9D/CbEb0P8LsTvQ/whxB9D/CnEn0P8JcRfQ/wtxN9DHBPiHyGODfHPEP8K8e8Q/wnx3xD/+x/TCMeJcNwIx4tw/AgniHDCCCeKcGiEwyKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KUIjPDnCUyI8NcLTIjw9wjMiPDPCsyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YITDIxwR4cgIR0X4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9GODrCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcIxEf4R4dgI/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYxDYxwW48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjES41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbj/+kCH/23fHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjj8BhHxDgyxlExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMY6O8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf49xTIx/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTg0ASHJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJUwwZMgQZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQRJcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQETfDkBE9J8NQET0vw9ATPSPDMBM9KcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJDk9wRIIjExyV4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meDoBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcExyT4R4JjE/wzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4kQpDk1xWIoTpzhJipOmOFmKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumSIpLpbh0isukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpWiKJ6d4SoqnpnhaiqeneEaKZ6Z4VoqDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTHF4iiNSHJniqBQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2ZTkuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9McXSKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4pjUvwjxbEp/pniXyn+neI/Kf6b4n8pDslwnAzHzXC8DMfPcIIMJ8xwogyHZjgsw4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyNMOTMzwlw1MzPC3D0zM8I8MzMzwrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9mODzDERmOzHBUhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYajM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98zHJPhHxmOzfDPDP/K8O8M/8nw3wz/y3BIjuPkOG6O4+U4fo4T5DhhjhPlODTHYTlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOS6ZIzkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rjV0yJD/bbFOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjuZ4co6n5HhqjqfleHqOZ+R4Zo5n5TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzv+h+v0WePvSfHe//n8pD/f8NzHJHjyBxH5fjQ/9wfMmTIIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+mePoHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fccx+T4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1wWIETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuOGMzdjlCly+wBUKXLHAlQpcucBVCvyfB6sVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEb/O9fgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYddhIcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgRZ4coGnFHhqgacVeHqBZxR4ZoFnFTgoMCgwLDAqMC4wKTAtMCswL7AosCywKrAusCmwLbArsC/w7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAocXOKLAkQWOKvChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyxwdIFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gWMK/KPAsQX+WeBfBf5d4D8F/lvgf/9rocRxShy3xPFKHL/ECUqcsMSJShxa4rASJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+EucvcYESFyxxoRIXLnGREhctcbESFy9xiRKXLJESlypx6RKXKXHZEpcrcfkSVyhxxRJXKnHlElcpcdUSVytx9RLXKHHNEtcqce0S1ylx3RLXK3H9EjcoccMSNypx4xI3KXHTEjcrcfMStyhxyxK3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8BKPKPHIEo8q8egSjynx2BKPK/H4Ek8o8cQSTyrREk8u8ZQSTy3xtBJPL/GMEs8s8awSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5dLjl0yBA8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8R7Sry3xPtKvL/EB0p8sMThJY4ocWSJo0p8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9LHF3iVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuKYEv8ocWyJf5b4V4l/l/hPif+W+F+JQyocp8JxKxyvwvErnKDCCSucqMKhFQ6rcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s8KQKrfDkCk+p8NQKT6vw9ArPqPDMCs+qcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVDq9wRIUjKxxV4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeHoCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcKx1T4R4VjK/yzwr8q/LvCfyr8t8L/KhxS4zg1jlvjeDWOX+MENU5Y40Q1Dq1xWI0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo0n1WiNJ9d4So2n1nhajafXeEaNZ9Z4Vo2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrHF4jSNqHFnjqBofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csaR9f4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1zimxj9qHFvjnzX+VePfNf5T4781/lfjkAbHaXDcBsdrcPwGJ2hwwgYnanBog8ManLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhwRMbPKlBGzy5wVMaPLXB0xo8vcEzGjyzwbMaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3h2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDwxsc0eDIBkc1+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNji6wa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BMQ3+0eDYBv9s8K8G/27wnwb/bfC/Boe0OE6L47Y4XovjtzhBixO2OFGLQ1sc1uLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS2e2OJJLdriyS2e0uKpLZ7W4uktntHimS2e1eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxze4ogWR7Y4qsWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+Zdj/unmxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxdEtftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y2OafGPaXBsi3+2+FeLf7f4T4v/tvhfi0M6HKfDcTscr8PxO5ygwwk7nKjDoR0O63DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFjmFDhgxxpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQO7fDkDk/p8NQOT+vw9A7P6PDMDs/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdDu9wRIcjOxzV4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eHoDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcOx3T4R4djO/yzw786/LvDfzr8t8P/OhzS4zg9jtvjeD2O3+MEPU7Y40Q9Du1xWI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2SI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9WiPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvsez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7HF4jyN6HNnjqJ7/Y9kem/A8GAUIp7Ztm1vbtm3b3hqp/dw2atttWNu2bTc5c2bev3DNfl2HDXD4AEcMcOQARw1w9AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+Abg/GHvDnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgGMGOHaAQwIcJ8BxAxwvwPEDnCDACQOcKMCJA5wkwEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCrApQMkwGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5wFMCNMBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AoQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAhwW4PAARwQ4MsBRAY4O8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwTIBjAxwS4jghjhvieCGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIS4dIiEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhnhTiySGeEqIhnhriaSGeHuIZIZ4Z4lkhnh3iOSGeG+J5IQ4N8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLDIT4S4qMhPhbisBCHhzgixJEhjgpxdIiP/7/nEHwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6EQyM8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2E10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgswuERjohwZISjIhwd4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwa4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGYTEOj3FEjCNjHBXj6Bgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6c4CkJmuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg0ATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCQ5LcHiCIxIcmeCoBEcn+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFJdOkRSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRPSdEUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FIemeH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0txWIrDUxyR4sgUR6U4OsXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2T4ToaLZbh4hktkuGSGS2W4dIZkuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZnhShidneEqGZnhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52U4NMPzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYhsMyHJ7hiAxHZjgqw9EZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+/b+G383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DMdkODbDITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e/+//zfGoHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBzN8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy3FojufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxHjPWJMc0xyzHPMcixzLHKsc6xybHNscuxz7Ha3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHchyW4/AcR+Q4MsdROY7O8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txTI5jcxxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BQ4t8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbgsAKHFziiwJEFjipwdIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBv/6/z6T4e4F/FPhngX8V+HeB/xT4b4H/FTimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSh5Z4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYmDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK3FYicNLHFHiyBJHlTi6xMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVbh0hVS4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1d4SoVWeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFwyocXuGICkdWOKrC0RU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKrGpWukxmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3PR/JpvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Ti0xvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNw2ocXuOIGkfWOKrG0TU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcfsIhrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ2e0qANntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbgsAaHNziiwZENjmpwdIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2px6RZpcZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u8ZQWbfHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXtzhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFoe1OLzFES2ObHFUi6NbfLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh0t3SIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4coendGiHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3U4rMPhHY7ocGSHozoc3eHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvQ4f4R4d/dvhXh393+E+H/3b4X4djOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XHSHifrcfIep+hxyh6n6nHqHqfpcdoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+tx8R6X6HHJHpfqceke6XGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB5P7vGUHu3x1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/rcWiP5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR6H9Ti8xxE9juxxVI+je/6Ppnfu4fxwnG+3W2xt29apbdu2bZ/ato33y0ZtL7q7tW3bvPnmfn4PYU4yf0wyyfGZAT47wOEDHDHAkQMcNcDnBjh6gGMGOHaAzw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8ChAY4b4HgBjh/gBAEOC3DCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQAJcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IBh/xNXBHhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAB8N8LEAHw/wiQCfDPCpAJ8O8JkAnw1weIAjAhwZ4KgAnwtwdIBjAhwb4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4XjOuQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KURDPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcRbQrw1xNtCvD3EO0K8M8S7QhyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjDQxwR4sgQR4X4XIijQxwT4tgQnw/xhRBf/H+ioRBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcL8LxI5wgwmERThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CO8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLhEY6IcGSEoyJ8LsLREY6JcGyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ahMY4b43gxjh/jBDEOi3HCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3HTpkyP9x2zzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4PMYRMY6McVSMz8U4OsYxMY6N8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcUiC4yQ4NMFxExwvwfETnCDBYQlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOAp503sqQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxMcnuCIBEcmOCrB5xIcneCYBMcm+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcmuK4KY6X4vgpTpDisBQnTHGiFCdOcZIUJ01xshQnT3GKFKdMcaoUp05xmhSnTXG6FKdPcYYUZ0xxphRnTnGWFGdNcbYUZ09xjhTnTHGuFOdOcZ4U501xvhTnT3GBFBdMcaEUF05xkRQXTXGxFBdPcYkUl0yRFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U9/kf7/1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6Y4PMURKY5McVSKz6U4OsUxKY5N8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcUiG42Q4NMNxMxwvw/EznCDDYRlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvtn/DQzcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjTDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZjg8wxEZjsxwVIbPZTg6wzEZjs3w+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHC/H8XOcIMdhOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumSM5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npSjOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH4TmOyHFkjqNyfC7H0TmOyXFsjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+B4BY5f4AQFDitwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqcOECFylw0QIXK3DxApcocMkCKXCpApcucJkCly1wuQKXL3CFAlcscKUCVy5wlQJXLXC1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3LHCjAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAi3w5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8qcFBgUGBYYFRgXGBSYFpgVmBeYFFgWTBsyJAh1gU2BbYFdgX2Bd5d4D0F3lvgfQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4PACRxQ4ssBRBT5X4OgCxxQ4tsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJY5T4tASxy1xvBLHL3GCEoeVOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKHlziixJEljirxuRJHlzimHOrYEp8v8YUSXyzxpRJfLvGVEl8t8bUSX5/of7+AEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4tMJxKxyvwvErnKDCYRVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlkhFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5UoRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0VDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wuEVjqhwZIWjKnyuwtEVjqlwbIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxqE1jlvjeDWOX+MENQ6rccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGqlxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBqt8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszUOr3FEjSNrHFXjczWOrnFMjWNrfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHNLgOA0ObXDcBsdrcPwGJ2hwWIMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSzZIg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1aIMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9tcHiDIxoc2eCoBp9rcHSDYxoc2+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+CQFsdpcWiL47Y4XovjtzhBi8NanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyRVpcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qUVbPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Why0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvDWxzR4sgWR7X/f19GtzimxbEtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+OSF+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf73f3k6HKfDoR2O2+F4HY7f4QQdDutwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7PCkDu3w5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHQ7vcESHIzsc1eFzHY7ucEyHYzt8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfD/zoc0uM4PQ7tcdwex+tx/B4n6HFYjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9kiPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKPJ/Vojyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+7xnh7v7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f7PGpHp/u8Zken+1xeI8jehzZ46gen+txdI9jehzb/380nGPz2AcDZZM2RWrbdntq27Zt26dtatu23eb/s1HbRmobabjzzO7eb3Bn7n135uDrA/jGAL45gG8N4NsD+M4AvjuA7w3g+wP4wQB+OIAfDeDHA/jJAH46gJ8N4OcDOGIAvxjALwfwqwH8egC/GcBvB/C7Afx+AH8YwB8H8KcB/HkAfxnAXwfwtwH8fQD/GMA/B/CvAfx7AP8ZwH8HcOQA/jeAowZw9ACOGcCxAzhuAMcP4KAABwc4QYATBjgkwIkCnDjASQKcNMChAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4V4NIBLhMgAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4LAAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDnB4gAMBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBjgjwiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSA/wU4KsDRAY4JcGyA4wIcH+CgEAeHOEGIE4Y4JMSJQpw4xElCnDTEoSFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4TIiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhziKSGeGqIhnhbi6SGeEeKwEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw5xeIgDIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIY4I8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFkiP+FOCrE0SGOCXFsiONCHB/ioAgHRzhBhBNGOCTCiSKcOMJJIpw0wqERThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhXh0hEuEyERLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBv/f5RDhxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyRGeEuGpERrhaRGeHuEZEQ6L8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QiHRzgQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4YgIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCEdG+F+EoyIcHeGYCMdGOC7C8REOinFwjBPEOGGMQ2KcKMaJY0aO/79xaIyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxbh0jMvESIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SoynxmiMp8V4eoxnxDgsxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa/+3n0GDBl0f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HePwGAdiDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9jHBHjFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b48gY/4txVIyjYxwT49gYx8U4PsZBCQ5OcIIEJ0xwSIITJThxgpMkOGmCQxOcLMHJE5wiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmQRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjwxwZMSPDnBUxI8NUETPC3B0xM8I8FhCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3g8AQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPExyR4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+DIBP9LcFSCoxMck+DYBMclOD7BQSkOTnGCFCdMcUiKE6U4cYqTpDhpikNTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJkVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5xVNSPDVFUzwtxdNTPCPFYSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4vAUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1MckeIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBT/S3FUiqNTHJPi2BTHpTg+xUEZDs5wggwnzHBIhhNlOHGGk2Q4aYZDM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIsMlM1wqw6UzXCZDMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI8OcNTMjw1QzM8LcPTMzwjw2EZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neHwDAcyDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88zHJHhFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgM/8twVIajMxyT4dgMx2U4PsNBOQ7OcYIcJ8xxSI4T5ThxjpPkOGmOQ3OcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKselc1wmR3JcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDnHU3I8NUdzPC3H03M8I8dhOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3j8BwHcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuyHDhr0v088m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e44gcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHEfm+F+Oo3IcneOYHMfmOC7H8TkOKnBwgRMUOGGBQwqcqMCJC5ykwEkLHFrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFLlngUgUuXeAyBVLgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQVa4GkFnl7gGQUOK/DMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkChxc4UGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuCIAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wJHFvhfgaMKHF3gmALHFjiuwPEFDipxcIkTlDhhiUNKnKjEiUucpMRJSxxa4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiVS4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSWeVOLJJZ5S4qklWuJpJZ5e4hklDivxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEoeXOFBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+IzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iiBK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR5b4X4mjShxd4pgSx5Y4rsTxJQ6qcHCFE1Q4YYVDKpyowokrnKTCSSscWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeVzFi+KBBnlDhiRWeVOHJFZ5S4akVWuFpFZ5e4RkVDqvwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCodXOFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+EzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hiAq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8KR1b4X4WjKhxd4ZgKx1Y4rsLxFQ6qcXCNE9Q4YY1DapyoxolrnKTGSWscWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1UuOyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTWeUuOpNVrjaTWeXuMZNQ6r8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqH1zhQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e44gav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qfHfGkfW+F+No2ocXeOYGsfWOK7G8TUOanBwgxM0OGGDQxqcqMGJG5ykwUkbHNrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg0u3eAyDdLgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkNntLgqQ3a4GkNnt7gGQ0Oa/DMBs9q8OwGz2nw3AbPa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGhzc40GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uCIBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNvhfg6MaHN3gmAbHNjiuwfENDmpxcIsTtDhhi0NanKjFiVucpMVJWxza4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lItLt3iMi3S4rItLjdmsMu3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4SountmiLp7V4eotntDisxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1sc3uJAi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lz7T4bIvPtfh8iy+0+GKLL7X4couvtPj/2Nhhr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3OKLFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEt/tfiqBZHtzimxbEtjvtfhxYHdTi4wwk6nLDDIR1O1OHEHU7S4aQdDu1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/oGDJo0CAP6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDu3wtA5P7/CMDod1eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090+GSHT3X4dIfDOxzoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/vcESHX3T4ZYdfdfh1h990+G2H33X4fYc/dPhjhz91+HOHv3T4a4e/dfh7h390+GeHf3X4d4f/dPhvhyM7/K/DUR2O7nBMh2M7HNfh+A4H9Ti4xwl6nLDHIT1O1OPEPU7S46Q9Du1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx7Pjx4/frcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B5P6fHUHu3xtB5P7/GMHof1eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/Dexzo8f8EAAD//9eYyt4=") syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000080)=ANY=[@ANYRES32=r8, @ANYRES32=r8], 0x9, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="080029bd7000fddbdf250c00000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000f8ffff0600000008006e80040002000a000600ffffffffffff0000040095c781872b5b910b00500050801100010035002dd6aa6351703a81ca246b000000140000000000c0a01c3c711ab3ed5127139f236b0500020001000000050009000200000013000400a677f528aaf0e25e83"], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x20008004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.140942737s ago: executing program 5 (id=1967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r9], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) 6.139273196s ago: executing program 6 (id=1968): setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0xfffffeff) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x88001, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000409, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 5.663176617s ago: executing program 6 (id=1970): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) socket$kcm(0x10, 0xf, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000000c0)={{0xffffffffffffffff, 0x2, 0x419, 0x1, 0x7}, 0x7, 0xffffee79, 'id1\x00', 'timer1\x00', 0x0, 0x8, 0x10000, 0x100000001, 0xcac}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x0, r4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="70000000150001002dbd7000ffdbdf2500000000000000000000000000000000ffffffff0000000000000000000000004e2300074e2100050200a0a02c000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b\x00\b\x00\b'], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000052) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000000)={0x1, r4}) ppoll(&(0x7f00000000c0)=[{r0, 0x50a2}], 0x1, 0x0, 0x0, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x4, 0x200) fchmodat(r6, &(0x7f00000003c0)='./file0\x00', 0x160) syz_usbip_server_init(0x4) r7 = mq_open(&(0x7f0000004880)='9p\x00', 0x40, 0x80, &(0x7f00000048c0)={0x3, 0x6, 0x3fffc0000000, 0x73}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r7, 0xf507, 0x0) unshare(0x400) flock(0xffffffffffffffff, 0x2) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) 5.081365173s ago: executing program 5 (id=1972): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f0000000880), 0x4) fcntl$addseals(r2, 0x409, 0x20) fallocate(r2, 0x3, 0x7, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 4.868008429s ago: executing program 2 (id=1973): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200050, &(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="8f885045210635adb7e6436894228db3ca307a6a34ed8bcac81952ee0bd544cd75dfb41348803558a5fce3ce459f0520b79b93828d78bdefc834dd46e379d43441d36a2175580482bac07e9f8e36e0c0ed7665883da3c4307fcec811da2a770ebeb360ee9f7feab5696ff3736fc5d0299fd2f93ce9c0f30bd2f5c5c3efe112e0b6f4968d88ad0095457ca2847daf624d643e11daf40e9e8953f2eda4e319da17d99f30c215919c5ffed73a4a908ea9829108fc04e3666f7cf793825539f06254d0cad1dc084027bc029ba42e450b3592f440145b3b4b12f076472702", @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT], 0x1, 0x1d9, &(0x7f0000000440)="$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") r0 = socket$alg(0x26, 0x5, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2020c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 4.821206502s ago: executing program 1 (id=1974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0xefe, 0x0, 0x0, 0x0, &(0x7f0000000180)) io_uring_enter(r4, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="04300100c9"], 0x6) syz_open_pts(0xffffffffffffffff, 0x149300) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r5, 0x400448e7, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xc}, {0x0, 0xfff3}, {0xd, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0xc0}}}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a58000000060a0b040000000000000000020000072c0004802800018007000100637400001c0002800800014000000010080002400000000c05000300010000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 4.585484155s ago: executing program 2 (id=1976): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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") open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x80, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$eJzs3TFrE2EYB/DHNm1DFjuLw4GLU1C/wSEVxAMhkkEnD6pLK8J1OZ3uY/gZ/Eh+jEzdTpIrTRujiyav6f1+EPInfw6ey5A3w/sm7x9+Ojv9fPGx/fEthsMsBhFNXEYcx17sR+fe1fPeIh/GTU0AALtmMinz1DOwWVWVlwcRcfRLM/2eZCAAAAAAAAAAAAD+mv3/ANA/9v/ffVWVl6Or72+32f8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApHPZtvfbPzxSzwcA/HvWfwDoH+s/APSP9R8A+ufN23ev8qI4mWTZMGLW1O381VlTTyNGEfHiZXHyJFs4Xl41q+vp/iLN+6ddn93uD66vf7a2P4zHj7p+3j1/Xaz0R3G6jTcAAAAAAAAAAAAAAAAAAAAA/gPj7Nra8/3j8e/6Lt34fYCV8/uDeDDY2m0AAAAAAAAAAAAAAAAAAADATrv48vWsPD//UAmC0NMwWlOl/mQCAAAAAAAAAAAAAAAAAID+WR76TT0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKSz/P//zYXU9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w88AAAD//9vbk2A=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 4.584596611s ago: executing program 5 (id=1977): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x10, {[@global=@item_012={0x2, 0x1, 0x5, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x0, "a62aa0eb"}, @global=@item_012={0x2, 0x1, 0x4, "84bb"}, @main=@item_4={0x3, 0x0, 0x9, "4070f43f"}]}}, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') getdents(r4, &(0x7f0000000040)=""/44, 0x2c) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f0000000540)={'nat\x00', 0x0, 0x3, 0xd5, [0x100000000, 0x6, 0x0, 0x0, 0x6, 0x6], 0x6, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000380)=""/213}, &(0x7f0000000640)=0x78) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000050) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000840)={0xa, 0x100ac10, 0x5, 0x7, 0x1, 0x0, [{0xe, 0x81, 0xfaec, '\x00', 0x4389bfb1e549419f}]}) 3.568742836s ago: executing program 6 (id=1979): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000300)={[{@nodiscard}, {@quota}, {@dax}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nogrpid}, {@dioread_nolock}, {@delalloc}, {@grpid}, {@quota}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") write$binfmt_script(r0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3, 0x4}, {0x0, 0xff}, {0x4, 0x0, 0x2, 0x87ea}, {0x1, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x40}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0xffff, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x4, "fe1d8e7fd17352a635b10000000caa0000000975001000"}}) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) gettimeofday(0x0, &(0x7f0000000140)) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) lseek(r0, 0x5, 0x3) 3.455618015s ago: executing program 5 (id=1980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffdf, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24000084) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) 3.260049055s ago: executing program 4 (id=1981): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$eJzs3U1sXNd9N+D/ueSII/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkmQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQomxGFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sWJr5445f4PAE+US/7/HwAAAAAAAAAAAAAA9rsURTwdKeYvrqep6n1X/UKnduPm5OjY9tUOpqrmQFW+/KmfPHX6zJdeGjnbywud2Y+of799Nt6YuHS+8erc9fmF9uJie7oxOdu5Mjfd3vERdlt/q2PVCWhcf/PG9NWri41TL57etPvm8IdDTx0ZPjfy/PHnemUnR8fGJm4XqfeXH7znhnTdbYbHgSjieKR44Xs/Ta2IKGL356L+YMd+q4NVJ45VnZgcHas6MtNpzS6VO8d7J6KIaPRVavbO0fZjEYO1B9qHu2tGLJfNLxt8rOzexHxroXV5pt0Yby0sdZY6c7Pjqdvasj+NKOJsiliJiLWhOw9XiyIGI8V3Dq+nyxEx0DsPX6wmBt+9HcUe9nEHynY2ahErxSMwZvvYUBTxeqT42XtH40q+zlTXmi9EvF7mDyLeKfOViFR+Mc5EfLDN94hH02AU8efl+J9bT9PV9aB3XbnwtcZXZq/O9ZXtXVd+yfvDHVeKh3R/OLglH4x9fm2qRxGt6oq/nu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2K52Nmc3AN5YuB4Gk/pIc8lfpLVo4g/zvP/vvWwGwMAAAAAAAAAAAAAAAAAAPBEK+InkeLl94+mlehfU7wze61xqXV5prsq7HituzRwb830jY2NjUbqZjPnVM7lnCs5V3Ou5Ywi18/ZzDmVcznnSs7VnGs5YyDXz9nMOZVzOedKztWcazljMNfP2cw5lXM550rO1ZxrOWOfrN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA4KaKIX0SKb39jPUWKiGbEVHRzdehhtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2lIr4fKRp/0Ly1bTAiUvVv19HylzPRPFDmJ6M5UuYr0Tyfs1XlYPNbD6H97E4tFfHjSDFUf/fWgOfxr3Xf3foaxDvfvP3us4PdHOjtHP5w6Kkjh8+NjP3as3d7nbZrwLELndkbNxuTo2NjE32bB/Onf7Jv23D+3OL+dJ2IWHzr7TdbMzPthXt/UX4FdlH9EXqRBp+UnnpRvYjBfdGMh9N3ngDl/f+DSPHb7/9774bfvf/X4/913926w8fP/+T2/f/lrQfa4f1/cGu9fP8v7+nb3f+f7tv2cv7dSG0wor50fb52JKK++NbbxzvXW9fa19qzZ06c+PLIyJdPn6gdiKhf7cy0+17dl9MFAAAAAAAAAAAAAAAA8OCkIn43UrR+vJ4aEXGzmq81fG7k+ePPDcRANd9q07ztNyYunW+8Ond9fqG9uNiebkzOdq7MTbd3+nH1arrX5OjYnnTmYx3c4/YfrL86N//WQufaHy5tu/9Q/fzlxaWF1pXtd8fBKCKa/VuOVQ2eHB2rGj3Tac1WVce3nUz/y6ulIv4jUlw500ifz9vy/P+tM/w3zf9f3nqgPZr//4m+beVnplTEzyPFb/3Fs/H5qp2H4o5zlsv9TaQ4dvZzuVwcKMv12tB9rkB3ZmBZ9n8ixT/8YnPZ3nzIp2+XPbnjE/uIKMf/cKT4/p99N349b9v8/Iftx//Q1gPt0fg/07ft0KbnFey66+TxPx4pXnn63fiNvO2jnv/Re/bG0Vz41vM59mj8P9W3bTh/7m/en64DAAAAAAAAAAA80mqpiL+NFD8cG0wv5W07+ft/01sPtEd//+vTfdum7896RR/7YtcnFQAAAAD2iVoq4ieR4trSu7fmUG+e/903//N3bs//HE1b9lZ/zvcr1XMD7uef//Ubzp87tftuAwAAAAAAAAAAAAAAAAAAwL6SUhEv5fXUp6r5/NN3XU99NVK89l8v5HLpSFmutw78cPVr/eLc7PHzMzNzV1pLrcsz7cbEfOtKu6z7TKRY/+vP5bpFtb56b7357hrvt9diX4gUY3/XK9tdi723NvkzvbLL7ZNl2U9Eiv/8+81le+tYf+r2cU+VZf8qUnz9n7Yve+R22dNl2e9Gih99vdEre6gs23s+6qdvl33xylyxB6MCAAAAAAAAAAAAAAAAAADAk6aWivjTSPHf11duzeXP6//X+t5W3vlm33r/W9ys1vkfrtb/v9vre1n/v3quwPLdPhUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4O1LMX1xPq0Pl+676hc7sjZuTo2PbVzuYqpoDVfnyp37y1OkzX3pp5GwvP7r+/faZeGPi0vnGq3PX5xfai4vt6cbkbOfK3HR7x0fYbf2tjlUnoHH9zRvTV68uNk69eHrT7pvDHw49dWT43Mjzx5/rlZ0cHRub6CszWLvnT79Dusv2A1HEX0aKF7730/TDoYgidn8uPua7s9cOVp04VnVicnSs6shMpzW7VO4c752IIqLRV6nZO0cPYCx2pRmxXDa/bPCxsnsT862F1uWZdmO8tbDUWerMzY6nbmvL/jSiiLMpYiUi1obuPFwtingzUnzn8Hr656GIgd55+OLFia+eOHX3dhR72McdKNvZqEWsFB81Ztt0mE2Gooh/jBQ/e+9o/MtQxGB0f+ILEa+X+YOId6I73qn8YpyJ+MBpfWwMRhH/W47/ufX03lB5PehdVy58rfGV2atzfWV715VH/v7wQO3v+0k9ivhRdcVfT//qv2sAAAAAAAAAAAAAAACAfaSIX40UL79/NFXzg2/NKe7MXmtcal2e6U7r6839682Z3tjY2GikbjZzTuVczrmSczXnWs4ocv2czTLrGxtT+f1yzpWcqznXcsZArp+zmXMq53LOlZyrOddyxmCun7OZcyrncs6VnKs513LGPpm7BwAAAAAAAAAAAAAAAAAAPF6K6p8U3/7GetoYqtaXHujtW7Ue6GPv/wIAAP//0xz3/w==") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x327461, 0x0, 0xfd, 0x0, &(0x7f0000000080)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setregid(0xee00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x820, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x3, 0x1000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) chdir(&(0x7f0000000280)='./bus\x00') 3.087285179s ago: executing program 2 (id=1982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000300)={[{@nodiscard}, {@quota}, {@dax}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nogrpid}, {@dioread_nolock}, {@delalloc}, {@grpid}, {@quota}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") write$binfmt_script(r0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3, 0x4}, {0x0, 0xff}, {0x4, 0x0, 0x2, 0x87ea}, {0x1, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x40}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) gettimeofday(0x0, &(0x7f0000000140)) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c000280050001000000000006000340000000000800074000000000040006"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) lseek(r0, 0x5, 0x3) 2.817897119s ago: executing program 1 (id=1983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r9], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) 2.027529229s ago: executing program 4 (id=1984): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2008010, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xff, 0xc34, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x327461, 0x0, 0xfd, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0x9}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setregid(0xee00, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x820, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x3, 0x1000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x11, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x2, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) chdir(&(0x7f0000000280)='./bus\x00') 887.094402ms ago: executing program 4 (id=1985): ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x180, 0x0, 0x4, 0x2, {0x0, 0x9}, {0x350, 0x20002, 0xffffffff}, {0xf4ef, 0x300}, {0x4, 0x4000002, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}) 747.417905ms ago: executing program 4 (id=1986): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r4, @in6={{0xa, 0x4e24, 0x1000, @empty, 0xffffffff}}, 0x2, 0x1, 0x0, 0x4, 0xb1, 0x8, 0x6}, 0x9c) 621.179473ms ago: executing program 6 (id=1987): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000001c0)={0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "000012341234567890123456"}}}}, 0x0) 529.317221ms ago: executing program 4 (id=1988): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000001f40)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303030303030323632312c757466382c756d61736b3d30303030303030303030303030303030303230303030302c6e616d65636173653d312c646973636172642c6572726f72733d72656d6f756e742d726f2c756d61736b3d30303030303030303030303030303030303230303030342c756d61736b3d30303030303030303030303030303030303030333337372c6e616d65636173653d312c757466382c696f636861727365743d69736f383835392d342c696f636861727365743d63703837342c646d61736b3d30313737373737373737373737373737373737373737302c6572726f7273040000006f756e742d726f2c7569643d", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYRES64, @ANYBLOB="8d8f5956b2099bbe3ec9d0cec651de21ead2ca4a13aaca2bfff807cfff4c01b930ea481290f178bbe72b7f26ee9618a22eb11485543e23f02bf1593639a0f5b7a6cf7c91251fca747de871ec730cc86e79cfb9da931b6a0bf8596626fe47826571554ae74f5adbe64cb0b8acb34477ed7303e2efc134c6ab76bfc499c1746e00436147bfe5f667019c8ae281c15ac31313d0a4bc7c64a5b97782d3191f6349f589dafbfa6d0005635f5d4f8cc8412f31c075ddda13000e668d88b2e381a106eb50e2077af5dc853561ae3260bf90dd517d1b7b362e810219bbf5d85f02015e76dde3dbd2f10e7a10c50c2be329534ef8dc2433a82399991a1e4d09116ae4ceb0c057b8bd7e02b57a1490e4ecd49ad060d0fb13944443f8ab177c515171a62a1463295652c4fa51835e66bcf14f61b7546275036b29fabbb0a8542d9f576b898fe21f0a8d7334ad9b4aafcc3962db1d72df9b765194db404451a8e171403701b8f0e3195f8ae7ff4703d426f1bbd0150edfc6c6e320d4d404afe6cff7f7d48251189e988be4dfb26149e15db6f8c2c407c6812e75445266063aa9007ec318128738e963263fd283954f977a8d8cbf24f34d9bcd816fb01706722ece5da11f6a37dc8da68301ad3631a7389d031281bc8b657546d5a9546f54263f6e89e4755890d0bfbb0b122065703ad8d8bae7f379be7feb35ba562c6db4bf0f2fd668c0e7da2c9325f036683d293b7018a41634cd482382a5ddeebfb286d8fb0ad7ea7e6a3b3a83e9577e0e79a95ff5b926cbb26f3236307937271dd8b95217755bc9b92429fd97055d97123a5c351eec001f8219d463171aee80d6de881caade5c78c87cab0139f2285a30997e0d2277a7c31f58eb8abb2d2d095412fe400aa3263ebc8946f928d957d5998fbc302f0cbe8e0f76b1032d24ecca08d0dd53a2179756ee7a6ad7431254950ec6e4eeab95738b8c878c56f1c3f641aade7cefb6be79d40e24954997831ddc4a9664b72bdb82a2180cdd3bbe7d68b8c858adf06bd15f78808200edad352bcc11560bde09c030e4a7886c60747b376fb7d9ddf30ef2f81d30e903997ae5a2ba5b8fcd110f9bf71898f2a74f0a6d39f144cfcab1ee539a461d1f1d2a2afc9bb974f514340b5cca68c8d0e856b5b918d98128349e3855bb2829284c1612026b45a22e9dc67efa9faf18b2014e314028f7302d58a93f2f56e4ed33da2b1bd599f13551f2180097b3f649284ca615cd366c53dbb0fb5f73e84eee33bb14e10df2275bd87165fdfbf387f510ecbbfd930251904938105dce6329179f59d10dba972177a41b8d1fdb7973746059064d94a62fd553188cd01dd6aa8c44777070514ddd40f2e15016a87949ea1c045c107ba3f1b04f464a8622d256246a257cd34962476a2aa28e4e21ca213c8848811b23797e331790b5de888449f72ec055c39bbb0af34d29746d9b7eb74224379e66fc5452d26102fce06d3c1682cfce35f68e6fe6287576024ff1661c02a885927000a6f028c91b54a394403fc058a0a712c0cc383ef2630c77f23cafa2e8a7374bcc5898b356edadf554636097f2df9474227691345969c9c2e3468ab235565dd0f8c359a4bb2aee23d88232618562cf906c4c45e5fc3aa6b4853e9abe206aec8e18340f00142a88db58c4acac1f0e83c15b2a158bec7f57fd5eeee643eb0271ecfb3a6effffc0c56b7b5442ef1f6292f876efd7c954613a0378e0f60378cf329e9d5aa2f03f32ecf33ce635d330162c3667513c816c80765745b1e2cdd66d52a1c0136a17487e44a5e578b89ba75f8b9470b8874417063c4b521310d08485b218b9dd65e8703ddf33e6708ddcd86dcf2183d89fe936182dd7620f5523600a8db25e46373fd565e1d4ae69e69e039632c89ccdb84634a72515d379e8c72cb91523493084111be571fe6f106d98a582221ced86b4288167fd48ed6dfb523f42e902ae14ba60ff0a571d5c2963a9cf60815a6cb2384eb8f0354bed404a0249dc1889a845ce6d1a9b72fb70ad68c30a367ceefa5ed63d9edaa8837a08dc5fad6e40c3ea525a42e495bf875343dc1a1e161d4686ec70bff218c15d1e729e6b3cc677602fe343b2794fc0aeecc7ce2abf8cb13f90c5b57b61a42fe8e6c4dc46bfec13bf38b9e186ba7ddd45bb6ec98126a77a0d38e18b0e32d59d201f59ec19f5adad203b9f8edb5da4d75a22fd9f5548f4f60366971e58cac05388ad305baae0347d4ac57589ef30819f50a9b834bf49ddddd715a6b161e163b4039ecfa66fe684b155411b00d0d6ea86ad991d701788827cb1de5424d23a90530c7d275291cf44e81e714059162a7d476a8504efca2174387871943c30d702594983792c0c2e62d182015cda016a0d93ca8c2d01a3a3f1eed956e184c0d0271265381f4f506a4281484792122d2b4bd0fde6db9fcf3e42e3623a7b87b3acae58a2cdddf512717be7150adf902ceae03c9adf50d323cd0c56e4ad74c93fec200445ec8685ef94ab1bc9749fc6caa5ea7f88ac9370fc5543ad6eea4e45ce05117a3c33a2b2b58398937648a7e08acff841197561490b7c87a6240f1268e23c98a84f3a180017257b92935e09875d8ab6b4906fe2038cc00c6be49c01f6f66fa6d9e4018b850a2d9b7e9deb7fbefadf26089a7b576b4dce7219210ec96018d61335d9c0aaedf49c3b9a368e443c940f1ac43a7d0a032afe9f666cf6102a8f2f5754a97adb2850d5af2797bea8d41196b9d608b26a172fa2602a6e4fb9a20fa98f22674374f52e5cb814380adaf3a0a642268275a6b8f5d28c5f6fcffbbb93942994be6ae22ede1128449177f4dc87be03cbb5cc3187c472f3d653c7432d491c202c29da29521cffe695ff2a7be2e3db5f1c74f354499025119916274bdd64a44e6dfa9089f21e6b960697c044902964c598ce7f10bcd0cba0df1962b967d2a391555f8c14cc85d2f4e7d50752c4e231fc4694160943bfa4d6bb23591384e802b99e9b544c29c278d3cca39e7d88b0744ceb9453ca0dacb2a7a9b77f768ef1d07d4727f3677060fb7c9255c19ca4bdbcad6d57d6600036e9923e00cdac9c075462a3716ad8b4e45f7be92be180ff5a11cea7fd62ae9b712db3863c3d700ab5754abc75d759d9feb454b66b89508979f9303cbc85b48b7db0d969f28c2eac2e31fa4fa3a9c7388839bbabd1af2811e510db931ac25aac4f534aa0b625b324b389184d4e2ef93eb6264375d7b0a2449857b0eab857dccdf50deebfebe0ae3cb30aeec4549343a5b4d2a759e1a9397809af754c54d52f5831614ef9411348f83dd8bc6866ac74222e4cb3b6e9f9f3e551b3df2b35b05f379a9229d8954ad092b1023542321b9bf9d76bc0a02fc31fde2ad282414b2fc5487f052641b6f2e34c8ec1ef881f36057f9045451df25e5f015ee91197bd893d73ece7a2a0a2672a7ee05564fda870d77726b17c269c09540a26bd09f212546d6574f1ca60852dd7766f00eab3a889e8b9c80dac5171bcfb6aeadc7ee437cd42a6a870ce76c434e968608c2f0afc6772a827b84b10f837c8c2bc48f534ccadadf23727a027a1e2dab8403c64850df5ebaa82fe7be15f5ef9c5bb6d602000b84529e01750b1c49052b2ee277a182d2c4c0a29ae2226c9c6d34fe2f5307139fb4b387841321729dc64cc0c324433b736030e6a59a6df7036efd0b641a37134973339952122077e2c273d0271df09065e027c3780272802102cb36e101eaa3587642b1fe805d6c77ba0848278407dd2d522e4b4150cbe02fb830db05359bd072ff3d64b31245f80abc532a4f03f7123d156c245e0cf78a7f52c0cb0dd9bf913b2b3971cfc6c9f80b08e3d0ce05ca4475e7e30de47bd6efe03b588eabbec7f067396946b70b763d0e74aec3b6724a6d89f3ea2a22403233860d9a6240efa86e15d67a992baf74bdea5d4cf161eec679fa5629252b210cb0922e234ca0fe362e7bc915cd83685b71fcf69af3a0529d6f7599144de35cdbc3b141accac1f63369de2b8c9bb031815b2f7730180dd44d31a0133d37234ec03c752ee49dde8c65ef612e35361b5f95c05235aa359cf8ef2a02ed5e95fd996fab72171bf94b35c9860e22bf88a25401309b14ce0be5cd5733d792d19fec642e67f01f3aa34f8c59552012e5345020e4dd14bf3c0e56dbbbf697c512122ffe80e59749017e6841b74218309f0556eb964c27788de0fe61fce14afab8b02dc9c9b62a08eb8108f22a8d30ca7fd3604897460e24f4349da440bb60cf327dab18ea9c230e8a9d64cffe12f15122a8a44c4a68a62dfbafc890ba3f7b8d48d5a0ee1945533affa8d1f11febb0c0ad7831c1396f8e0995135b4c28cebcf75596a8487f6731a3a538cb8e960a43a003ab5acab92f1247d7a59db29609e108bdf820613114c7bb92f4a76111181c8f46afb125b8ee5a10b2e85416dd454e1bc6652dc9758baffe91610baef8eaae557b600b08b5b8a09d460e60ecb89c4aced55a7ac4c09dadd002fd6eecd0e6e89b2a65a31de6cc2e3ce00dd782b7dcc561099acebe27f83c11baa0188dff0579db5e7434506673b80b19389c68d22d324ff41717d97bb75ef2bf6ee2e90555679dbca7407b2641703241131510cf47df5f05b1343c28b6fe3ef0097a3974c3ba9e23f59fe110e5488628d9915be23b386d8580b59bd6c9bb76f8f9798821f55aa50f18ac6ad6144e370bcdbeac4585d393de91f418b129aad69840c2133c8008264e1ca21e758debe0675bbb05ec2ffe2dca25eb8cfe3f2cbcba18953610abd06b91d9a7952f1b6204ad04e36ddb0b7e45a461d0cde65b0c7d5d53e69a35590e53e949cd794b62824af231b3a91e7e73c2935ebce6dc670a5d5807f4a45696c7c76a959bfc1fe014ddf810c1ac2e810a15d25da4634a5bfb02dabe9a4d7218fafaa724ea647e7a2de647579907a7f1e2c8715c0da3fbd88ac3f4546e55eee05ff1d8967b190a06dc1d0e953c3a1cecf8392da91b6ee32650aad580af6e65ff6ac48365d229193d663a4d46e526301c88dcb043e410d6a82e59f4911b58ae0a6bd772dc7c5be80e424957e75b76697ce013553cd27621001d39b814bfd939765043773eda8b5ecf4eaf1b25e512de9d4f4a93e9258caa988c668ddc2ba918ed7120c67e7235f5a46d285c72b94f758c39294142b7b0da724651bd8f05f3599bdc2bbde6330a2d64649180a8900f68f25063ea81924ce08d162773bdc059a3521e777dee196605eeaed1f2f5ba8abe37af75cf9af6dd00e79bb7c29f71e2c44b1050c583736d51946cadfb3ed57782b034b16fc4fe6fe02e78bf5752f681e256576e288c54b35cac65c0d2654116f239bf355c435b3bb6b7e6df1a6d821d210588129ed0b6f23b016340b8bd03573b3b50645f5213fa11554f20da55d4d43ba9e7e740e4a44a848ea3478290f9fd75e04a5fee8aa5e81336f0f1a84ad060dbd10a9cba95b808b791326e5cdd257f2118d56604bb7b03425cfe3eb8856f59d6893b733033da3671f32eb5401f281dd4515af6a18c0a48ffb11b5611d5fadb34c0313841edad9dd528b9521f7c3b5b892d3fbabda1fef433d84afcd252cbdc9f71189e709ca007cacc7d7d832eb3bc79a17fe8ad597b17a5329b58fa882bcb369ea3314f773025f862fc48ccb60d5cfe3280c4b2964169b85e11ba01d1c90ac091041e0b2d4e39c272796af10afc14f06628eacce563311a66f9cdc8c719a7adba0119cae84f7b1bdb85deefec19a0ae3b2b5a603343f14e26143dff42fa75703635f78939b6927", @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRES8, @ANYRES16], 0xfe, 0x1508, &(0x7f0000000a00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def134b824b3cf4714cf1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c9860900000000000000ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63effe7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeef) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1, 0x8e, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) fallocate(r3, 0x20, 0x4000, 0x3000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) 495.536017ms ago: executing program 1 (id=1989): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x21a, 0x0, &(0x7f0000001300)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x40) ioctl$FIBMAP(r5, 0x1, &(0x7f0000000040)=0x85) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200, 0x30}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f00000004c0)) r7 = dup(r0) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}], 0x1, 0x4) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r8, 0x1, &(0x7f0000000100)=0x1f) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xef}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x80000005, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x8, 0xac, 0x7d, 0x4}, 0x9c) 292.959811ms ago: executing program 2 (id=1990): syz_mount_image$ext4(&(0x7f0000000780)='ext3\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003240)={0x2020}, 0x2020) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x2, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0x8000000000000000, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x35, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x4, 0x89, 0x0, 0xf, 0x7fffffffffffffff, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000040000000, 0x4, 0x4, 0x7, 0xc, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffe, 0x5, 0x7, 0x7, 0x2000000000000003, 0x6}) syz_read_part_table(0x629, &(0x7f0000000640)="$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") prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x2000)=nil) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r3, 0xe436}, &(0x7f00000001c0)=0x8) ioctl$TIOCEXCL(r2, 0x540c) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) fcntl$setflags(r5, 0x2, 0x0) 292.010747ms ago: executing program 5 (id=1991): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0xc, &(0x7f0000003f80)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x8ec31f9913e982ce, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000180)=0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000780)=ANY=[@ANYRES8=0x0], 0x3, 0xd99, &(0x7f0000006900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000000c0)={0x4, 0xfffffffffffffffd, 0x1, 0x5}) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x200, 0x1b, "3eccd25569e20900"}) 105.913865ms ago: executing program 4 (id=1992): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000300)={[{@nodiscard}, {@quota}, {@dax}, {@bsdgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nogrpid}, {@dioread_nolock}, {@delalloc}, {@grpid}, {@quota}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file1', [{0x20, ',\\^'}, {}, {0x20, 'devices.list\x00'}, {0x20, 'devices.list\x00'}], 0xa, "2f469b03990585e9eef0fc1cc76b7337a075b25140a0896bdeb0b1befbef0c159973281422554208f44cc73437fe0ddb9083e3006c3b8686b5b55f090e12164f8160633a3d1e3813f7ebc8ff76fbae29af990f788f7bc0fa62fdec244a394c2af122092661c93daa137edf7b142104dd7e8f0f50117ab8524eb885d38e358e71392eb05121f5754c24cc9efe252a003f4375dc8ef5f44f39add6335e9dba7d9bcae3b74ab499c58bf0ec13e4130f79db7bb040becded1c7f703ff307a8ffae4002861bd401a87d9e6d686cd5d502f3066cb90660dcaf74fd13f15f0627ed7841b002f7afedf7"}, 0x112) wait4(0x0, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3, 0x4}, {0x0, 0xff}, {0x4, 0x0, 0x2, 0x87ea}, {0x1, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x40}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r5, r6, 0x1, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0xffff, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x4, "fe1d8e7fd17352a635b10000000caa0000000975001000"}}) lchown(0x0, 0xffffffffffffffff, 0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) gettimeofday(0x0, &(0x7f0000000140)) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000300c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400000000000000000000000000000000000c00028005000100000000000600034000000000080007400000000004"], 0xa0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000040018000680140004"], 0xac}}, 0x0) lseek(r0, 0x5, 0x3) 0s ago: executing program 1 (id=1993): syz_open_dev$dri(0x0, 0xa, 0x0) syz_mount_image$exfat(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='iocharset=cp861,namecase=1,namecase=1,zero_size_dir,fmask=00000000000000000000253,zero_size_dir,fmask=00000000000000000003752,time_offset=0x0000000000000003,allow_utime=00000000000000000000004,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00b12d6adcb8fc0f942fc0a2be21f8b10d77556e7f47d1a94403fd0ef78ba5a76567a5f20ee0f64a58e24dc242e7c80f932b3183f0e2cf47ab70d29b0fb322510913e0e7cb1636a1f811e400600e17c257d87eaeb0ba089a70d13f5e"], 0x1, 0x152e, &(0x7f0000004a00)="$eJzs3AucTtX6OPDnWWvtMSTeJrkMa61n8yaXZZIklyS5JEmSJLklJE1yJCExhCQNSUguQxJDSC4T0rjf75eEJkmTJCEhlfX/TMzf6dS5/M7pHOdz5vl+Pu/Het61n7WfvZ95vXtvl6+7D6/TrG7NJkQE/xK88EsSAMQCwGAAyA8AAQBUjKsYlzWfW2LSv7YT9se6P/VyV8AuJ+5/zsb9z9m4/zkb9z9n4/7nbNz/nI37n7Nx/xnLybbOKHIVv3Lui5//52T8/f8/JLPc+M/Xl7umB0DMP5rC/c/ZuP//s4J/ZCPuf87G/c+pYi93Aey/AH/+c4Jcf3WG+5+zcf8Zy8ku9/Pny/2CyH/ZOTiW+0Jj/v97wb/3+BljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsf+As/4SBQDZ48tdF2OMMcYYY4wxxv44PtflroAxxhhjjDHGGGP/fggCJCgIIAZyQSzkhjwgAOBKyAf5IQJXQRxcDQXgGigIhaAwFIF4KArFQIMBCwQhFIcSEIVroSRcB6WgNJSBsuCgHCTA9VAeboAKcCNUhJugEtwMlaEKVIVqcAtUh1uhBtwGNeF2qAW1oQ7UhTugHtwJ9eEuaAB3Q0O4BxrBvdAY7oMmcD80hQegGTwIzeEhaAEtoRW0hjb/VP6z0Buegz7QF5KgH/SH52EADIRB8AIMhhdhCLwEQ+FlSIZhMBxegRHwKoyE12AUjIYx8DqMhTdgHIyHCTARUmASTIY3YQq8BVPhbZgG0yEVZsBMeAdmwWyYA+/CXHgP5sF8WAALIQ3eh0WwGJbAB7AUPoR0WAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEXbAbPoI98DHshX2wHz6BDPj0b+fnzu5xdv6Zv8jvgYCAAgUqVBiDMRiLsZgH82BezIv5MB9GMIJxGIcFsAAWxIJYGAtjPMZjMSyGBg0SEhbH4hjFKJbEklgKS2EZLIMOHSZgApbHG7ACVsCKWBErYSWsjFWwClbDalgdq2MNrIE1sSbWwlpYB+vgHXgH9sP6WB8bYANsiA2zH09hE2yCTbEpNsNm2BybYwtsga2wFbbBNtgW22I7bIcdsAN2xI7YCTthIiZiZ+yMXbALdsWu2A27YXfsjj2wJ/bMfDYX4HP4HPbFWqIf9sf+OACTcw3CF/AFfBGH4Ev4Er6MyTgMh+Mr+Aq+iiPxNI7C0TgGx2B18QaOw/FIYiKmYApOxsk4BadgVqFv43RMxRk4E2fiLJyNs/FdnIvv4Xs4H+fjQkzDNFyEi3EJLsGleAbTcRkuxxW4ElfhSlyDa3ENrscNuB434SbcgltwG27DHbgDd+Eu/AgVAH6M+3AfJmMGZuABPIAH8SAewkOYiZl4GA/jETyCR/EoHsNjeBxP4Ek8gafwFJ7GM+jlhRP6Ez4d/2XTj0qvSwaRRQklYkSMiBWxIo/II/KKvCKfyCciIiLiRJwoIAqIgqKgKCwKi3gRL4qJYsIII0iEMQAgoiIqSoqSopQoJcqIMsIJJxJEgigvyosKooKoKG4SlcTNorKoItq7aqKaqC46uBriNlFT1BS1RG1RR9QVdUU9UU/UF/VFA9FANBQNRSNxr2gs+uEgvF9kdaaZGIbNxXBsIVqKi4cCbcVIbCfaiw7iUTEaR2En0dYliidEZzEOu4g/ifH4lOgmJmJ38YzoIXqKXuJZ0Vu0c31EXzEV+4n+YjoOEAPFIPGCmIW1xbs4N3cd8bJIFsPEcPGKWIivipHiNTFKjBZjxOtirHhDjBPjxQQxUaSISWKyeFNMEW+JqeJtMU1MF6lihpgp3hGzxGwxR7wr5or3xDwxXywQC0WaeF8sEovFEvGBWCo+FOlimVguVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLnaInWKX2C0+EnvEx2Kv2Cf2i09EhvhUHBCfiYPic3FIfCEyxZfisPhKHBFfi6PiG3FMfCuOixPipPhOnBLfi9PijDgrfhDnxI/iJ/GzOC+8AIlSSCmVDGSMzCVjZW6ZR14h88rg4tm9SsbJq2UBeY0sKAvJwrKIjJdFZTGppZFWkgxlcVlCRuW1sqS8TpaSpWUZWVY6WU4myOtleXmDrCBvlBXlTbKSvFlWllVkVVlN3iKry1slRC7so5asLevIuvIOmQR3yvryLtlA3i0byntkI3mvbCzvk03k/bKpfEA2kw/K5vIh2UK2lK1ka9lGPizbykdkO9ledpCPyo7yMdlJPi4T5ROys8z+aX9KdpNPy+7yGdlD9pS95M/yvPSyj+wroR/I/vJ5OUAOlINiAUC+KIfIl+RQ+bJMlsPkcPmKHCFflSPla3KUHC3HyNflWPmGHCfHywlyokyRk+Rk+aacIt+SU+XbcpqcLlPlDDlIDv5lpTlS/t38N38nf+gve98it8ptcrvcIXfKXXK3/EjukXvkXrlX7pf7ZYbMkAfkAXlQHpSH5CGZKTPlYXlYHpFH5FF5VB6Tx+RxeUL+IL+Tp+T38rQ8I8/IH+Q5eU7+dPEcgEIllFRKBSpG5VKxKrfKo65QedWVKp/KryLqKhWnrlYF1DWqoCqkCqsiKl4VVcWUVkZZRSpUxVUJFVXX4sUfGFVGlVVOlVMJ6vr/S74qqa5TpVTpX+Vn15f0V+pro9qotqqtaqfaqQ6qg+qoOqpOqpNKVImqs+qsuqguqqvqqrqpbqq76q56qB6ql+qleqveqo/qo5JUkuqvnlcD1EA1SL2gBqsX1RA1RA1VQ1WySlbD1XA1Qo1QI9VINUqNUmPUGDVWjVXj1Dg1QU1QKSpFTVaT1RQ1RU1VU9U0NU2lqlQ1U81Us9QsNUfNUXPVXDVPzVML1AKVptLUIrVILTnnvVdLVbpappapFWqFWqVWqTVqjVqn1qkNaoPapDapdLVVbVXb1Xa1U+1Uu9VutUftUXvVXrVf7VcZKkMdUAfUQXVQHVKHVKbKVIfVYXVEHVFH1VF1TB1Tx9VxdVKdVKfUKXVanVZn1Vl1Tp1TP6mf1Hl1PuuyLxCBCFSggpggJogNYoM8QZ4gb5A3yBfkCyJBJIgL4oICwTVBwaBQUDgoEsQHRYNigQ5MYANxsenR4NqgZHBdUCooHZQJygYuKBckBNcH5YMbggrBjUHF4KagUnBzUDmoElQNqgW3BNWDW4MawW1BzeD2oFZQO6gT1A3uCOoFdwb1g7uCBsHdQcPgnqBRcG/QOLgvaBLcHzQNHgiaBQ8GzYOHghZBy6BV0Dpo84eu7/3pQo+4PrqvTtL9dH/9vB6gB+pB+gU9WL+oh+iX9FD9sk7Ww/Rw/YoeoV/VI/VrepQercfo1/VY/YYep8frCXqiTtGT9GT9pp6i39JT9dt6mp6uU/UMPVO/o2fp2XqOflfP1e/peXq+XqAX6jT9vl6kF+sl+gO9VH+o0/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1Nr1d79A79S69W3+k9+iP9V69T+/Xn+gM/ak+oD/TB/Xn+pD+QmfqL/Vh/ZU+or/WR/U3+pj+Vh/XJ/RJ/Z0+pb/Xp/UZfVb/oM/p2Ivd9FkX91lf70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycKWAKmIKmoClsCpt4E2+KmWImCxkyxU1xEzVRU9KUNKVMKVPGlDHOOJNgEkx5U95UMBVMRVPRVDKVTGVT2VQ1Vc0t5hZzq7nV3GZuM7eb201tU9vUNXVNPVPP1Df1TQPTwDQ0DU0j08g0No1NE9PENDVNTTPTzDQ3zU0L08K0Mq1MG9PGtDVtTTvTznQwHUxH09F0Mp1Mokk0nU1n08V0MV1NV9PNdDPdTXfTw/QwvUwv09v0Nn1MH5Nkkkx/098MMAPMIDPIDDaDzRAzxAw1Q02ySTbDzXAzwowwI81IM8qMNmOyLlTNG2acGW8mmIkmxaSYyWaymWKmmKlmqplmpplUk2pmmplmlpll5pg5Zq6Za+aZeWaBWWDSTJpZZBaZJWaJWWqWmnSTbpab5WalWWlWm9VmrVlr1pv1ZiNsNJvNZrPVbDXbzXaz0+w0u81us8fsMXvNXrPf7DcZJsMcMAfMQXPQHDKHTKbJNIfNYXPEHDFHzVFzzBwzx81xc9KcNKfMKXPanDZnzVlzzhS6+H3pTazNbfPYK2xee6XNZ/Pbv4wL2yI23ha1xay2BW2hX8XGWlvKlrZlbFnrbDmbYK//TVzZVrFVbTV7i61ub7U1fhPXs3fa+vYu28DebevaO34VN7T32Eb2QdsYEcC2tE1ta9vMPmib24dsC9vStrKtbUf7mO1kH7eJ9gnb2T75m3iRXWzX2nV2vd1g99p99qz9wR6xX9tz9kfbx/a1g+2Ldoh9yQ61L9tkO+w38Rj7uh1r37Dj7Hg7wU78TTzNTrepdoadad+xs+zs38Rp9n071y6x8+x8u8Au/CXOqmmJ/cAutR/adBvAcrvCrrSr7Gq7JrtWn99uspvtFrvHfmy32x12p91ld2dfCNt9dr/9xGbYT+1h+5U9aD+3h+xRm2m//CXOOr6j9ht7zH5rj9sT9qT9zp6y36vs7Kxj/87+bM9bb4GQgCQpCiiGclEs5aY8dAXlpSspH+WnCF1FcXQ1FaBrqCAVosJUhOKpKBUjTYYsEYVUnEpQlK6l7PLKUFlyVI4S6HoqTzdQBbqRKtJNVIlupspUhapSNbqFqtOtVINuo5p0O9Wi2lSH6tIdVI/upPp0FzWgu6kh3UON6F5qTPdRE7qfmtID1IwepOb0ELWgltSKWlMbepja0iPUjtpTB3qUOtJj1Ikep0R6gjrTk9SF/kRd6SnqRk9Td3qGelBP6kXPUm96jvpQX0qiftSfnqcBNJAG0Qs0mF6kIfQSDaWXKZmG0XB6hUbQqzSSXqNRNJrG0Os0lt6gcTSeJtBESqFJNJnepCn0Fk2lt2kaTadUmkEz6R2aRbNpDr1Lc+k9mkfzaQEtpDR6nxbRYlpCH9BS+pDSaRktpxW0klbRalpDa2kdracNtJE20WbaQltpG22nHbSTdtFu+oj20Me0l/bRfvqEMuhTOkCf0UH6nA7RF5RJX9Jh+oqO0Nd0lL7xfelbOk4n6CR9R6foezpNGVde6NCP9BP9TOfJE4QYilCGKgzCmDBXGBvmDvOEV4R5wyvDfGH+MBJeFcaFV4cFwmvCgmGhsHBYJIwPi4bFQh2a0IYUhmHxsEQYDa8NS4bXhaXC0mGZsGzownJhQnh9WD68IawQ3hhWDG8KK4U3h5XDKuGDd1cLbwmrh7eGNcLbwprh7WGtsHZYJ6wb3hHWC+8M64d3hQ3Cu8MK4T1ho/DesHF4X9gkvD9sGj4QNgsfDJuHD4UtwpZhq7B12CZ8OGwbPhK2C9uHHcJHw47hY2Gn8PEwMXwi7Bw++cv8PYv/+nxS2C/sHz4fPh96f5dcEF0YTYu+H10UXRxdEv0gujT6YTQ9uiy6PLoiujK6Kro6uia6Nrouuj66Iboxuim6Obol6n3dXODQCSedcoGLcblcrMvt8rgrXF53pcvn8ruIu8rFuatdAXeNK+gKucKuiIt3RV0xp51x1pELXXFXwkXdta6ku86VcqVdGVfWOVfOJbjWro1r49q6R1w71951cI+6R91j7jH3uHvcPeE6uyddF/cn19U95bq5p93T7hnXw/V0vdyzrreblO9Cx5Ncf9ffDXAD3CA3yA12g90QN8QNdUNdskt2w91wN8KNcCPdSDfKjXJj3Bg31o1149w4N8FNcCkuxU12k90UN8VNdVPdNDfNpbpUN9PNdLPcLFd99oW9zHPz3AK3wKW5NLfIZV0zLnFL3VKX7tLdcrfcrXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e10O91ut9vtcXvcXp//wqIuwx1wB9xBd9Adcl+4TPelO+y+ckfc1+6o+8Ydc9+64+6EO+m+c6fc9+60O+POuh/cOfej+8n97M4771IikyKTI29GpkTeikyNvB2ZFpkeSY3MiMyMvBOZFZkdmRN5NzI38l5kXmR+ZEFkYSQt8n5kUWRxZEnkg8jSyIeR9MiyyPLIisjKyKqI90W3h764L+Gj/lpf0l/nS/nSvowv650v5xP89b68v8FX8Df6iv4mX8nf7Cv7Kr6qf8i38C19K9/at/EP+7b+Ed/Ot/cd/KO+o3/Md/KP+0T/hO/sn/Rd/J98V/+U7+af9t39M76H7+l7+Wd9b/+c7+P7+iTfz/f3z/sBfqAf5F/wg/2Lfoh/yQ/1L/tkP8wP96/4Ef5VP9K/5kf50X5MzOt+bPYtMkz0KX6Sn+zf9FP8W36qf9tP89N9qp/hZ/p3/Cw/28/x7/q5/j0/z8/3C/xCn+bf94v8Yr/Ef+CX+g99ul+W/cDRr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2H/k9/mO/1+/z+/0nPsN/6g/4z/xB/7k/5L/wmf5Lf9h/5Y/4r/1R/40/5r/1x/0Jf9J/50/57/1pf8af9T/4c/5H/5P/2Z/nf7PGGGOMMfYPmXRpKH49c+Fxfr/fyRF/tnF/ALhyR5HMS7O5IOuKcmPBC9FAEd8xAgBP9O1+f/arVq2kpKSLW6dLCErMB8j+k6AsMXApXgYd4DFIhPZQ/nfrHyh6nqO/s370JoA8f5YTC5fiS+t/BoBJv7P+w4+OWVQpPBv3N9afD1CqxKWc3HApXgYdfnm+0h4q/JX6C7X9O/Xn/jwFoN2f5eSFS/Gl+hPgEXgSEn+15e/4JvNvzzPGGGOMMcYY+580UFTtmn3/mf03Pn/v/jxeXcrJBZfiv3d/zhhjjDHGGGOMscvvqZ69Hn84MbF91//7oMY/lfUPD5rDv2tlHvzuwHuA7HcUAPyLCwJkDeR/8ii2/Uf2lXzxo/OXUyt/8AH8d7Tyjxhc5t+YGGOMMcYYY3+4Sxf9v35fXa6CGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxHOg/8d+JXe5jZIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxi63/xcAAP//DH307g==") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0xc41, 0x5) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xfff80000, 0x1, 0x3e8, 0x2, 0xfffffffd, 0x20, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpgrp(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800060000000000000070000000000000000000", @ANYRES32=0x0, @ANYBLOB="0108020003110000280012800b00010065727370616e0000180002800500170000000000050016000200000004001200"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4044884) openat$uinput(0xffffffffffffff9c, 0x0, 0x862ba3c5b1cda621, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): [ T9613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.713267][ T8724] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x1 [ 459.929050][ T9613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.297210][ T8724] creative-sb0540 0003:041E:3100.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 460.340889][ T9633] 9p: Bad value for 'wfdno' [ 460.435750][ T9635] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 460.542971][ T8723] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 460.698870][ T8723] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 460.712655][ T8723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.731234][ T8723] usb 3-1: Product: syz [ 460.741567][ T8723] usb 3-1: Manufacturer: syz [ 460.760332][ T8723] usb 3-1: SerialNumber: syz [ 461.210857][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.305037][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.362823][ T8723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 462.536220][ T24] usb 7-1: USB disconnect, device number 7 [ 462.599673][ T8723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 462.658948][ T9653] loop4: detected capacity change from 0 to 2048 [ 462.684139][ T9653] EXT4-fs (loop4): Cannot use DAX on a filesystem that may contain inline data [ 465.564648][ T8723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 465.651405][ T8723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 465.689367][ T8723] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 465.845140][ T8723] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 465.856735][ T9673] loop2: detected capacity change from 0 to 512 [ 465.875832][ T9673] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 465.973070][ T8723] usb 3-1: USB disconnect, device number 8 [ 466.006200][ T9673] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1055: invalid indirect mapped block 32768 (level 2) [ 466.137074][ T9673] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 466.140952][ T9673] EXT4-fs (loop2): Remounting filesystem read-only [ 466.150221][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 466.150243][ C0] EXT4-fs (loop2): initial error at time 1785825291: ext4_free_branches:1023: inode 16 [ 466.150273][ C0] EXT4-fs (loop2): last error at time 1785825291: ext4_free_branches:1023: inode 16 [ 466.285894][ T9673] EXT4-fs (loop2): 1 orphan inode deleted [ 466.315481][ T9673] EXT4-fs (loop2): 1 truncate cleaned up [ 466.385932][ T9673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.509545][ T9673] EXT4-fs (loop2): shut down requested (1) [ 466.827588][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.857263][ T9690] loop4: detected capacity change from 0 to 512 [ 468.665828][ T8723] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 468.684095][ T9690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 468.754190][ T9690] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1062: bad orphan inode 131083 [ 468.797727][ T9703] FAULT_INJECTION: forcing a failure. [ 468.797727][ T9703] name failslab, interval 1, probability 0, space 0, times 0 [ 468.856501][ T9690] loop4: lost filesystem error report for type 5 error -117 [ 468.862450][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 468.876222][ C0] EXT4-fs (loop4): initial error at time 1785825293: ext4_orphan_get:1425 [ 468.882649][ T9703] CPU: 1 UID: 0 PID: 9703 Comm: syz.2.1064 Not tainted syzkaller #0 PREEMPT(full) [ 468.882679][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 468.882694][ T9703] Call Trace: [ 468.882704][ T9703] [ 468.882714][ T9703] dump_stack_lvl+0xe8/0x150 [ 468.882757][ T9703] should_fail_ex+0x40c/0x560 [ 468.882797][ T9703] should_failslab+0xa8/0x100 [ 468.882839][ T9703] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 468.882872][ T9703] ? local_lock_release+0x9c/0x160 [ 468.882902][ T9703] ? __alloc_skb+0x1d7/0x7a0 [ 468.882927][ T9703] ? __alloc_skb+0x1d7/0x7a0 [ 468.882961][ T9703] __alloc_skb+0x1d7/0x7a0 [ 468.882993][ T9703] netlink_sendmsg+0x5d4/0xb40 [ 468.883039][ T9703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.883077][ T9703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.883107][ T9703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 468.883139][ T9703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.883172][ T9703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.883204][ T9703] sock_sendmsg_nosec+0x13a/0x180 [ 468.883247][ T9703] ____sys_sendmsg+0x54e/0x850 [ 468.883291][ T9703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.883325][ T9703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.883360][ T9703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.883389][ T9703] ? import_iovec+0x73/0xa0 [ 468.883419][ T9703] ___sys_sendmsg+0x2a5/0x360 [ 468.883449][ T9703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.883478][ T9703] ? __lock_acquire+0x683/0x2cf0 [ 468.883519][ T9703] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.883592][ T9703] ? __fget_files+0x2a/0x420 [ 468.883627][ T9703] ? srso_alias_return_thunk+0x5/0xfbef5 [ 468.883656][ T9703] ? __fget_files+0x3a2/0x420 [ 468.883703][ T9703] __x64_sys_sendmsg+0x1b1/0x290 [ 468.883739][ T9703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 468.883792][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.883820][ T9703] do_syscall_64+0x174/0x580 [ 468.883853][ T9703] ? trace_irq_disable+0x3b/0x140 [ 468.883893][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.883919][ T9703] RIP: 0033:0x7f87f8b9e019 [ 468.883941][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.883962][ T9703] RSP: 002b:00007f87f9b15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.883987][ T9703] RAX: ffffffffffffffda RBX: 00007f87f8e25fa0 RCX: 00007f87f8b9e019 [ 468.884005][ T9703] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 468.884025][ T9703] RBP: 00007f87f9b15090 R08: 0000000000000000 R09: 0000000000000000 [ 468.884041][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.884055][ T9703] R13: 00007f87f8e26038 R14: 00007f87f8e25fa0 R15: 00007ffdc80d3878 [ 468.884094][ T9703] [ 468.997201][ T9705] loop2: detected capacity change from 0 to 512 [ 469.001524][ C0] EXT4-fs (loop4): last error at time 1785825293: ext4_orphan_get:1425 [ 469.032490][ T8723] usb 2-1: Using ep0 maxpacket: 32 [ 469.035282][ T9690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.039073][ T8723] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 469.760075][ T8723] usb 2-1: config 0 has no interface number 0 [ 469.784668][ T8723] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.859602][ T8723] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 469.934481][ T8723] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 469.989106][ T8723] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 470.030882][ T9707] loop1: detected capacity change from 0 to 512 [ 470.064563][ T8723] usb 2-1: string descriptor 0 read error: -71 [ 470.099385][ T8723] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 470.136249][ T8723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.156392][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.199837][ T8723] usb 2-1: config 0 descriptor?? [ 470.234867][ T8723] usb 2-1: can't set config #0, error -71 [ 470.259007][ T8723] usb 2-1: USB disconnect, device number 7 [ 470.308549][ T9709] openvswitch: netlink: Duplicate key (type 6). [ 470.643323][ T9714] loop0: detected capacity change from 0 to 1024 [ 472.264966][ T9717] x_tables: duplicate underflow at hook 1 [ 473.572548][ T8253] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 473.732632][ T8253] usb 5-1: Using ep0 maxpacket: 8 [ 473.764216][ T8253] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 473.803415][ T8253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.835295][ T8253] usb 5-1: Product: syz [ 473.851486][ T8253] usb 5-1: Manufacturer: syz [ 473.863020][ T8253] usb 5-1: SerialNumber: syz [ 473.895183][ T8253] usb 5-1: config 0 descriptor?? [ 473.935057][ T8253] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 473.943813][ T9738] loop1: detected capacity change from 0 to 2048 [ 473.947267][ T9740] loop6: detected capacity change from 0 to 256 [ 473.976591][ T9740] exfat: Deprecated parameter 'namecase' [ 474.002696][ T9740] exfat: Deprecated parameter 'namecase' [ 474.039546][ T9740] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 474.142436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 474.222431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 476.962717][ T8253] gspca_sonixj: reg_r err -110 [ 476.967594][ T8253] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 477.002670][ T9724] loop4: detected capacity change from 0 to 4096 [ 477.067587][ T9754] loop0: detected capacity change from 0 to 128 [ 477.106458][ T9724] ntfs3(loop4): Failed to load $Extend (-22). [ 477.126012][ T9754] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 477.138406][ T9724] ntfs3(loop4): Failed to initialize $Extend. [ 477.167570][ T9754] hpfs: filesystem error: improperly stopped [ 477.188139][ T9754] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 477.218830][ T9754] hpfs: You really don't want any checks? You are crazy... [ 477.250198][ T9754] hpfs: Code page index out of array [ 477.295210][ T9754] hpfs: code page support is disabled [ 479.043753][ T9754] hpfs: hpfs_map_4sectors(): unaligned read [ 479.104116][ T9754] hpfs: hpfs_map_4sectors(): unaligned read [ 479.169551][ T9754] hpfs: filesystem error: unable to find root dir [ 479.247999][ T24] usb 5-1: USB disconnect, device number 10 [ 480.028680][ T9791] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 480.069147][ T9789] binder: BINDER_SET_CONTEXT_MGR already set [ 481.787864][ T9789] binder: 9782:9789 ioctl 4018620d 200000004a80 returned -16 [ 481.938972][ T9786] loop0: detected capacity change from 0 to 512 [ 481.953133][ T9786] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 481.973808][ T9786] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1093: bad orphan inode 131083 [ 481.987253][ T9786] loop0: lost filesystem error report for type 5 error -117 [ 481.994733][ T9786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.375156][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.755811][ T9807] loop6: detected capacity change from 0 to 4096 [ 482.806595][ T9807] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 482.910668][ T9807] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 482.932747][ T8253] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 482.951987][ T9807] ntfs3(loop6): Failed to load $Extend (-22). [ 482.970638][ T9807] ntfs3(loop6): Failed to initialize $Extend. [ 483.008885][ T9815] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1100'. [ 483.274809][ T8253] usb 3-1: not running at top speed; connect to a high speed hub [ 483.284686][ T8253] usb 3-1: config 252 has an invalid interface number: 6 but max is 0 [ 483.293500][ T8253] usb 3-1: config 252 has no interface number 0 [ 483.299815][ T8253] usb 3-1: config 252 interface 6 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 483.402154][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 484.038490][ T8253] usb 3-1: config 252 interface 6 has no altsetting 0 [ 484.047902][ T8253] usb 3-1: New USB device found, idVendor=05c6, idProduct=9076, bcdDevice=92.73 [ 484.057175][ T8253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.065449][ T8253] usb 3-1: Product: ь [ 484.069595][ T8253] usb 3-1: Manufacturer: ⎞䛛ᷢ墲ᒶ놠㶎旋얛懊鲈⑤埍悎鈯紉ꑄ괨펹ᗓℶ穢啵鬪琪ዽṥ힝㘖큽᫲衽孰無웭睦뉁ş鏙笁즇䈺㥑ᵋ䓫犠蔻൹ [ 484.088073][ T8253] usb 3-1: SerialNumber: 蓅諳퐅鰌ᐅ蕬⺏녶릇㤂ꤲ糑貭鶑ꨠ鿨焻谬왡ᛧḆ窍랎⏮኶闇賈印㇠ꀌ뙦䠧ࢯꄉ푦퀫ೈ䭤ᑀㄷ觑졀洫ꢀ᠕ꑘ祂䓉䜐縧譄姘쇠롆왙ɲ鲑䌏꓃ୈ鈰ࠡ륥Ⴕ餘色ꡎ쩓忡⟏쬬礩쥫䅎睭ᵧ钉竴᳃婥ࡐ⦊À쨼ꋠ艝឴㽮ꌵ뙢밌怿 [ 485.283870][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 485.737546][ T8253] usb 3-1: USB disconnect, device number 9 [ 486.880645][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.888089][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.118816][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.145896][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.685469][ T7825] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.820455][ T7825] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.855259][ T7825] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.959898][ T1177] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.842945][ T8738] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 491.291611][ T9890] loop2: detected capacity change from 0 to 1024 [ 491.820749][ T9891] loop1: detected capacity change from 0 to 2048 [ 491.997237][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1120'. [ 492.015995][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1120'. [ 492.242118][ T9885] loop0: detected capacity change from 0 to 512 [ 492.441586][ T9885] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 492.991628][ T9885] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1116: bad orphan inode 131083 [ 493.004973][ T9902] loop2: detected capacity change from 0 to 512 [ 493.034379][ T9885] loop0: lost filesystem error report for type 5 error -117 [ 493.051605][ T9885] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.222140][ T9917] loop4: detected capacity change from 0 to 512 [ 495.261017][ T9917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 495.277764][ T9920] FAULT_INJECTION: forcing a failure. [ 495.277764][ T9920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.345848][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.1.1128 Not tainted syzkaller #0 PREEMPT(full) [ 495.345878][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 495.345889][ T9920] Call Trace: [ 495.345897][ T9920] [ 495.345905][ T9920] dump_stack_lvl+0xe8/0x150 [ 495.345938][ T9920] should_fail_ex+0x40c/0x560 [ 495.345968][ T9920] _copy_from_iter+0x1d3/0x1660 [ 495.345995][ T9920] ? kmem_cache_alloc_node_noprof+0x1f1/0x610 [ 495.346021][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346043][ T9920] ? rcu_is_watching+0x15/0xb0 [ 495.346061][ T9920] ? trace_kmem_cache_alloc+0x29/0xe0 [ 495.346087][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346108][ T9920] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 495.346133][ T9920] ? __pfx__copy_from_iter+0x10/0x10 [ 495.346159][ T9920] ? __alloc_skb+0x276/0x7a0 [ 495.346179][ T9920] ? __alloc_skb+0x276/0x7a0 [ 495.346205][ T9920] ? netlink_sendmsg+0x650/0xb40 [ 495.346228][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346250][ T9920] ? skb_put+0x112/0x210 [ 495.346275][ T9920] netlink_sendmsg+0x6c0/0xb40 [ 495.346308][ T9920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.346336][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346357][ T9920] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.346381][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346405][ T9920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.346429][ T9920] sock_sendmsg_nosec+0x13a/0x180 [ 495.346461][ T9920] ____sys_sendmsg+0x54e/0x850 [ 495.346489][ T9920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.346515][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346541][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346562][ T9920] ? import_iovec+0x73/0xa0 [ 495.346584][ T9920] ___sys_sendmsg+0x2a5/0x360 [ 495.346606][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346627][ T9920] ? __lock_acquire+0x683/0x2cf0 [ 495.346658][ T9920] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.346713][ T9920] ? __fget_files+0x2a/0x420 [ 495.346739][ T9920] ? srso_alias_return_thunk+0x5/0xfbef5 [ 495.346760][ T9920] ? __fget_files+0x3a2/0x420 [ 495.346800][ T9920] __x64_sys_sendmsg+0x1b1/0x290 [ 495.346827][ T9920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.346867][ T9920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.346887][ T9920] do_syscall_64+0x174/0x580 [ 495.346912][ T9920] ? trace_irq_disable+0x3b/0x140 [ 495.346942][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.346961][ T9920] RIP: 0033:0x7ff80519e019 [ 495.346978][ T9920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.346993][ T9920] RSP: 002b:00007ff8060a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.347013][ T9920] RAX: ffffffffffffffda RBX: 00007ff805425fa0 RCX: 00007ff80519e019 [ 495.347026][ T9920] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 495.347038][ T9920] RBP: 00007ff8060a5090 R08: 0000000000000000 R09: 0000000000000000 [ 495.347050][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.347061][ T9920] R13: 00007ff805426038 R14: 00007ff805425fa0 R15: 00007ffddc188d28 [ 495.347089][ T9920] [ 495.527664][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.747922][ T9917] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1127: invalid indirect mapped block 32768 (level 2) [ 495.812574][ T9917] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 495.822475][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 495.838391][ C1] EXT4-fs (loop4): initial error at time 1785825320: ext4_free_branches:1023: inode 16 [ 495.848171][ C1] EXT4-fs (loop4): last error at time 1785825320: ext4_free_branches:1023: inode 16 [ 495.858486][ T9917] EXT4-fs (loop4): Remounting filesystem read-only [ 495.865555][ T9917] EXT4-fs (loop4): 1 orphan inode deleted [ 495.902497][ T9917] EXT4-fs (loop4): 1 truncate cleaned up [ 495.941231][ T9917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.991158][ T9917] EXT4-fs (loop4): shut down requested (1) [ 496.074998][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.236737][ T9932] fuse: Bad value for 'fd' [ 496.246308][ T9929] loop1: detected capacity change from 0 to 512 [ 496.274492][ T9932] fuse: Bad value for 'fd' [ 496.307159][ T9932] 9p: Bad value for 'rfdno' [ 496.308517][ T9929] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 496.330688][ T9928] loop0: detected capacity change from 0 to 4096 [ 496.436378][ T9929] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1132: bad orphan inode 131083 [ 496.487910][ T9929] loop1: lost filesystem error report for type 5 error -117 [ 496.495893][ T9929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.783657][ T9938] loop4: detected capacity change from 0 to 1024 [ 498.425989][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1137'. [ 499.235648][ T9948] loop0: detected capacity change from 0 to 512 [ 499.471075][ T9948] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 499.652540][ T9964] loop4: detected capacity change from 0 to 1024 [ 500.322835][ T9948] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1136: bad orphan inode 131083 [ 500.366771][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.499639][ T9948] loop0: lost filesystem error report for type 5 error -117 [ 500.502524][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 500.516363][ C0] EXT4-fs (loop0): initial error at time 1785825325: ext4_orphan_get:1425 [ 500.524911][ C0] EXT4-fs (loop0): last error at time 1785825325: ext4_orphan_get:1425 [ 500.793433][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.841388][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.202621][ T9948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.355505][ T9972] fuse: Bad value for 'fd' [ 501.487019][ T9980] loop4: detected capacity change from 0 to 512 [ 501.503744][ T9976] loop2: detected capacity change from 0 to 2048 [ 501.519232][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.670459][ T9980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 502.171019][ T9976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.227280][ T9980] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1145: invalid indirect mapped block 32768 (level 2) [ 502.340084][ T9976] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.393587][ T9980] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 502.402439][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 502.418188][ C1] EXT4-fs (loop4): initial error at time 1785825327: ext4_free_branches:1023: inode 16 [ 502.427911][ C1] EXT4-fs (loop4): last error at time 1785825327: ext4_free_branches:1023: inode 16 [ 502.594312][ T9980] EXT4-fs (loop4): Remounting filesystem read-only [ 502.707041][ T9980] EXT4-fs (loop4): 1 orphan inode deleted [ 502.822258][ T9980] EXT4-fs (loop4): 1 truncate cleaned up [ 503.029065][ T9980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.170127][ T9980] EXT4-fs (loop4): shut down requested (1) [ 503.494490][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.583897][ T9990] Set syz1 is full, maxelem 2 reached [ 504.171531][T10001] loop0: detected capacity change from 0 to 1024 [ 505.100561][T10022] overlayfs: missing 'lowerdir' [ 505.973726][T10015] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 505.980277][T10015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 506.022287][ T9976] overlayfs: Failed to create volatile/dirty file. [ 506.068196][T10015] vhci_hcd vhci_hcd.0: Device attached [ 506.168645][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.267356][ T8253] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 506.450140][ T8253] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 506.604049][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 507.293111][T10025] vhci_hcd: connection reset by peer [ 507.366569][T10038] loop2: detected capacity change from 0 to 1024 [ 508.050727][ T5816] vhci_hcd vhci_hcd.4: stop threads [ 508.110399][ T5816] vhci_hcd vhci_hcd.4: release socket [ 508.173155][ T5816] vhci_hcd vhci_hcd.4: disconnect device [ 508.268070][T10043] x_tables: duplicate underflow at hook 1 [ 510.173298][T10054] loop2: detected capacity change from 0 to 512 [ 510.256577][T10054] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 510.448845][T10059] loop4: detected capacity change from 0 to 1024 [ 510.645441][T10054] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1162: invalid indirect mapped block 32768 (level 2) [ 510.864468][T10054] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 510.866705][T10054] EXT4-fs (loop2): Remounting filesystem read-only [ 510.876013][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 510.876041][ C0] EXT4-fs (loop2): initial error at time 1785825335: ext4_free_branches:1023: inode 16 [ 510.876080][ C0] EXT4-fs (loop2): last error at time 1785825335: ext4_free_branches:1023: inode 16 [ 510.968870][T10054] EXT4-fs (loop2): 1 orphan inode deleted [ 510.994947][T10054] EXT4-fs (loop2): 1 truncate cleaned up [ 511.055119][T10054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.443598][T10067] loop0: detected capacity change from 0 to 1024 [ 511.917470][T10054] EXT4-fs (loop2): shut down requested (1) [ 512.047108][ T8253] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 512.244637][T10072] mmap: syz.5.1167 (10072) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 513.052702][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.119498][T10076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 513.263947][T10081] loop0: detected capacity change from 0 to 512 [ 513.337791][T10081] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 513.925203][T10081] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1168: bad orphan inode 131083 [ 514.059098][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 514.076335][T10081] loop0: lost filesystem error report for type 5 error -117 [ 514.082442][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 514.096295][ C1] EXT4-fs (loop0): initial error at time 1785825338: ext4_orphan_get:1425 [ 514.104856][ C1] EXT4-fs (loop0): last error at time 1785825338: ext4_orphan_get:1425 [ 514.123063][T10093] openvswitch: netlink: Duplicate key (type 6). [ 514.149221][T10081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.578473][T10096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 514.585002][T10096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 514.648497][T10099] netlink: 'syz.5.1175': attribute type 1 has an invalid length. [ 514.658392][T10099] netlink: 'syz.5.1175': attribute type 2 has an invalid length. [ 514.693394][T10096] vhci_hcd vhci_hcd.0: Device attached [ 515.034190][ T8723] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 515.103057][ T8723] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 515.294977][T10115] syzkaller0: entered promiscuous mode [ 515.308386][T10115] syzkaller0: entered allmulticast mode [ 515.419984][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.472430][T10101] vhci_hcd: connection reset by peer [ 515.478201][ T6129] vhci_hcd vhci_hcd.4: stop threads [ 515.483985][ T6129] vhci_hcd vhci_hcd.4: release socket [ 515.702586][ T6129] vhci_hcd vhci_hcd.4: disconnect device [ 515.731355][T10119] loop0: detected capacity change from 0 to 512 [ 516.636855][T10119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.840665][T10119] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.552508][ T5744] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 517.571782][T10134] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.579193][T10134] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.664092][T10134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.675605][T10134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.801698][ T6729] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.866761][ T5744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 517.927617][ T6729] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.949124][ T5744] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 517.993494][ T5744] usb 5-1: config 1 has no interface number 0 [ 518.013031][ T5744] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 518.066456][ T5744] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 518.072589][T10119] can0: slcan on ttyS3. [ 518.077834][ T138] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.098412][T10144] loop2: detected capacity change from 0 to 256 [ 518.121818][ T5744] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 518.129256][T10144] exfat: Deprecated parameter 'namecase' [ 518.133939][ T138] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.164052][T10144] exfat: Deprecated parameter 'namecase' [ 518.175941][ T5744] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 518.178026][T10148] ip_tables: iptables: counters copy to user failed while replacing table [ 518.209657][ T5744] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.253019][ T5744] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 518.267435][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.276048][T10144] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 518.278225][ T5744] usb 5-1: Product: syz [ 518.294259][ T5744] usb 5-1: Manufacturer: syz [ 518.301411][ T5744] usb 5-1: SerialNumber: syz [ 518.323010][T10127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 518.337576][T10140] can0 (unregistered): slcan off ttyS3. [ 519.072057][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.233418][T10127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 519.606555][ T5744] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 519.615366][ T5744] cdc_ncm 5-1:1.1: bind() failure [ 519.701197][T10162] overlayfs: failed to clone lowerpath [ 519.712289][T10162] overlayfs: failed to resolve './cgroup.net/devices.allow': -2 [ 519.816582][T10166] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 519.826868][T10127] IPVS: stopping backup sync thread 10166 ... [ 520.047651][T10171] loop2: detected capacity change from 0 to 1024 [ 520.422555][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.422560][ T8723] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 520.727071][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.251211][T10183] loop0: detected capacity change from 0 to 1024 [ 521.896031][T10175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 521.902586][T10175] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 521.916661][T10175] vhci_hcd vhci_hcd.0: Device attached [ 522.032154][ T24] usb 5-1: USB disconnect, device number 12 [ 522.092555][ T5744] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 522.152470][ T5744] usb 35-1: new full-speed USB device number 4 using vhci_hcd [ 522.211157][T10197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1202'. [ 522.231749][ T8724] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 522.263825][T10197] openvswitch: netlink: Duplicate key (type 6). [ 522.430257][T10184] vhci_hcd: connection reset by peer [ 522.499478][ T6129] vhci_hcd vhci_hcd.1: stop threads [ 522.508445][ T6129] vhci_hcd vhci_hcd.1: release socket [ 522.519660][ T6129] vhci_hcd vhci_hcd.1: disconnect device [ 522.704920][T10215] loop0: detected capacity change from 0 to 1024 [ 523.215601][ T8724] usb 3-1: Using ep0 maxpacket: 16 [ 523.228368][ T8724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.310835][T10214] loop4: detected capacity change from 0 to 1024 [ 523.355572][ T8724] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 523.364761][ T8724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.379835][ T8724] usb 3-1: config 0 descriptor?? [ 523.405551][T10214] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 523.458684][T10214] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 523.514917][T10214] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 523.540714][T10214] EXT4-fs (loop4): orphan cleanup on readonly fs [ 523.616685][T10226] loop0: detected capacity change from 0 to 512 [ 523.653356][T10214] EXT4-fs error (device loop4): ext4_read_inode_bitmap:169: comm syz.4.1206: Inode bitmap for bg 0 marked uninitialized [ 523.725052][T10214] loop4: lost filesystem error report for type 5 error -117 [ 523.738646][T10214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.479932][ T8724] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 524.919714][T10188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.978231][T10188] bridge0: port 3(bond1) entered blocking state [ 525.019727][T10188] bridge0: port 3(bond1) entered disabled state [ 525.049254][T10188] bond1: entered allmulticast mode [ 525.088951][T10188] bond1: entered promiscuous mode [ 525.331362][ T8724] usb 3-1: USB disconnect, device number 10 [ 525.692588][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.740881][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 525.796585][T10260] openvswitch: netlink: Duplicate key (type 6). [ 526.777751][T10271] netlink: 'syz.6.1221': attribute type 1 has an invalid length. [ 526.805623][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1221'. [ 526.842169][T10279] loop1: detected capacity change from 0 to 8 [ 526.870425][T10279] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 526.891935][T10277] loop2: detected capacity change from 0 to 2048 [ 526.909522][ T5736] udevd[5736]: incorrect cramfs checksum on /dev/loop1 [ 526.942036][T10269] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 526.948594][T10269] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 526.988311][T10269] vhci_hcd vhci_hcd.0: Device attached [ 527.265065][ T7502] udevd[7502]: incorrect cramfs checksum on /dev/loop1 [ 527.303376][ T5744] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 527.333113][ T6129] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.366172][ T6129] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.405467][ T6129] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.431432][ T6129] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.484157][T10296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.532921][T10296] Set syz0 is full, maxelem 0 reached [ 527.545178][T10281] vhci_hcd: connection closed [ 527.545701][ T6129] vhci_hcd vhci_hcd.4: stop threads [ 527.567455][ T6129] vhci_hcd vhci_hcd.4: release socket [ 527.580919][ T6129] vhci_hcd vhci_hcd.4: disconnect device [ 527.836762][ T5737] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 527.933157][T10303] loop1: detected capacity change from 0 to 2048 [ 527.966315][T10303] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 528.109325][T10306] loop2: detected capacity change from 0 to 8 [ 528.584292][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 528.648285][T10324] openvswitch: netlink: Duplicate key (type 6). [ 529.107594][T10341] loop2: detected capacity change from 0 to 1024 [ 529.220841][T10341] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 529.365349][T10341] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 529.392173][T10341] EXT4-fs (loop2): orphan cleanup on readonly fs [ 529.412144][T10341] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 529.542002][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1242'. [ 529.578657][T10341] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 529.720673][T10341] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1241: Failed to acquire dquot type 0 [ 529.871870][T10341] loop2: lost filesystem error report for type 5 error -117 [ 529.892402][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 529.906332][ C1] EXT4-fs (loop2): initial error at time 1785825354: ext4_acquire_dquot:7041 [ 529.915158][ C1] EXT4-fs (loop2): last error at time 1785825354: ext4_acquire_dquot:7041 [ 530.007870][T10341] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 530.053013][T10341] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 530.079164][T10341] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1241: Failed to acquire dquot type 0 [ 530.120284][T10341] loop2: lost filesystem error report for type 5 error -117 [ 530.122178][T10341] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1241: Freeing blocks not in datazone - block = 0, count = 4096 [ 530.153859][T10341] loop2: lost filesystem error report for type 5 error -117 [ 530.179060][T10341] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 530.205734][T10341] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 530.243225][T10341] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1241: Failed to acquire dquot type 0 [ 530.271748][T10341] loop2: lost filesystem error report for type 5 error -117 [ 530.272174][T10341] EXT4-fs (loop2): 1 orphan inode deleted [ 530.293329][T10341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 530.325627][T10341] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1241: bg 0: block 10: padding at end of block bitmap is not set [ 530.406865][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.628337][T10358] loop2: detected capacity change from 0 to 2048 [ 530.664972][T10358] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 533.175977][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1252'. [ 533.204432][T10375] openvswitch: netlink: Duplicate key (type 6). [ 533.743753][ T8724] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 533.937466][ T8724] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.974340][ T8724] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 534.003817][ T8724] usb 3-1: config 1 has no interface number 0 [ 534.031726][ T8724] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.083820][ T8724] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 534.111416][ T8724] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 534.158188][ T8724] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 534.177231][ T8724] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.205712][T10386] loop1: detected capacity change from 0 to 512 [ 534.217099][ T8724] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 534.233908][ T8724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.244674][T10386] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 534.274606][ T8724] usb 3-1: Product: syz [ 534.297640][ T8724] usb 3-1: Manufacturer: syz [ 534.315688][T10386] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1257: bad orphan inode 131083 [ 534.318733][ T8724] usb 3-1: SerialNumber: syz [ 534.354268][T10389] loop0: detected capacity change from 0 to 512 [ 534.362584][T10386] loop1: lost filesystem error report for type 5 error -117 [ 534.368015][T10389] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 534.387179][T10386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.291772][T10377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 536.528530][T10389] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1258: bad orphan inode 131083 [ 536.811690][T10389] loop0: lost filesystem error report for type 5 error -117 [ 536.822415][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 536.836225][ C0] EXT4-fs (loop0): initial error at time 1785825361: ext4_orphan_get:1425 [ 536.844805][ C0] EXT4-fs (loop0): last error at time 1785825361: ext4_orphan_get:1425 [ 536.863981][T10389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.976164][ T8724] cdc_ncm 3-1:1.1: bind() failure [ 537.482475][ T8724] usb 3-1: USB disconnect, device number 11 [ 537.776205][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.882053][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.967911][T10407] loop2: detected capacity change from 0 to 2048 [ 538.983582][T10415] Mass Storage Function, version: 2009/09/11 [ 538.995722][T10415] LUN: removable file: (no medium) [ 539.044244][T10415] LUN: removable file: (no medium) [ 539.096447][T10415] loop0: detected capacity change from 0 to 64 [ 539.108854][T10415] bfs: Unknown parameter '' [ 539.668868][T10424] loop2: detected capacity change from 0 to 1024 [ 539.853509][T10428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.928930][T10430] Set syz0 is full, maxelem 0 reached [ 541.860108][T10437] loop0: detected capacity change from 0 to 128 [ 541.894090][T10437] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 541.940401][T10437] hpfs: filesystem error: improperly stopped [ 541.958151][T10437] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 541.975467][T10437] hpfs: You really don't want any checks? You are crazy... [ 542.008262][T10437] hpfs: Code page index out of array [ 542.029794][T10437] hpfs: code page support is disabled [ 542.051494][T10437] hpfs: hpfs_map_4sectors(): unaligned read [ 542.063841][T10437] hpfs: hpfs_map_4sectors(): unaligned read [ 542.078388][T10437] hpfs: filesystem error: unable to find root dir [ 542.133158][T10441] loop1: detected capacity change from 0 to 128 [ 542.205167][T10441] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 542.277562][T10441] hpfs: filesystem error: improperly stopped [ 542.311171][T10441] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 542.347207][T10441] hpfs: You really don't want any checks? You are crazy... [ 542.378259][T10441] hpfs: Code page index out of array [ 542.401399][T10441] hpfs: code page support is disabled [ 542.426077][T10441] hpfs: hpfs_map_4sectors(): unaligned read [ 542.453116][T10441] hpfs: hpfs_map_4sectors(): unaligned read [ 542.471492][T10441] hpfs: filesystem error: unable to find root dir [ 542.563392][T10441] hpfs: hpfs_map_4sectors(): unaligned read [ 542.721151][T10447] loop0: detected capacity change from 0 to 512 [ 542.737395][T10446] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1273'. [ 542.754448][T10447] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 542.788015][T10449] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1273'. [ 542.820941][T10447] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1275: bad orphan inode 131083 [ 542.889337][T10447] loop0: lost filesystem error report for type 5 error -117 [ 542.895659][T10447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.958895][T10446] hpfs: hpfs_map_4sectors(): unaligned read [ 543.768680][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.954363][T10456] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 544.019923][T10460] loop0: detected capacity change from 0 to 512 [ 544.043579][T10460] EXT4-fs: Ignoring removed bh option [ 544.062432][T10460] EXT4-fs: Ignoring removed mblk_io_submit option [ 544.084516][T10456] CIFS: Attempting to mount //127.0.0.1/share [ 544.096461][T10460] EXT4-fs: Ignoring removed orlov option [ 544.125672][T10460] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 544.176047][T10460] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 544.228748][T10460] EXT4-fs (loop0): orphan cleanup on readonly fs [ 544.262958][T10460] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 544.286443][T10460] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 544.335781][T10460] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1277: Failed to acquire dquot type 1 [ 544.383836][T10460] loop0: lost filesystem error report for type 5 error -5 [ 544.384970][T10460] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1277: Invalid block bitmap block 0 in block_group 0 [ 544.392414][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 544.392437][ C0] EXT4-fs (loop0): last error at time 1785825369: ext4_acquire_dquot:7041 [ 544.489234][T10460] loop0: lost filesystem error report for type 5 error -117 [ 544.498491][T10460] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1277: Invalid block bitmap block 0 in block_group 0 [ 544.563175][T10460] loop0: lost filesystem error report for type 5 error -117 [ 544.569849][T10460] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1277: Invalid block bitmap block 0 in block_group 0 [ 544.622144][T10460] loop0: lost filesystem error report for type 5 error -117 [ 544.647785][T10460] Quota error (device loop0): write_blk: dquota write failed [ 544.695592][T10460] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 544.724253][T10460] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1277: Failed to acquire dquot type 1 [ 544.733187][T10456] CIFS: VFS: Error connecting to socket. Aborting operation. [ 544.752975][T10456] CIFS: VFS: cifs_mount failed w/return code = -4 [ 544.771180][T10460] loop0: lost filesystem error report for type 5 error -28 [ 544.808052][T10460] Quota error (device loop0): write_blk: dquota write failed [ 545.939679][T10460] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 546.144161][T10460] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.1277: Failed to acquire dquot type 1 [ 546.195689][T10460] loop0: lost filesystem error report for type 5 error -28 [ 546.197477][T10460] EXT4-fs (loop0): 1 orphan inode deleted [ 546.264999][T10460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.352230][T10460] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.1277: iget: bad i_size value: 360287970189639690 [ 546.469097][T10479] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 546.475678][T10479] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 546.503951][T10488] loop1: detected capacity change from 0 to 2048 [ 546.543296][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.569446][T10488] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 546.645120][T10479] vhci_hcd vhci_hcd.0: Device attached [ 546.862568][ T8724] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 546.952911][ T8724] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 546.962838][T10499] loop2: detected capacity change from 0 to 128 [ 546.987845][T10499] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 547.035922][T10499] hpfs: filesystem error: improperly stopped [ 547.059105][T10499] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 547.090120][T10499] hpfs: You really don't want any checks? You are crazy... [ 547.118462][T10499] hpfs: Code page index out of array [ 547.138458][T10499] hpfs: code page support is disabled [ 547.153210][T10499] hpfs: hpfs_map_4sectors(): unaligned read [ 547.169958][T10499] hpfs: hpfs_map_4sectors(): unaligned read [ 547.185721][T10499] hpfs: filesystem error: unable to find root dir [ 547.204868][T10490] vhci_hcd: connection reset by peer [ 547.220152][ T6729] vhci_hcd vhci_hcd.4: stop threads [ 547.230210][ T6729] vhci_hcd vhci_hcd.4: release socket [ 547.254469][ T6729] vhci_hcd vhci_hcd.4: disconnect device [ 547.590045][T10502] loop2: detected capacity change from 0 to 2048 [ 547.671667][T10502] loop2: p1 p2 p3 [ 547.671667][T10502] p1: [ 547.698623][T10502] loop2: p1 size 16779263 extends beyond EOD, truncated [ 547.714962][T10502] loop2: p2 size 458752 extends beyond EOD, truncated [ 547.754220][T10502] loop2: p3 start 3036741376 is beyond EOD, truncated [ 547.997222][T10506] loop4: detected capacity change from 0 to 512 [ 548.083310][T10506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 549.361222][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 549.381042][ T7502] udevd[7502]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 549.911668][T10506] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1289: bad orphan inode 131083 [ 550.076211][T10506] loop4: lost filesystem error report for type 5 error -117 [ 550.091978][T10506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.185071][ T8724] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 552.225628][ T5617] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.354251][T10553] loop0: detected capacity change from 0 to 2048 [ 552.386955][T10553] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 554.796787][T10557] loop1: detected capacity change from 0 to 40427 [ 554.840232][T10557] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 554.867496][T10557] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 555.223482][T10557] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 556.912078][T10599] loop2: detected capacity change from 0 to 4096 [ 557.175973][T10599] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 557.328013][T10599] ntfs3(loop2): Failed to load $Extend (-22). [ 557.391021][T10599] ntfs3(loop2): Failed to initialize $Extend. [ 557.917099][T10608] loop4: detected capacity change from 0 to 1024 [ 558.649012][T10618] loop4: detected capacity change from 0 to 256 [ 559.051805][ T138] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.081992][T10623] loop1: detected capacity change from 0 to 1024 [ 559.140711][ T138] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.159593][T10618] exfat: Deprecated parameter 'namecase' [ 559.202324][T10618] exfat: Deprecated parameter 'namecase' [ 559.220683][ T138] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.331236][ T8702] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.341169][T10618] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 561.570117][T10639] loop1: detected capacity change from 0 to 512 [ 561.627947][T10643] loop0: detected capacity change from 0 to 512 [ 561.669111][T10643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 561.720043][T10643] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1331: bad orphan inode 131083 [ 561.756160][T10643] loop0: lost filesystem error report for type 5 error -117 [ 561.762433][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 561.776235][ C0] EXT4-fs (loop0): initial error at time 1785825386: ext4_orphan_get:1425 [ 561.784791][ C0] EXT4-fs (loop0): last error at time 1785825386: ext4_orphan_get:1425 [ 561.819962][T10643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.417996][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.425941][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.488657][T10654] loop2: detected capacity change from 0 to 512 [ 562.561903][T10654] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 563.186548][T10654] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1336: invalid indirect mapped block 32768 (level 2) [ 563.312553][T10654] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 563.313000][T10654] EXT4-fs (loop2): Remounting filesystem read-only [ 563.328699][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 563.328722][ C0] EXT4-fs (loop2): initial error at time 1785825388: ext4_free_branches:1023: inode 16 [ 563.328758][ C0] EXT4-fs (loop2): last error at time 1785825388: ext4_free_branches:1023: inode 16 [ 563.355116][T10654] EXT4-fs (loop2): 1 orphan inode deleted [ 563.362132][T10654] EXT4-fs (loop2): 1 truncate cleaned up [ 563.447689][T10654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.536078][T10654] EXT4-fs (loop2): shut down requested (1) [ 563.719435][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.612840][ T8724] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 565.785955][ T8724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.828713][ T8724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.860468][ T8724] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 565.892744][ T8724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.933446][ T8724] usb 3-1: config 0 descriptor?? [ 566.923413][T10675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.943403][T10675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.061544][T10675] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 567.466983][T10675] loop2: detected capacity change from 0 to 1024 [ 567.572681][T10675] EXT4-fs: Invalid want_extra_isize 7 [ 569.016221][ T8724] usbhid 3-1:0.0: can't add hid device: -71 [ 569.023096][ T8724] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 569.072684][ T8724] usb 3-1: USB disconnect, device number 12 [ 569.232288][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.342920][ T5744] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 569.515310][T10720] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 569.517632][ T5744] usb 2-1: not running at top speed; connect to a high speed hub [ 569.521871][T10720] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 569.568603][ T5744] usb 2-1: config 252 has an invalid interface number: 6 but max is 0 [ 569.577630][T10720] vhci_hcd vhci_hcd.0: Device attached [ 569.665456][ T5744] usb 2-1: config 252 has no interface number 0 [ 569.712727][ T5744] usb 2-1: config 252 interface 6 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 569.746828][ T5744] usb 2-1: config 252 interface 6 has no altsetting 0 [ 569.922348][ T5744] usb 2-1: New USB device found, idVendor=05c6, idProduct=9076, bcdDevice=92.73 [ 569.931838][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.941677][ T5744] usb 2-1: Product: ь [ 569.948369][ T5744] usb 2-1: Manufacturer: ⎞䛛ᷢ墲ᒶ놠㶎旋얛懊鲈⑤埍悎鈯紉ꑄ괨펹ᗓℶ穢啵鬪琪ዽṥ힝㘖큽᫲衽孰無웭睦뉁ş鏙笁즇䈺㥑ᵋ䓫犠蔻൹ [ 570.139691][T10730] loop2: detected capacity change from 0 to 1024 [ 570.743140][ T8738] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 570.750056][ T5744] usb 2-1: SerialNumber: 蓅諳퐅鰌ᐅ蕬⺏녶릇㤂ꤲ糑貭鶑ꨠ鿨焻谬왡ᛧḆ窍랎⏮኶闇賈印㇠ꀌ뙦䠧ࢯꄉ푦퀫ೈ䭤ᑀㄷ觑졀洫ꢀ᠕ꑘ祂䓉䜐縧譄姘쇠롆왙ɲ鲑䌏꓃ୈ鈰ࠡ륥Ⴕ餘色ꡎ쩓忡⟏쬬礩쥫䅎睭ᵧ钉竴᳃婥ࡐ⦊À쨼ꋠ艝឴㽮ꌵ뙢밌怿 [ 570.802483][ T8738] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 570.870589][T10721] vhci_hcd: connection reset by peer [ 570.888103][ T7825] vhci_hcd vhci_hcd.0: stop threads [ 571.026127][ T7825] vhci_hcd vhci_hcd.0: release socket [ 571.046021][ T5744] usb 2-1: USB disconnect, device number 8 [ 571.074129][ T7825] vhci_hcd vhci_hcd.0: disconnect device [ 571.423162][T10744] loop0: detected capacity change from 0 to 512 [ 571.431065][T10744] EXT4-fs (loop0): can't mount with both data=journal and dax [ 573.860192][T10754] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1368'. [ 573.906328][T10750] loop1: detected capacity change from 0 to 512 [ 573.964749][T10750] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 574.014876][T10757] loop2: detected capacity change from 0 to 1024 [ 574.041725][T10750] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1367: bad orphan inode 131083 [ 574.082648][T10750] loop1: lost filesystem error report for type 5 error -117 [ 574.087406][T10750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.370509][T10764] loop2: detected capacity change from 0 to 512 [ 574.395302][T10764] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 574.525089][T10764] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.1371: corrupted xattr entries [ 574.564005][T10771] loop4: detected capacity change from 0 to 2048 [ 574.617588][T10764] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 574.622403][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 574.638011][ C0] EXT4-fs (loop2): initial error at time 1785825399: xattr_find_entry:337: inode 15 [ 574.647431][ C0] EXT4-fs (loop2): last error at time 1785825399: xattr_find_entry:337: inode 15 [ 574.692621][T10764] EXT4-fs (loop2): Remounting filesystem read-only [ 574.723856][T10764] EXT4-fs (loop2): 1 truncate cleaned up [ 574.766374][T10764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.866055][T10764] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.000123][T10782] PKCS7: Unknown OID: [4] (bad) [ 575.036074][T10782] PKCS7: Only support pkcs7_signedData type [ 575.343849][T10785] loop0: detected capacity change from 0 to 1024 [ 575.972694][ T8738] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 576.173621][T10796] loop0: detected capacity change from 0 to 256 [ 576.219127][T10796] exfat: Deprecated parameter 'namecase' [ 576.256706][T10796] exfat: Deprecated parameter 'namecase' [ 576.357448][T10796] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 576.408695][T10799] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 576.415236][T10799] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 576.445857][T10799] vhci_hcd vhci_hcd.0: Device attached [ 576.458643][T10801] vhci_hcd: connection closed [ 576.458953][ T8702] vhci_hcd vhci_hcd.4: stop threads [ 576.478085][ T8702] vhci_hcd vhci_hcd.4: release socket [ 576.491959][ T8702] vhci_hcd vhci_hcd.4: disconnect device [ 577.356807][T10812] FAULT_INJECTION: forcing a failure. [ 577.356807][T10812] name failslab, interval 1, probability 0, space 0, times 0 [ 577.392529][T10812] CPU: 0 UID: 0 PID: 10812 Comm: syz.0.1387 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.392577][T10812] Tainted: [L]=SOFTLOCKUP [ 577.392587][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 577.392604][T10812] Call Trace: [ 577.392614][T10812] [ 577.392625][T10812] dump_stack_lvl+0xe8/0x150 [ 577.392669][T10812] should_fail_ex+0x40c/0x560 [ 577.392709][T10812] should_failslab+0xa8/0x100 [ 577.392752][T10812] __kmalloc_noprof+0xfe/0x720 [ 577.392790][T10812] ? tomoyo_encode+0x2ad/0x570 [ 577.392827][T10812] ? tomoyo_encode+0x2ad/0x570 [ 577.392867][T10812] tomoyo_encode+0x2ad/0x570 [ 577.392905][T10812] tomoyo_realpath_from_path+0x5fa/0x640 [ 577.392950][T10812] ? tomoyo_path_number_perm+0x219/0x5f0 [ 577.392977][T10812] tomoyo_path_number_perm+0x246/0x5f0 [ 577.393007][T10812] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 577.393031][T10812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 577.393063][T10812] ? __lock_acquire+0x683/0x2cf0 [ 577.393118][T10812] ? srso_alias_return_thunk+0x5/0xfbef5 [ 577.393148][T10812] ? hook_file_ioctl+0x1f0/0x5f0 [ 577.393199][T10812] ? __fget_files+0x2a/0x420 [ 577.393241][T10812] ? __fget_files+0x2a/0x420 [ 577.393276][T10812] ? __fget_files+0x3a2/0x420 [ 577.393311][T10812] ? __fget_files+0x2a/0x420 [ 577.393353][T10812] security_file_ioctl+0xc3/0x2a0 [ 577.393397][T10812] __se_sys_ioctl+0x47/0x170 [ 577.393424][T10812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.393453][T10812] do_syscall_64+0x174/0x580 [ 577.393487][T10812] ? trace_irq_disable+0x3b/0x140 [ 577.393529][T10812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.393555][T10812] RIP: 0033:0x7fb47199e019 [ 577.393578][T10812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.393599][T10812] RSP: 002b:00007fb472897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.393624][T10812] RAX: ffffffffffffffda RBX: 00007fb471c25fa0 RCX: 00007fb47199e019 [ 577.393643][T10812] RDX: 00002000000000c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 577.393661][T10812] RBP: 00007fb472897090 R08: 0000000000000000 R09: 0000000000000000 [ 577.393677][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.393692][T10812] R13: 00007fb471c26038 R14: 00007fb471c25fa0 R15: 00007ffcec6a2d18 [ 577.393731][T10812] [ 577.393819][T10812] ERROR: Out of memory at tomoyo_realpath_from_path. [ 577.642700][T10812] binder: 10810:10812 ioctl c0306201 2000000000c0 returned -22 [ 577.878187][T10820] loop4: detected capacity change from 0 to 2048 [ 577.941865][T10820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.677062][T10832] syzkaller0: entered promiscuous mode [ 578.706669][T10832] syzkaller0: entered allmulticast mode [ 578.851489][T10837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1393'. [ 578.959082][T10840] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1394'. [ 579.168076][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.461191][T10853] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 579.467740][T10853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 579.504972][T10848] loop1: detected capacity change from 0 to 128 [ 579.506844][T10853] vhci_hcd vhci_hcd.0: Device attached [ 579.534806][T10848] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 579.550085][T10859] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 579.556597][T10859] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 579.572504][T10855] vhci_hcd: connection closed [ 579.577595][ T7825] vhci_hcd vhci_hcd.0: stop threads [ 579.601835][ T7825] vhci_hcd vhci_hcd.0: release socket [ 579.610473][T10859] vhci_hcd vhci_hcd.0: Device attached [ 579.623788][ T7825] vhci_hcd vhci_hcd.0: disconnect device [ 579.631737][T10848] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 579.640921][T10861] vhci_hcd: connection closed [ 579.641748][ T7825] vhci_hcd vhci_hcd.2: stop threads [ 579.671208][ T7825] vhci_hcd vhci_hcd.2: release socket [ 579.682910][ T5737] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 579.696613][ T7825] vhci_hcd vhci_hcd.2: disconnect device [ 580.138463][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 580.741351][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 583.326894][T10889] loop0: detected capacity change from 0 to 256 [ 583.361315][T10889] exfat: Deprecated parameter 'namecase' [ 583.386676][T10889] exfat: Deprecated parameter 'namecase' [ 583.443986][T10889] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 584.117442][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 584.600005][T10911] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1412'. [ 585.189930][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 586.016949][T10934] loop1: detected capacity change from 0 to 2048 [ 586.128275][T10938] loop0: detected capacity change from 0 to 1024 [ 586.204236][T10938] hfsplus: failed to load attributes file [ 587.017125][T10938] loop0: detected capacity change from 0 to 4096 [ 587.092795][T10938] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 587.330342][T10938] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 587.625488][T10971] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 588.790129][T10980] loop1: detected capacity change from 0 to 128 [ 588.838392][T10980] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 588.857064][T10980] ext4 filesystem being mounted at /231/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 590.243156][ T8724] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 590.434811][ T8724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.550252][ T8724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.593169][ T8724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 590.779821][T11003] loop2: detected capacity change from 0 to 1024 [ 591.110839][ T8724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 591.260298][ T8724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.296355][ T8724] usb 2-1: config 0 descriptor?? [ 591.504281][T11012] loop2: detected capacity change from 0 to 256 [ 591.513788][T11012] exfat: Deprecated parameter 'namecase' [ 591.550341][T11012] exfat: Deprecated parameter 'namecase' [ 591.680617][T11012] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 592.395058][ T8724] plantronics 0003:047F:FFFF.0007: item fetching failed at offset 11/15 [ 592.436331][ T8724] plantronics 0003:047F:FFFF.0007: parse failed [ 592.464514][ T8724] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22 [ 594.100402][ T8738] usb 2-1: USB disconnect, device number 9 [ 594.149323][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.167450][T11031] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 594.173982][T11031] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 594.283109][T11031] vhci_hcd vhci_hcd.0: Device attached [ 595.073062][ T5737] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 595.265169][T11040] loop2: detected capacity change from 0 to 2048 [ 595.294060][T11040] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 595.328753][ T5737] usb 33-1: new full-speed USB device number 9 using vhci_hcd [ 595.522136][T11032] vhci_hcd: connection reset by peer [ 595.545625][ T12] vhci_hcd vhci_hcd.0: stop threads [ 595.569487][ T12] vhci_hcd vhci_hcd.0: release socket [ 595.599567][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 595.682946][T11054] loop1: detected capacity change from 0 to 2048 [ 596.560388][T11074] loop2: detected capacity change from 0 to 256 [ 596.586056][T11074] exfat: Deprecated parameter 'namecase' [ 596.609792][T11074] exfat: Deprecated parameter 'namecase' [ 596.674457][T11074] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 596.853939][T11057] loop0: detected capacity change from 0 to 32768 [ 596.908812][T11057] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1452'. [ 598.878957][T11098] loop2: detected capacity change from 0 to 2048 [ 600.285262][T11118] loop1: detected capacity change from 0 to 512 [ 601.112829][ T5737] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 603.123886][ T5744] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 603.317016][ T5744] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 603.327530][ T5744] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.336843][ T5744] usb 2-1: Product: syz [ 603.341446][ T5744] usb 2-1: Manufacturer: syz [ 603.347503][ T5744] usb 2-1: SerialNumber: syz [ 603.412381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 603.519546][T11122] loop0: detected capacity change from 0 to 32768 [ 603.551022][T11122] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1475'. [ 603.791473][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 603.815465][T11136] loop1: detected capacity change from 0 to 256 [ 603.843811][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 604.288475][T11160] loop2: detected capacity change from 0 to 1024 [ 606.435163][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 607.310777][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 607.332959][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 607.431348][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 607.487065][ T5744] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 607.542826][ T5744] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 607.593836][ T5744] usb 2-1: USB disconnect, device number 10 [ 608.075161][T11176] loop1: detected capacity change from 0 to 1024 [ 610.257066][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1500'. [ 612.509739][T11197] loop1: detected capacity change from 0 to 1024 [ 615.465414][T11235] loop1: detected capacity change from 0 to 1024 [ 618.395595][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1516'. [ 620.306791][T11279] loop1: detected capacity change from 0 to 4096 [ 620.367366][T11279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.220187][T11304] fuse: Unknown parameter '0xffffffffffffffff' [ 623.041560][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.076546][T11324] loop2: detected capacity change from 0 to 1024 [ 623.130872][T11324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.624806][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.635247][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.201298][T11344] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1548'. [ 624.260449][T11347] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1548'. [ 625.979990][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.835150][T11376] loop1: detected capacity change from 0 to 128 [ 627.949719][T11376] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.984255][T11376] ext4 filesystem being mounted at /246/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 628.874934][T11390] loop2: detected capacity change from 0 to 1024 [ 629.887596][ T8724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 630.057994][ T8724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.069223][ T8724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.080024][ T8724] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.537288][ T8724] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.548139][ T8724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.561403][ T8724] usb 2-1: config 0 descriptor?? [ 631.000985][ T8724] plantronics 0003:047F:FFFF.0008: item fetching failed at offset 11/15 [ 631.049052][ T8724] plantronics 0003:047F:FFFF.0008: parse failed [ 631.081231][ T8724] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 631.426107][T11409] loop2: detected capacity change from 0 to 64 [ 631.440151][T11409] bfs: Unknown parameter '' [ 631.505954][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.944084][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.366430][T11414] loop2: detected capacity change from 0 to 2048 [ 632.598965][ T8738] usb 2-1: USB disconnect, device number 11 [ 632.873092][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 637.836042][T11459] loop1: detected capacity change from 0 to 512 [ 637.865767][T11459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 637.919751][T11459] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1583: invalid indirect mapped block 32768 (level 2) [ 638.021731][T11459] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 638.022227][T11459] EXT4-fs (loop1): Remounting filesystem read-only [ 638.031448][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 638.031471][ C1] EXT4-fs (loop1): initial error at time 1785825718: ext4_free_branches:1023: inode 16 [ 638.031510][ C1] EXT4-fs (loop1): last error at time 1785825718: ext4_free_branches:1023: inode 16 [ 638.094913][T11459] EXT4-fs (loop1): 1 orphan inode deleted [ 638.100809][T11459] EXT4-fs (loop1): 1 truncate cleaned up [ 638.113393][T11459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 638.188867][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.830650][ T8738] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 644.045436][ T8738] usb 3-1: not running at top speed; connect to a high speed hub [ 644.075652][ T8738] usb 3-1: config 252 has an invalid interface number: 6 but max is 0 [ 644.104573][ T8738] usb 3-1: config 252 has no interface number 0 [ 644.130288][ T8738] usb 3-1: config 252 interface 6 altsetting 9 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 644.181294][ T8738] usb 3-1: config 252 interface 6 has no altsetting 0 [ 644.203809][T11511] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1598'. [ 644.235156][ T8738] usb 3-1: New USB device found, idVendor=05c6, idProduct=9076, bcdDevice=92.73 [ 644.267289][ T8738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.300226][ T8738] usb 3-1: Product: ь [ 644.313232][ T8738] usb 3-1: Manufacturer: ⎞䛛ᷢ墲ᒶ놠㶎旋얛懊鲈⑤埍悎鈯紉ꑄ괨펹ᗓℶ穢啵鬪琪ዽṥ힝㘖큽᫲衽孰無웭睦뉁ş鏙笁즇䈺㥑ᵋ䓫犠蔻൹ [ 644.394611][ T8738] usb 3-1: SerialNumber: 蓅諳퐅鰌ᐅ蕬⺏녶릇㤂ꤲ糑貭鶑ꨠ鿨焻谬왡ᛧḆ窍랎⏮኶闇賈印㇠ꀌ뙦䠧ࢯꄉ푦퀫ೈ䭤ᑀㄷ觑졀洫ꢀ᠕ꑘ祂䓉䜐縧譄姘쇠롆왙ɲ鲑䌏꓃ୈ鈰ࠡ륥Ⴕ餘色ꡎ쩓忡⟏쬬礩쥫䅎睭ᵧ钉竴᳃婥ࡐ⦊À쨼ꋠ艝឴㽮ꌵ뙢밌怿 [ 644.606400][ T8738] usb 3-1: can't set config #252, error -71 [ 644.723265][ T8738] usb 3-1: USB disconnect, device number 13 [ 645.192577][ T8738] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 645.774570][ T8738] usb 3-1: Using ep0 maxpacket: 32 [ 645.818295][ T8738] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 645.840723][ T8738] usb 3-1: New USB device strings: Mfr=1, Product=32, SerialNumber=3 [ 645.874129][ T8738] usb 3-1: Product: syz [ 647.156878][ T8738] usb 3-1: Manufacturer: syz [ 647.192376][ T8738] usb 3-1: SerialNumber: syz [ 647.240624][ T8738] usb 3-1: config 0 descriptor?? [ 647.383974][ T8738] usb 3-1: selecting invalid altsetting 3 [ 647.402743][ T8738] comedi comedi5: could not set alternate setting 3 in high speed [ 647.419038][ T8738] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 648.789257][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1604'. [ 648.828901][ T8738] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 648.885091][ T8738] usb 3-1: USB disconnect, device number 14 [ 649.311496][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1608'. [ 650.422501][T11572] loop2: detected capacity change from 0 to 2048 [ 650.626868][T11573] loop0: detected capacity change from 0 to 4096 [ 650.742426][T11576] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 651.055102][T11581] No control pipe specified [ 652.176319][T11591] vlan0: entered promiscuous mode [ 653.365467][T11599] loop0: detected capacity change from 0 to 128 [ 653.410917][T11599] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 653.477426][T11599] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 654.917111][ T31] audit: type=1326 audit(1785825735.894:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 655.179642][ T31] audit: type=1326 audit(1785825735.924:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 655.205494][ T31] audit: type=1326 audit(1785825735.924:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 655.230857][ T31] audit: type=1326 audit(1785825735.924:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 655.265449][ T31] audit: type=1326 audit(1785825735.924:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 656.079795][ T31] audit: type=1326 audit(1785825735.924:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 656.106259][ T31] audit: type=1326 audit(1785825735.924:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 656.135269][T11639] loop2: detected capacity change from 0 to 128 [ 656.197839][T11639] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 656.210699][ T31] audit: type=1326 audit(1785825735.924:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 656.277519][T11639] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 656.355316][ T31] audit: type=1326 audit(1785825735.934:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 656.475467][ T31] audit: type=1326 audit(1785825735.934:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1633" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff80519e019 code=0x7ffc0000 [ 656.562572][ T5626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 656.742933][ T5737] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 656.768968][T11667] pvfs2: Unknown parameter '}/-' [ 656.879156][T11668] loop1: detected capacity change from 0 to 4096 [ 656.915689][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.954506][ T5737] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.984626][T11675] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 657.002656][ T5737] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.016488][ T5737] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.027481][ T5737] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.054266][ T5737] usb 3-1: config 0 descriptor?? [ 657.430123][T11681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1653'. [ 657.592589][T11682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1652'. [ 657.997319][ T5737] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 11/15 [ 658.006558][ T5737] plantronics 0003:047F:FFFF.0009: parse failed [ 658.013533][T11679] vlan0: left promiscuous mode [ 658.035124][ T5737] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 658.371948][T11690] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1655'. [ 658.410989][T11690] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1655'. [ 658.678118][ T8723] usb 3-1: USB disconnect, device number 15 [ 660.266499][ T5632] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 660.526829][T11709] syzkaller0: entered promiscuous mode [ 660.533091][T11709] syzkaller0: entered allmulticast mode [ 660.695671][T11709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1663'. [ 660.810533][T11721] loop0: detected capacity change from 0 to 512 [ 660.818533][T11721] EXT4-fs (loop0): can't mount with both data=journal and dax [ 660.840673][T11723] loop2: detected capacity change from 0 to 2048 [ 660.914754][T11723] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 663.934682][T11742] loop1: detected capacity change from 0 to 512 [ 664.221710][T11742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.297297][T11742] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.375161][T11742] can0: slcan on ttyS3. [ 664.424541][T11763] FAULT_INJECTION: forcing a failure. [ 664.424541][T11763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.441334][T11763] CPU: 1 UID: 0 PID: 11763 Comm: syz.2.1679 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.441371][T11763] Tainted: [L]=SOFTLOCKUP [ 664.441380][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 664.441395][T11763] Call Trace: [ 664.441405][T11763] [ 664.441414][T11763] dump_stack_lvl+0xe8/0x150 [ 664.441467][T11763] should_fail_ex+0x40c/0x560 [ 664.441506][T11763] _copy_to_user+0x31/0xb0 [ 664.441536][T11763] simple_read_from_buffer+0xe1/0x170 [ 664.441580][T11763] proc_fail_nth_read+0x1bb/0x230 [ 664.441617][T11763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.441653][T11763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.441694][T11763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.441724][T11763] ? rw_verify_area+0x24a/0x4c0 [ 664.441752][T11763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 664.441790][T11763] vfs_read+0x213/0xa80 [ 664.441822][T11763] ? __pfx___mutex_lock+0x10/0x10 [ 664.441858][T11763] ? __pfx_vfs_read+0x10/0x10 [ 664.441889][T11763] ? __fget_files+0x2a/0x420 [ 664.441930][T11763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.441958][T11763] ? __fget_files+0x3a2/0x420 [ 664.441993][T11763] ? __fget_files+0x2a/0x420 [ 664.442034][T11763] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.442069][T11763] ksys_read+0x150/0x270 [ 664.442097][T11763] ? __pfx_ksys_read+0x10/0x10 [ 664.442131][T11763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.442160][T11763] do_syscall_64+0x174/0x580 [ 664.442192][T11763] ? trace_irq_disable+0x3b/0x140 [ 664.442234][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.442260][T11763] RIP: 0033:0x7f87f8b5e84e [ 664.442282][T11763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 664.442303][T11763] RSP: 002b:00007f87f9b14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 664.442330][T11763] RAX: ffffffffffffffda RBX: 00007f87f9b156c0 RCX: 00007f87f8b5e84e [ 664.442350][T11763] RDX: 000000000000000f RSI: 00007f87f9b150a0 RDI: 0000000000000004 [ 664.442366][T11763] RBP: 00007f87f9b15090 R08: 0000000000000000 R09: 0000000000000000 [ 664.442382][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.442397][T11763] R13: 00007f87f8e26038 R14: 00007f87f8e25fa0 R15: 00007ffdc80d3878 [ 664.442437][T11763] [ 664.702853][T11742] can0 (unregistered): slcan off ttyS3. [ 665.085918][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.681053][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 666.589996][T11798] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 666.596544][T11798] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 666.614696][T11798] vhci_hcd vhci_hcd.0: Device attached [ 666.802791][ T8723] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 666.883867][ T8723] usb 35-1: new full-speed USB device number 5 using vhci_hcd [ 667.205370][T11802] vhci_hcd: connection reset by peer [ 667.320285][ T5816] vhci_hcd vhci_hcd.1: stop threads [ 667.596824][ T5816] vhci_hcd vhci_hcd.1: release socket [ 667.651420][ T5816] vhci_hcd vhci_hcd.1: disconnect device [ 667.747012][T11821] netlink: 'syz.5.1691': attribute type 21 has an invalid length. [ 667.780401][T11822] netlink: 'syz.5.1691': attribute type 21 has an invalid length. [ 667.829937][T11821] netlink: 'syz.5.1691': attribute type 6 has an invalid length. [ 667.946013][T11821] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1691'. [ 668.360859][T11822] netlink: 'syz.5.1691': attribute type 6 has an invalid length. [ 668.391972][T11822] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1691'. [ 669.789894][T11849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1699'. [ 670.155184][T11864] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 670.161732][T11864] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 670.228686][T11864] vhci_hcd vhci_hcd.0: Device attached [ 670.307594][T11872] scsi_strcpy_devinfo: vendor string 'QT?]+,r' is too long [ 670.412543][ T5744] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 671.615251][ T5744] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 671.615810][T11880] loop0: detected capacity change from 0 to 128 [ 671.794345][T11880] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 671.987527][T11867] vhci_hcd: connection reset by peer [ 671.994083][T11880] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 672.029380][ T1177] vhci_hcd vhci_hcd.2: stop threads [ 672.042768][ T1177] vhci_hcd vhci_hcd.2: release socket [ 672.054954][ T8723] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 672.065546][ T1177] vhci_hcd vhci_hcd.2: disconnect device [ 676.284857][ T5626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 676.322791][T11900] loop2: detected capacity change from 0 to 512 [ 676.364516][T11900] EXT4-fs: Ignoring removed i_version option [ 676.430313][T11900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 676.557545][T11900] EXT4-fs (loop2): 1 truncate cleaned up [ 676.637265][T11900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.735241][T11900] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.2.1716: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 676.800317][T11900] EXT4-fs (loop2): Remounting filesystem read-only [ 676.894583][ T5744] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 677.069309][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.524912][T11931] loop2: detected capacity change from 0 to 512 [ 678.545744][T11931] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 678.590364][T11931] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1726: bad orphan inode 131083 [ 678.626154][T11931] loop2: lost filesystem error report for type 5 error -117 [ 678.629133][T11931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 678.877618][T11939] loop0: detected capacity change from 0 to 128 [ 679.078954][T11939] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 679.114067][T11939] ext4 filesystem being mounted at /279/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 679.576446][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.335523][T11960] loop2: detected capacity change from 0 to 128 [ 680.376269][T11960] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 680.405954][T11960] hpfs: filesystem error: improperly stopped [ 680.431817][T11960] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 680.468879][T11960] hpfs: You really don't want any checks? You are crazy... [ 680.482519][T11960] hpfs: Code page index out of array [ 680.493222][T11960] hpfs: code page support is disabled [ 680.518053][T11960] hpfs: hpfs_map_4sectors(): unaligned read [ 680.536960][T11960] hpfs: hpfs_map_4sectors(): unaligned read [ 680.561486][T11960] hpfs: filesystem error: unable to find root dir [ 680.818835][T11947] fuse: Bad value for 'fd' [ 681.114939][T11969] netlink: 'syz.1.1738': attribute type 34 has an invalid length. [ 681.142249][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1738'. [ 681.175569][T11969] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 682.867570][ T5626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 683.158420][T11992] loop1: detected capacity change from 0 to 128 [ 683.204558][T11992] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.307609][T11990] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1743'. [ 683.336624][T11992] ext4 filesystem being mounted at /277/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 683.684770][ T8738] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 683.865950][ T8738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.902695][ T8738] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.936894][ T8738] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.983612][ T8738] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 684.018721][ T8738] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.059866][ T8738] usb 2-1: config 0 descriptor?? [ 684.523581][T12014] loop2: detected capacity change from 0 to 1024 [ 685.029155][ T8738] plantronics 0003:047F:FFFF.000A: item fetching failed at offset 11/15 [ 685.068400][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.077554][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.103135][ T8738] plantronics 0003:047F:FFFF.000A: parse failed [ 685.137531][ T8738] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 685.211577][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.267325][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.491432][ T8738] usb 2-1: USB disconnect, device number 12 [ 685.507939][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1750'. [ 686.001591][T12036] loop0: detected capacity change from 0 to 512 [ 687.322154][ T5618] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 688.010124][T12047] loop1: detected capacity change from 0 to 512 [ 688.027483][T12047] EXT4-fs (loop1): Test dummy encryption mode enabled [ 688.052426][T12047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 689.058920][T12047] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1761: bad orphan inode 131083 [ 689.151620][T12047] loop1: lost filesystem error report for type 5 error -117 [ 689.156357][T12054] loop2: detected capacity change from 0 to 64 [ 689.186060][T12047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.201854][T12054] bfs: Unknown parameter '' [ 689.959255][T12047] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 690.028696][T12058] overlayfs: upper fs needs to support d_type. [ 690.151257][T12066] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1766'. [ 690.230157][T12063] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1766'. [ 690.243331][ T8723] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 690.298878][T12058] overlayfs: failed index dir cleanup (-512) [ 690.318446][T12058] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 690.424712][ T8723] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.471906][ T8723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 690.514700][ T8723] usb 3-1: config 1 has no interface number 0 [ 690.531859][ T8723] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.546108][T12075] FAULT_INJECTION: forcing a failure. [ 690.546108][T12075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.566535][ T8723] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 690.580521][T12075] CPU: 0 UID: 0 PID: 12075 Comm: syz.0.1771 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.580548][T12075] Tainted: [L]=SOFTLOCKUP [ 690.580555][T12075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.580565][T12075] Call Trace: [ 690.580573][T12075] [ 690.580581][T12075] dump_stack_lvl+0xe8/0x150 [ 690.580614][T12075] should_fail_ex+0x40c/0x560 [ 690.580643][T12075] _copy_to_user+0x31/0xb0 [ 690.580665][T12075] simple_read_from_buffer+0xe1/0x170 [ 690.580698][T12075] proc_fail_nth_read+0x1bb/0x230 [ 690.580725][T12075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.580750][T12075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.580781][T12075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.580803][T12075] ? rw_verify_area+0x24a/0x4c0 [ 690.580820][T12075] ? dev_ioctl+0x83c/0x1150 [ 690.580841][T12075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 690.580869][T12075] vfs_read+0x213/0xa80 [ 690.580891][T12075] ? __pfx___mutex_lock+0x10/0x10 [ 690.580925][T12075] ? __pfx_vfs_read+0x10/0x10 [ 690.580945][T12075] ? __fget_files+0x2a/0x420 [ 690.580975][T12075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.580997][T12075] ? __fget_files+0x3a2/0x420 [ 690.581022][T12075] ? __fget_files+0x2a/0x420 [ 690.581052][T12075] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.581077][T12075] ksys_read+0x150/0x270 [ 690.581098][T12075] ? __pfx_ksys_read+0x10/0x10 [ 690.581116][T12075] ? __pfx_sock_ioctl+0x10/0x10 [ 690.581149][T12075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.581169][T12075] do_syscall_64+0x174/0x580 [ 690.581193][T12075] ? trace_irq_disable+0x3b/0x140 [ 690.581223][T12075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.581242][T12075] RIP: 0033:0x7fb47195e84e [ 690.581260][T12075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 690.581275][T12075] RSP: 002b:00007fb472896fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 690.581294][T12075] RAX: ffffffffffffffda RBX: 00007fb4728976c0 RCX: 00007fb47195e84e [ 690.581308][T12075] RDX: 000000000000000f RSI: 00007fb4728970a0 RDI: 0000000000000004 [ 690.581319][T12075] RBP: 00007fb472897090 R08: 0000000000000000 R09: 0000000000000000 [ 690.581331][T12075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.581342][T12075] R13: 00007fb471c26038 R14: 00007fb471c25fa0 R15: 00007ffcec6a2d18 [ 690.581371][T12075] [ 690.819821][ T8723] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 690.829291][ T8723] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 690.839116][ T8723] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.512726][ T8723] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.522082][ T8723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.535726][ T8723] usb 3-1: Product: syz [ 691.616616][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.719325][ T8723] usb 3-1: Manufacturer: syz [ 691.724610][ T8723] usb 3-1: SerialNumber: syz [ 691.734306][T12061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 692.845408][T12061] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 693.226256][ T8723] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 693.246889][T12090] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0 [ 693.264004][ T8723] cdc_ncm 3-1:1.1: bind() failure [ 693.266543][T12088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'. [ 693.269809][T12061] IPVS: stopping backup sync thread 12090 ... [ 693.308600][T12089] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 693.675318][T12095] loop0: detected capacity change from 0 to 512 [ 693.698882][T12095] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 693.730052][T12061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.756140][T12095] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1777: bad orphan inode 131083 [ 693.769148][T12061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.796759][T12095] loop0: lost filesystem error report for type 5 error -117 [ 693.810704][T12095] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.587348][T12111] loop1: detected capacity change from 0 to 2048 [ 694.619806][T12111] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 694.857380][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.895420][ T5744] usb 3-1: USB disconnect, device number 16 [ 694.957626][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'. [ 694.977656][T12115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1781'. [ 695.151665][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1784'. [ 695.167769][T12122] loop0: detected capacity change from 0 to 128 [ 695.243576][T12122] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 695.297695][T12122] hpfs: filesystem error: improperly stopped [ 695.495638][T12122] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 695.773077][T12122] hpfs: You really don't want any checks? You are crazy... [ 696.327470][T12122] hpfs: Code page index out of array [ 696.369015][T12122] hpfs: code page support is disabled [ 696.405816][T12122] hpfs: hpfs_map_4sectors(): unaligned read [ 696.448532][T12122] hpfs: hpfs_map_4sectors(): unaligned read [ 696.474746][T12122] hpfs: filesystem error: unable to find root dir [ 696.475190][T12132] 9p: Bad value for 'rfdno' [ 696.513146][T12135] loop2: detected capacity change from 0 to 512 [ 696.531314][T12122] hpfs: hpfs_map_4sectors(): unaligned read [ 696.551126][T12135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 696.634201][T12135] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1788: invalid indirect mapped block 32768 (level 2) [ 696.692736][T12136] hpfs: hpfs_map_4sectors(): unaligned read [ 696.702493][T12135] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 696.707212][T12135] EXT4-fs (loop2): Remounting filesystem read-only [ 696.716499][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 696.716523][ C1] EXT4-fs (loop2): initial error at time 1785825777: ext4_free_branches:1023: inode 16 [ 696.716563][ C1] EXT4-fs (loop2): last error at time 1785825777: ext4_free_branches:1023: inode 16 [ 696.922980][T12135] EXT4-fs (loop2): 1 orphan inode deleted [ 696.944950][T12135] EXT4-fs (loop2): 1 truncate cleaned up [ 696.971948][T12135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.266760][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.680025][T12179] syzkaller0: entered promiscuous mode [ 700.701881][T12179] syzkaller0: entered allmulticast mode [ 700.735431][T12176] loop0: detected capacity change from 0 to 4096 [ 700.819756][T12179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1801'. [ 701.584094][T12176] ntfs3(loop0): ino=9, attr_set_size_ex [ 702.355275][T12206] overlayfs: failed to clone upperpath [ 702.399507][T12208] loop2: detected capacity change from 0 to 512 [ 702.420698][T12208] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 702.604098][T12208] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1810: invalid indirect mapped block 32768 (level 2) [ 702.700403][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 702.709498][T12214] openvswitch: netlink: Flow actions attr not present in new flow. [ 703.436492][T12208] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 703.442353][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 703.458032][ C1] EXT4-fs (loop2): initial error at time 1785825784: ext4_free_branches:1023: inode 16 [ 703.467743][ C1] EXT4-fs (loop2): last error at time 1785825784: ext4_free_branches:1023: inode 16 [ 703.485251][T12208] EXT4-fs (loop2): Remounting filesystem read-only [ 703.502785][T12208] EXT4-fs (loop2): 1 orphan inode deleted [ 704.089416][T12208] EXT4-fs (loop2): 1 truncate cleaned up [ 704.207071][T12222] loop1: detected capacity change from 0 to 64 [ 704.223625][T12222] bfs: Unknown parameter '' [ 704.487183][T12208] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 704.532540][T12208] EXT4-fs (loop2): shut down requested (1) [ 704.602147][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.046441][T12234] fuse: Bad value for 'fd' [ 705.155294][T12221] loop0: detected capacity change from 0 to 4096 [ 706.157264][T12251] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1820'. [ 706.202511][T12253] binder: 12250:12253 ioctl 9360 3 returned -22 [ 706.221188][T12257] netlink: 'syz.6.1820': attribute type 1 has an invalid length. [ 706.257269][T12256] loop2: detected capacity change from 0 to 512 [ 706.257754][T12253] loop1: detected capacity change from 0 to 8 [ 706.312737][T12253] SQUASHFS error: Unable to read inode 0x127 [ 706.333499][T12256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.396978][T12256] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.483658][T12256] can0: slcan on ttyS3. [ 706.577434][T12266] can0 (unregistered): slcan off ttyS3. [ 706.592413][ T5744] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 707.325624][ T5744] usb 2-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 707.467180][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.147297][ T5744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.164898][ T5744] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 708.323609][T12279] loop2: detected capacity change from 0 to 512 [ 708.421557][T12279] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 708.476843][T12279] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1828: invalid indirect mapped block 32768 (level 2) [ 708.506381][T12279] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 708.508199][T12279] EXT4-fs (loop2): Remounting filesystem read-only [ 708.517431][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 708.517454][ C1] EXT4-fs (loop2): initial error at time 1785826045: ext4_free_branches:1023: inode 16 [ 708.517486][ C1] EXT4-fs (loop2): last error at time 1785826045: ext4_free_branches:1023: inode 16 [ 710.066292][T12279] EXT4-fs (loop2): 1 orphan inode deleted [ 710.116702][T12279] EXT4-fs (loop2): 1 truncate cleaned up [ 711.277037][ T5744] gspca_sn9c20x: Write register 1001 failed -110 [ 711.300813][ T5744] gspca_sn9c20x: Device initialization failed [ 711.590092][T12279] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.625612][ T5744] gspca_sn9c20x 2-1:252.0: probe with driver gspca_sn9c20x failed with error -110 [ 711.836840][ T5744] usb 2-1: USB disconnect, device number 13 [ 711.915836][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.156332][T12304] loop1: detected capacity change from 0 to 2048 [ 713.566075][T12325] loop1: detected capacity change from 0 to 1024 [ 714.790583][T12334] loop1: detected capacity change from 0 to 512 [ 715.065545][T12339] loop2: detected capacity change from 0 to 2048 [ 715.136093][T12339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.274633][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 715.274655][ T31] audit: type=1800 audit(1785826052.259:122): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1846" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 715.325601][T12348] overlayfs: failed to resolve './file7': -2 [ 715.386095][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.928483][T12369] loop2: detected capacity change from 0 to 512 [ 716.974239][T12369] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 717.040316][T12369] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.1849: invalid indirect mapped block 32768 (level 2) [ 717.127846][T12369] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 717.128349][T12369] EXT4-fs (loop2): Remounting filesystem read-only [ 717.137606][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 717.137630][ C1] EXT4-fs (loop2): initial error at time 1785826054: ext4_free_branches:1023: inode 16 [ 717.137672][ C1] EXT4-fs (loop2): last error at time 1785826054: ext4_free_branches:1023: inode 16 [ 717.465148][T12369] EXT4-fs (loop2): 1 orphan inode deleted [ 717.491490][T12369] EXT4-fs (loop2): 1 truncate cleaned up [ 718.183778][T12388] loop1: detected capacity change from 0 to 512 [ 718.195623][T12369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 718.278400][T12369] EXT4-fs (loop2): shut down requested (1) [ 718.392851][T12388] loop1: detected capacity change from 0 to 2048 [ 718.450178][ T5632] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.476287][T12397] loop0: detected capacity change from 0 to 128 [ 718.523227][T12397] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 718.602802][T12397] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 719.039086][T12409] loop2: detected capacity change from 0 to 64 [ 719.052715][T12409] bfs: Unknown parameter '' [ 719.884516][T12412] loop1: detected capacity change from 0 to 256 [ 721.572965][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 722.498474][ T5626] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 726.317453][T12457] loop1: detected capacity change from 0 to 1024 [ 727.846122][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1874'. [ 728.537795][T12480] loop2: detected capacity change from 0 to 128 [ 728.562637][T12480] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 728.578917][T12480] ext4 filesystem being mounted at /300/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 728.611991][T12478] loop1: detected capacity change from 0 to 128 [ 728.758256][T12478] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 728.787811][T12478] hpfs: filesystem error: improperly stopped [ 728.808178][T12478] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 728.853652][T12478] hpfs: You really don't want any checks? You are crazy... [ 728.861431][ T8738] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 728.897405][T12478] hpfs: Code page index out of array [ 728.903286][T12478] hpfs: code page support is disabled [ 728.908772][T12478] hpfs: hpfs_map_4sectors(): unaligned read [ 728.915624][T12478] hpfs: hpfs_map_4sectors(): unaligned read [ 728.924600][T12478] hpfs: filesystem error: unable to find root dir [ 729.271125][ T8738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.285572][ T8738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.296189][ T8738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.310059][ T8738] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.319188][ T8738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.335192][ T8738] usb 3-1: config 0 descriptor?? [ 731.878361][ T8738] plantronics 0003:047F:FFFF.000B: item fetching failed at offset 11/15 [ 731.887306][ T8738] plantronics 0003:047F:FFFF.000B: parse failed [ 731.894974][ T8738] plantronics 0003:047F:FFFF.000B: probe with driver plantronics failed with error -22 [ 736.843480][ T8723] usb 3-1: USB disconnect, device number 17 [ 736.924741][ T5632] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 737.215418][T12516] loop1: detected capacity change from 0 to 2048 [ 737.341573][T12516] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 737.836550][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1896'. [ 738.078230][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1899'. [ 739.439619][T12567] loop1: detected capacity change from 0 to 128 [ 739.950464][T12567] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 740.100218][T12567] hpfs: filesystem error: improperly stopped [ 740.107254][T12567] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 740.291376][T12567] hpfs: You really don't want any checks? You are crazy... [ 740.331992][T12567] hpfs: Code page index out of array [ 740.365841][T12567] hpfs: code page support is disabled [ 740.391360][T12567] hpfs: hpfs_map_4sectors(): unaligned read [ 740.430816][T12567] hpfs: hpfs_map_4sectors(): unaligned read [ 740.459966][T12567] hpfs: filesystem error: unable to find root dir [ 741.046506][T12587] loop0: detected capacity change from 0 to 512 [ 741.086896][T12587] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 741.127883][T12587] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1913: bad orphan inode 131083 [ 741.342643][T12587] loop0: lost filesystem error report for type 5 error -117 [ 741.422280][T12587] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.276493][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1915'. [ 744.109551][T12620] loop2: detected capacity change from 0 to 1024 [ 746.518113][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.679899][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.041185][T12639] loop2: detected capacity change from 0 to 128 [ 747.153578][T12639] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 747.265911][T12639] hpfs: filesystem error: improperly stopped [ 747.324543][T12639] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 747.388792][ T5737] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 747.508159][T12639] hpfs: You really don't want any checks? You are crazy... [ 748.083327][ T5737] usb 2-1: not running at top speed; connect to a high speed hub [ 748.093475][T12639] hpfs: Code page index out of array [ 748.269227][ T5737] usb 2-1: config 252 has an invalid interface number: 6 but max is 0 [ 748.282914][T12639] hpfs: code page support is disabled [ 748.288456][ T5737] usb 2-1: config 252 has no interface number 0 [ 748.294807][ T5737] usb 2-1: config 252 interface 6 has no altsetting 0 [ 748.299681][T12639] hpfs: hpfs_map_4sectors(): unaligned read [ 748.315678][ T5737] usb 2-1: New USB device found, idVendor=05c6, idProduct=9076, bcdDevice=92.73 [ 748.327183][T12639] hpfs: hpfs_map_4sectors(): unaligned read [ 748.340600][ T5737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.379256][T12639] hpfs: filesystem error: unable to find root dir [ 748.379288][ T5737] usb 2-1: Product: ь [ 748.394761][T12639] [ 748.420165][ T5737] usb 2-1: Manufacturer: ⎞䛛ᷢ墲ᒶ놠㶎旋얛懊鲈⑤埍悎鈯紉ꑄ괨펹ᗓℶ穢啵鬪琪ዽṥ힝㘖큽᫲衽孰無웭睦뉁ş鏙笁즇䈺㥑ᵋ䓫犠蔻൹ [ 748.445082][ T5737] usb 2-1: SerialNumber: 蓅諳퐅鰌ᐅ蕬⺏녶릇㤂ꤲ糑貭鶑ꨠ鿨焻谬왡ᛧḆ窍랎⏮኶闇賈印㇠ꀌ뙦䠧ࢯꄉ푦퀫ೈ䭤ᑀㄷ觑졀洫ꢀ᠕ꑘ祂䓉䜐縧譄姘쇠롆왙ɲ鲑䌏꓃ୈ鈰ࠡ륥Ⴕ餘色ꡎ쩓忡⟏쬬礩쥫䅎睭ᵧ钉竴᳃婥ࡐ⦊À쨼ꋠ艝឴㽮ꌵ뙢밌怿 [ 748.779755][ T5737] usb 2-1: USB disconnect, device number 14 [ 748.860384][T12662] loop2: detected capacity change from 0 to 128 [ 748.888163][T12662] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 749.022067][T12662] hpfs: filesystem error: improperly stopped [ 749.058561][T12662] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 749.076150][T12662] hpfs: You really don't want any checks? You are crazy... [ 749.084671][T12662] hpfs: Code page index out of array [ 749.090451][T12662] hpfs: code page support is disabled [ 749.096097][T12662] hpfs: hpfs_map_4sectors(): unaligned read [ 749.107069][T12662] hpfs: hpfs_map_4sectors(): unaligned read [ 749.119318][T12662] hpfs: filesystem error: unable to find root dir [ 749.175247][T12662] hpfs: hpfs_map_4sectors(): unaligned read [ 749.225285][T12662] hpfs: hpfs_map_4sectors(): unaligned read [ 750.934503][T12687] loop1: detected capacity change from 0 to 1024 [ 755.888367][T12696] loop2: detected capacity change from 0 to 128 [ 755.942724][T12696] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 756.013961][ T5626] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.029411][T12696] hpfs: filesystem error: improperly stopped [ 756.064246][T12696] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 756.114744][T12696] hpfs: You really don't want any checks? You are crazy... [ 756.168498][T12696] hpfs: Code page index out of array [ 756.197557][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1948'. [ 756.209056][T12696] hpfs: code page support is disabled [ 756.219253][T12696] hpfs: hpfs_map_4sectors(): unaligned read [ 756.240512][T12696] hpfs: hpfs_map_4sectors(): unaligned read [ 756.251429][T12707] Illegal XDP return value 4294967274 on prog (id 186) dev syz_tun, expect packet loss! [ 756.262211][T12696] hpfs: filesystem error: unable to find root dir [ 756.370470][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 756.390294][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 756.399824][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 756.412714][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 756.424417][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 758.509561][ T5623] Bluetooth: hci6: command tx timeout [ 760.575941][ T5623] Bluetooth: hci6: command tx timeout [ 762.655689][ T51] Bluetooth: hci6: command tx timeout [ 763.321470][T12804] loop2: detected capacity change from 0 to 64 [ 764.477946][T12818] loop2: detected capacity change from 0 to 128 [ 764.507022][T12818] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 764.535419][T12818] hpfs: filesystem error: improperly stopped [ 764.541636][T12818] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 764.564310][T12818] hpfs: You really don't want any checks? You are crazy... [ 764.586043][T12818] hpfs: Code page index out of array [ 764.632573][T12818] hpfs: code page support is disabled [ 764.665925][T12818] hpfs: hpfs_map_4sectors(): unaligned read [ 764.694163][T12818] hpfs: hpfs_map_4sectors(): unaligned read [ 764.719276][T12818] hpfs: filesystem error: unable to find root dir [ 764.748540][ T51] Bluetooth: hci6: command tx timeout [ 764.762833][ T6729] bridge_slave_1: left allmulticast mode [ 764.772055][ T6729] bridge_slave_1: left promiscuous mode [ 764.781540][ T6729] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.799807][ T6729] bridge_slave_0: left allmulticast mode [ 764.801020][T12818] hpfs: hpfs_map_4sectors(): unaligned read [ 764.805689][ T6729] bridge_slave_0: left promiscuous mode [ 764.817991][ T6729] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.871070][T12818] hpfs: hpfs_map_4sectors(): unaligned read [ 765.058134][ T6729] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 765.998157][T12850] loop2: detected capacity change from 0 to 2048 [ 766.023720][T12850] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 767.130528][ T6729] bond2 (unregistering): (slave gretap1): Releasing active interface [ 767.229899][ T6729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.244814][ T6729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.264091][ T6729] bond0 (unregistering): Released all slaves [ 767.281807][ T6729] bond1 (unregistering): Released all slaves [ 767.318672][ T6729] bond2 (unregistering): Released all slaves [ 767.503169][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.547178][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.572527][T12709] bridge_slave_0: entered allmulticast mode [ 767.581269][T12709] bridge_slave_0: entered promiscuous mode [ 767.591284][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.598463][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.605922][T12709] bridge_slave_1: entered allmulticast mode [ 767.651962][T12709] bridge_slave_1: entered promiscuous mode [ 767.801328][T12883] program syz.1.1989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.926123][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1987'. [ 768.120899][T12891] loop2: detected capacity change from 0 to 2048 [ 768.187156][T12891] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 768.224070][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 768.234202][T12897] loop1: detected capacity change from 0 to 256 [ 768.271286][T12897] exfat: Deprecated parameter 'namecase' [ 768.283725][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.301662][T12897] exfat: Deprecated parameter 'namecase' [ 873.324767][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 873.331736][ C1] rcu: 0-...!: (1 GPs behind) idle=bb1c/1/0x4000000000000000 softirq=67984/67985 fqs=0 [ 873.343148][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12888/1:b..l P12895/1:b..l [ 873.352379][ C1] rcu: (detected by 1, t=10506 jiffies, g=77425, q=178 ncpus=2) [ 873.360086][ C1] Sending NMI from CPU 1 to CPUs 0: [ 873.360118][ C0] NMI backtrace for cpu 0 [ 873.360136][ C0] CPU: 0 UID: 0 PID: 12889 Comm: syz.2.1990 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.360165][ C0] Tainted: [L]=SOFTLOCKUP [ 873.360174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 873.360186][ C0] RIP: 0010:lock_release+0x140/0x3c0 [ 873.360223][ C0] Code: 0f 84 d7 00 00 00 48 85 ed 0f 84 13 01 00 00 83 7d 24 00 0f 85 d6 01 00 00 8b 45 20 3d 00 00 20 00 48 8b 5c 24 08 8b 54 24 14 <72> 25 89 c1 81 e1 00 00 e0 ff 25 ff ff 1f 00 01 c8 05 00 00 e0 ff [ 873.360241][ C0] RSP: 0018:ffffc90000007d58 EFLAGS: 00000083 [ 873.360260][ C0] RAX: 00000000000c4075 RBX: 0000000000000087 RCX: 0000000080010001 [ 873.360274][ C0] RDX: 0000000000000000 RSI: ffff8880b86281d8 RDI: ffff8880203268a0 [ 873.360290][ C0] RBP: ffff8880203268a0 R08: ffff88807c69b327 R09: ffff88807c69b318 [ 873.360306][ C0] R10: dffffc0000000000 R11: ffffed100f8d3665 R12: 0000000000000000 [ 873.360321][ C0] R13: 0000000000000000 R14: ffff8880b86281d8 R15: ffff888020325d00 [ 873.360339][ C0] FS: 00005555708e5500(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 873.360358][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.360372][ C0] CR2: 000020000001d000 CR3: 000000007d9af000 CR4: 0000000000350ef0 [ 873.360390][ C0] Call Trace: [ 873.360398][ C0] [ 873.360408][ C0] ? __hrtimer_run_queues+0x2bf/0xa10 [ 873.360435][ C0] ? __pfx_advance_sched+0x10/0x10 [ 873.360468][ C0] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 873.360496][ C0] __hrtimer_run_queues+0x2bf/0xa10 [ 873.360530][ C0] hrtimer_interrupt+0x448/0x910 [ 873.360570][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 873.360597][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 873.360624][ C0] [ 873.360632][ C0] [ 873.360640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.360664][ C0] RIP: 0010:hrtimer_cancel+0x11/0x50 [ 873.360687][ C0] Code: d6 5c 03 e9 30 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 48 89 fb e8 f2 82 13 00 48 89 df 1a f5 ff ff 89 c5 31 ff 89 c6 e8 1f 87 13 00 85 ed 78 0c e8 d6 [ 873.360705][ C0] RSP: 0018:ffffc900030c7bc8 EFLAGS: 00000293 [ 873.360723][ C0] RAX: ffffffff81b38f7e RBX: ffffc900030c7c20 RCX: ffff888020325d00 [ 873.360739][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900030c7c20 [ 873.360753][ C0] RBP: ffffc900030c7cf0 R08: ffffffff81b9a332 R09: 0000000000000000 [ 873.360768][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffc900030c7c20 [ 873.360784][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000618f80 [ 873.360803][ C0] ? futex_unqueue+0x22/0x240 [ 873.360837][ C0] ? hrtimer_cancel+0xe/0x50 [ 873.360863][ C0] ? hrtimer_cancel+0xe/0x50 [ 873.360884][ C0] futex_wait+0x135/0x390 [ 873.360913][ C0] ? __pfx_futex_wait+0x10/0x10 [ 873.360943][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 873.360973][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.361002][ C0] do_futex+0x3e7/0x4e0 [ 873.361027][ C0] ? __pfx_do_futex+0x10/0x10 [ 873.361051][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 873.361079][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.361106][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.361134][ C0] __se_sys_futex+0x3a8/0x450 [ 873.361159][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 873.361182][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.361212][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.361237][ C0] ? __x64_sys_futex+0x21/0xf0 [ 873.361258][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.361282][ C0] do_syscall_64+0x174/0x580 [ 873.361310][ C0] ? trace_irq_disable+0x3b/0x140 [ 873.361343][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.361365][ C0] RIP: 0033:0x7f87f8b9e019 [ 873.361385][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.361402][ C0] RSP: 002b:00007ffdc80d39d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 873.361423][ C0] RAX: ffffffffffffffda RBX: 00000000000bb8ee RCX: 00007f87f8b9e019 [ 873.361438][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f87f8e25fac [ 873.361452][ C0] RBP: 0000000000000032 R08: 3fffffffffffffff R09: 0000000000000000 [ 873.361466][ C0] R10: 00007ffdc80d3ae0 R11: 0000000000000246 R12: 00007ffdc80d3b00 [ 873.361481][ C0] R13: 00007f87f8e25fac R14: 00000000000bb920 R15: 00007ffdc80d3ae0 [ 873.361507][ C0] [ 873.362108][ C1] task:syz.4.1992 state:R running task stack:23496 pid:12895 tgid:12890 ppid:5617 task_flags:0x400140 flags:0x00080000 [ 873.812478][ C1] Call Trace: [ 873.815752][ C1] [ 873.818679][ C1] __schedule+0x17d9/0x56c0 [ 873.823206][ C1] ? count_memcg_event_mm+0x21/0x260 [ 873.828502][ C1] ? count_memcg_event_mm+0x21/0x260 [ 873.833789][ C1] ? __pfx___schedule+0x10/0x10 [ 873.838659][ C1] preempt_schedule_irq+0x4d/0xa0 [ 873.843703][ C1] irqentry_exit+0x14f/0x8f0 [ 873.848320][ C1] ? trace_irq_disable+0x3b/0x140 [ 873.853365][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 873.859352][ C1] RIP: 0010:xas_load+0x19b/0x5a0 [ 873.864300][ C1] Code: e8 ea 6a 02 00 41 89 c5 31 ff 89 c6 e8 fe 46 f8 f5 45 85 ed 74 2c 49 83 c4 18 4c 89 e7 be ff ff ff ff e8 88 67 02 00 41 89 c4 <31> ff 89 c6 e8 dc 46 f8 f5 45 85 e4 49 89 ed 74 11 e8 8f 42 f8 f5 [ 873.883908][ C1] RSP: 0018:ffffc90003e77870 EFLAGS: 00000206 [ 873.889983][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000046 [ 873.897951][ C1] RDX: ffff88801fff5d00 RSI: ffffffff8e4b420d RDI: ffffffff8c4bdd80 [ 873.905935][ C1] RBP: ffff888052821b80 R08: ffffffff8206195d R09: 0000000000000000 [ 873.913906][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000000 [ 873.921871][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 000000000000001e [ 873.929844][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 873.934890][ C1] ? filemap_get_entry+0xcd/0x3f0 [ 873.939920][ C1] filemap_get_entry+0x181/0x3f0 [ 873.944861][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.950498][ C1] ? folio_mark_accessed+0x425/0x8b0 [ 873.955790][ C1] ? __pfx_filemap_get_entry+0x10/0x10 [ 873.961342][ C1] ? copy_folio_from_iter_atomic+0x1974/0x1a30 [ 873.967526][ C1] ? trace_irq_disable+0x3b/0x140 [ 873.972568][ C1] shmem_get_folio_gfp+0x26f/0x16d0 [ 873.977775][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 873.983427][ C1] shmem_write_begin+0x16c/0x330 [ 873.988377][ C1] generic_perform_write+0x2d5/0x8f0 [ 873.993775][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 873.999586][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.005259][ C1] ? __mark_inode_dirty+0x4e7/0x13b0 [ 874.010571][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.016209][ C1] ? mnt_put_write_access_file+0xc0/0x100 [ 874.021938][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.027571][ C1] ? file_update_time_flags+0x400/0x4a0 [ 874.033122][ C1] shmem_file_write_iter+0xf8/0x120 [ 874.038328][ C1] vfs_write+0x612/0xba0 [ 874.042578][ C1] ? __pfx_vfs_write+0x10/0x10 [ 874.047352][ C1] ? __fget_files+0x2a/0x420 [ 874.051955][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.057596][ C1] ksys_write+0x150/0x270 [ 874.061927][ C1] ? __pfx_ksys_write+0x10/0x10 [ 874.066784][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.072852][ C1] do_syscall_64+0x174/0x580 [ 874.077460][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.083350][ C1] RIP: 0033:0x7f7725f9e019 [ 874.087758][ C1] RSP: 002b:00007f7726ea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.096171][ C1] RAX: ffffffffffffffda RBX: 00007f7726225fa0 RCX: 00007f7725f9e019 [ 874.104312][ C1] RDX: 000000000208e24b RSI: 0000200000000100 RDI: 0000000000000003 [ 874.112277][ C1] RBP: 00007f772603500c R08: 0000000000000000 R09: 0000000000000000 [ 874.120239][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.128201][ C1] R13: 00007f7726226038 R14: 00007f7726225fa0 R15: 00007ffffd8b02a8 [ 874.136191][ C1] [ 874.139203][ C1] task:syz.5.1991 state:R running task stack:25512 pid:12888 tgid:12887 ppid:5635 task_flags:0x40054c flags:0x00080000 [ 874.152796][ C1] Call Trace: [ 874.156069][ C1] [ 874.158996][ C1] __schedule+0x17d9/0x56c0 [ 874.163537][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.169176][ C1] ? __lock_acquire+0x683/0x2cf0 [ 874.174128][ C1] ? __pfx___schedule+0x10/0x10 [ 874.179068][ C1] ? __lock_acquire+0x683/0x2cf0 [ 874.184083][ C1] preempt_schedule_irq+0x4d/0xa0 [ 874.189116][ C1] irqentry_exit+0x14f/0x8f0 [ 874.193713][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.199354][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 874.204813][ C1] RIP: 0010:__pte_offset_map+0x64/0x240 [ 874.210363][ C1] Code: 31 c0 45 31 c9 50 e8 bb 47 82 ff 48 83 c4 08 e8 12 bc b0 09 89 c5 31 ff 89 c6 e8 27 98 a6 ff 85 ed 74 10 e8 ee 71 8b ff 84 c0 <74> 0e e8 d5 93 a6 ff eb 56 e8 ce 93 a6 ff eb 4f e8 e7 bb b0 09 89 [ 874.230062][ C1] RSP: 0018:ffffc90003dc72e8 EFLAGS: 00000202 [ 874.236142][ C1] RAX: 0000000000000001 RBX: 00007f328e053000 RCX: 0000000080000001 [ 874.244112][ C1] RDX: ffff8880435e5d00 RSI: ffffffff8c4bdd60 RDI: ffffffff8c4bdd20 [ 874.252084][ C1] RBP: 0000000000000001 R08: ffffffff82207e59 R09: 0000000000000000 [ 874.260077][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 874.268050][ C1] R13: 00007f328e200000 R14: ffff888077def380 R15: ffffc90003dc7358 [ 874.276038][ C1] ? __pte_offset_map+0x29/0x240 [ 874.280992][ C1] ? __pte_offset_map+0x62/0x240 [ 874.285938][ C1] ? pte_offset_map_lock+0x2d/0x210 [ 874.291139][ C1] pte_offset_map_lock+0x46/0x210 [ 874.296166][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.301802][ C1] ? __zap_vma_range+0x4105/0x4f10 [ 874.306926][ C1] __zap_vma_range+0x4191/0x4f10 [ 874.311931][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 874.317269][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.322923][ C1] ? mas_find+0xab1/0xcf0 [ 874.327262][ C1] ? unmap_vmas+0x1b9/0x550 [ 874.331779][ C1] unmap_vmas+0x390/0x550 [ 874.336128][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 874.341012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.346656][ C1] exit_mmap+0x293/0x9f0 [ 874.350906][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 874.355701][ C1] ? __pfx_exit_aio+0x10/0x10 [ 874.360396][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.366029][ C1] ? arch_uprobe_clear_state+0x1c8/0x240 [ 874.371673][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.377311][ C1] ? uprobe_clear_state+0x2ac/0x3e0 [ 874.382509][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.388148][ C1] __mmput+0x118/0x420 [ 874.392235][ C1] exit_mm+0x221/0x2d0 [ 874.396321][ C1] do_exit+0x6cd/0x2360 [ 874.400492][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.406127][ C1] ? __pfx_do_exit+0x10/0x10 [ 874.410730][ C1] ? cgroup1_freezing+0x20/0x350 [ 874.415669][ C1] ? cgroup1_freezing+0x20/0x350 [ 874.420608][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.426253][ C1] do_group_exit+0x22d/0x2f0 [ 874.430839][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 874.436045][ C1] get_signal+0x121b/0x12c0 [ 874.440568][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.446213][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 874.451771][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 874.457940][ C1] ? __fget_files+0x2a/0x420 [ 874.462563][ C1] exit_to_user_mode_loop+0x104/0x730 [ 874.467942][ C1] ? rcu_is_watching+0x15/0xb0 [ 874.472710][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.478779][ C1] do_syscall_64+0x353/0x580 [ 874.483376][ C1] ? trace_irq_disable+0x3b/0x140 [ 874.488417][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.494318][ C1] RIP: 0033:0x7f328ed9e019 [ 874.498730][ C1] RSP: 002b:00007f328fc590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 874.507146][ C1] RAX: 0000000000000001 RBX: 00007f328f025fa8 RCX: 00007f328ed9e019 [ 874.515118][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f328f025fac [ 874.523091][ C1] RBP: 00007f328f025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 874.531066][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 874.539043][ C1] R13: 00007f328f026038 R14: 00007ffee4fe5930 R15: 00007ffee4fe5a18 [ 874.547039][ C1] [ 874.550052][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g77425 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 874.561246][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 874.571206][ C1] rcu: RCU grace-period kthread stack dump: [ 874.577083][ C1] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 874.590598][ C1] Call Trace: [ 874.593875][ C1] [ 874.596803][ C1] __schedule+0x17d9/0x56c0 [ 874.601317][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.606952][ C1] ? __lock_acquire+0x683/0x2cf0 [ 874.611916][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.617572][ C1] ? __pfx___schedule+0x10/0x10 [ 874.622431][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.628067][ C1] ? schedule+0x90/0x2b0 [ 874.632316][ C1] schedule+0x164/0x2b0 [ 874.636479][ C1] schedule_timeout+0x152/0x2c0 [ 874.641329][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 874.646700][ C1] ? __pfx_process_timeout+0x10/0x10 [ 874.651996][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.657631][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 874.663441][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.669081][ C1] ? prepare_to_swait_event+0x322/0x350 [ 874.674643][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 874.679511][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.685148][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 874.690353][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 874.696162][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.701801][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.707439][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 874.712731][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 874.717943][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 874.723762][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 874.728365][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 874.733579][ C1] ? __kthread_parkme+0x71/0x1f0 [ 874.738527][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.744256][ C1] ? __kthread_parkme+0x196/0x1f0 [ 874.749297][ C1] kthread+0x388/0x470 [ 874.753386][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 874.758602][ C1] ? __pfx_kthread+0x10/0x10 [ 874.763213][ C1] ret_from_fork+0x514/0xb70 [ 874.767825][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 874.772947][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.778583][ C1] ? __switch_to+0xc89/0x1420 [ 874.783269][ C1] ? __pfx_kthread+0x10/0x10 [ 874.787873][ C1] ret_from_fork_asm+0x1a/0x30 [ 874.792656][ C1] [ 874.795663][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 874.801984][ C1] CPU: 1 UID: 0 PID: 4985 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 874.812407][ C1] Tainted: [L]=SOFTLOCKUP [ 874.816723][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 874.826772][ C1] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 874.832326][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 874.851927][ C1] RSP: 0000:ffffc900045e7810 EFLAGS: 00000293 [ 874.858000][ C1] RAX: ffffffff81baf7fd RBX: dffffc0000000000 RCX: ffff88807fae3e00 [ 874.865965][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 874.873934][ C1] RBP: ffffc900045e7970 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 874.881904][ C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 1ffff110170c85fd [ 874.889871][ C1] R13: ffff8880b873c448 R14: ffff8880b8642fe8 R15: 0000000000000000 [ 874.897866][ C1] FS: 00007f5ec0f44880(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000 [ 874.906790][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 874.913372][ C1] CR2: 0000559859a0c8e0 CR3: 000000002a90f000 CR4: 0000000000350ef0 [ 874.921346][ C1] Call Trace: [ 874.924622][ C1] [ 874.927541][ C1] srso_alias_return_thunk+0x5/0xfbef5 [ 874.933008][ C1] smp_call_function_many_cond+0x11fd/0x15f0 [ 874.939011][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 874.944219][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 874.949606][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 874.955946][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.961591][ C1] ? rcu_is_watching+0x15/0xb0 [ 874.966351][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.971987][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 874.977366][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 874.982571][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 874.987700][ C1] flush_tlb_mm_range+0x5c4/0x1090 [ 874.992825][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 874.998460][ C1] ? page_table_check_clear+0x49d/0x500 [ 875.004021][ C1] ptep_clear_flush+0x120/0x170 [ 875.008879][ C1] do_wp_page+0x3d52/0x4c70 [ 875.013392][ C1] ? do_wp_page+0x375f/0x4c70 [ 875.018088][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 875.022948][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 875.027995][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 875.033367][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.039014][ C1] handle_mm_fault+0x1490/0x3080 [ 875.043982][ C1] ? handle_mm_fault+0xec/0x3080 [ 875.048931][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 875.054222][ C1] ? lock_vma_under_rcu+0x45a/0x500 [ 875.059453][ C1] do_user_addr_fault+0xa4d/0x1340 [ 875.064587][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.070226][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 875.075859][ C1] ? trace_page_fault_user+0x84/0x1e0 [ 875.081245][ C1] exc_page_fault+0x6a/0xc0 [ 875.085756][ C1] asm_exc_page_fault+0x26/0x30 [ 875.090604][ C1] RIP: 0033:0x7f5ec08b5b3b [ 875.095017][ C1] Code: 04 07 0f 85 a9 00 00 00 f3 0f 6f 47 10 48 8b 57 18 66 48 0f 7e c0 48 3b 78 18 75 7b 48 3b 7a 10 75 75 48 8b 77 10 48 89 50 18 <66> 0f d6 42 10 48 81 f9 ff 03 00 00 76 28 48 8b 57 20 48 85 d2 74 [ 875.114627][ C1] RSP: 002b:00007ffeaa8e5ae0 EFLAGS: 00010246 [ 875.120704][ C1] RAX: 00007f5ec09f1c60 RBX: 0000000000000040 RCX: 0000000000000151 [ 875.128669][ C1] RDX: 0000559859a0c8d0 RSI: 00007f5ec09f1c60 RDI: 0000559859a271a0 [ 875.136632][ C1] RBP: 00007f5ec09f1ac0 R08: 00007f5ec09f1ac0 R09: 0000000000000040 [ 875.144595][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000030 [ 875.152560][ C1] R13: 0000559859a271a0 R14: 0000000000000150 R15: 00007f5ec09f1b20 [ 875.160547][ C1]