last executing test programs: 8.975166735s ago: executing program 2 (id=371): r0 = syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x0, &(0x7f0000009780), 0x1, 0x9798, &(0x7f000000cd80)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) setxattr$security_ima(&(0x7f0000000380)='./file1\x00', &(0x7f0000000140), &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x700, 0x3) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) (async) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) 7.99169591s ago: executing program 4 (id=376): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c80)={@local, @random, @void, {@llc_tr={0x11, {@llc={0x80, 0xbc, "e1", "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"}}}}}, 0x0) 7.920347271s ago: executing program 4 (id=378): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x36) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x703283d8d4b5ce77}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x352}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002340), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000025c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002380)={0x1e8, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd20}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xba07}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa3f}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffe00}, {0x6, 0x11, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}, {0x6}}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4}, 0xa7854a2b03891b87) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000f87000/0x4000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000180)=@in, 0x80, &(0x7f0000000500)=[{&(0x7f0000000580)=""/114, 0x72}, {&(0x7f0000000b00)=""/154, 0x9a}, {&(0x7f0000000bc0)=""/135, 0x87}], 0x3, &(0x7f0000000600)=""/100, 0x64}, 0x4}, {{&(0x7f0000000c80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/243, 0xf3}], 0x1, &(0x7f0000000e40)=""/21, 0x15}, 0x9}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001240)=[{&(0x7f00000010c0)=""/75, 0x4b}, {&(0x7f0000001140)=""/160, 0xa0}, {&(0x7f0000001200)}], 0x3, &(0x7f0000001280)=""/4096, 0x1000}, 0x6}], 0x3, 0x10000, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6e6f646f74732c646f74732c646f74732c6e6f646f74732c646f74732c757365667265652c646f74732c71756965742c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c636865636b3d7374726963742c636865636b3d72656c617865642c6e66732c636f6465706167653d3835302c6e6f646f74732c646f74732c646f74732c6572726f72733d72656d6f756e742d726f2c6e6f646f74732c646f74732c003aca5c31ca83d40e895261ab3165862539657bc71b03070f7a66d22579b619d1da043ab922b35297df1bb850a9d203bf3b773211"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") mount$nfs(&(0x7f0000000100)='\xae', &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x2e0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x54}}}}, [@NL80211_ATTR_FRAME={0x2b8, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x8, 0x3}, @value=@ver_80211n={0x0, 0x10, 0x0, 0x2}}, 0x8, @default, 0x1080, @void, @val={0x1, 0x1, [{0x24}]}, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x0, 0x80, 0x6, 0x8}}, @val={0x6, 0x2, 0x8}, @val={0x5, 0x89, {0x9, 0x10, 0x6, "1371552672cf6cbf61992a27d72e782fa52715f87aa4f397df7ae70e36a2bd04f00ad252dc0703d475b6864521c0c011a0ff66c310a53f9c4969d33be040592b05634875a6704830fbc938429954234b1605a9b61434fa056d206a03265da7ee699f3a53750d15fe7c868b37382ba10f5853fb83bf6b3980e6a7eb1d3ed8558e9dbcd089d4c9"}}, @val={0x25, 0x3, {0x1, 0x99, 0x1}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x4, 0x9, 0x3}}, @val={0x2d, 0x1a, {0x8, 0x2, 0x4, 0x0, {0x8, 0x80, 0x0, 0x7, 0x0, 0x0, 0x1, 0x3}, 0x6, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4}}, @void, [{0xdd, 0xc6, "9611224941a572f8dfb554326fc28329ca62fee07b1fceaed54d7fb1be1eaa3eef6f29e90f553b5b8d6cae481e8b21983b565ed27e46c02013cd49fc61981144383b08c01f5c535db69ab092215d304f96a2e580ecee9abd704ed12b5fe2a018d87d1a3e1411db6c14bd41a249cbf33b389e7effc3c36f85ff06c1321d770d431c1f996bf74320d6232043e081db2fce7e280704fa62051fa92c68c18e267775bdd87ef730a2e5fcda316d0ca3d87627a25906b40c43be330a91b4f4f2a008df051b5c39de83"}, {0xdd, 0xf2, "105ddc3bccdf91726a499a229ba8bc292ecf2219ebd58ca4ff56b86f8b18184399826e5a7083af4d03cda282ffd24f4c3092b75b02dece57cc0063d8c76b517ea039ebbd2b201e6e901b59a53fe10fa5007849d513506866308752ce65c396d3f351f34c507af511568c7027493f08e988584e0f54bde174ba31fa2d92b71547859db5bcc3313b6b0f6981f0c4846855313fa32a01d8175ecd45a285dcf86d104d55d500d499275dfa3edb4fb410422f2463813f9234c77718dfd82bc927b8fba6770a6318414685b673bdb60e49c98c37553de6eefc9ad1a586aff263013f721e397ec00bad02adf6041f0689f5e17f9a9d"}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000004) 6.775940088s ago: executing program 3 (id=381): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000500)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7ffb, 0x101200) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0585604, &(0x7f00000000c0)={0x0, 0x0, '\x00', {0x0, @reserved}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x54, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x54}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r8 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000600)={'syz', 0x0}, &(0x7f0000000640)=ANY=[@ANYBLOB="01"], 0x29, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000dc0)={0xe4, 0x0, &(0x7f0000000c00)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@weak_binder={0x77622a85, 0x100, 0x1}, @fda={0x66646185, 0x2, 0x0, 0x1c}, @fda={0x66646185, 0x3, 0x2, 0x17}}, &(0x7f0000000080)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000009c0)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/173, 0xad, 0x0, 0x35}, @fda={0x66646185, 0x9, 0x2, 0x3c}}, &(0x7f0000000a40)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b40)={@fda={0x66646185, 0x8, 0x2, 0x5}, @fda={0x66646185, 0x7, 0x2, 0x2e}, @ptr={0x70742a85, 0x0, &(0x7f0000000a80)=""/170, 0xaa, 0x2, 0xc}}, &(0x7f0000000bc0)={0x0, 0x20, 0x40}}}, @increfs], 0xb2, 0x0, &(0x7f0000000d00)="702345b0b59bfd5b165baaec27cce52369e822a4af90bc40f71d81dd60fe36264472c88e77b270e2caf7429b5be4062dd2f0dca69ec1a5b79264d754500a7600d95d4daa2f4d2a54aa113d91190cd359a2625e4505cde1f4139fe55aa2720b414510126f6d8445ab951a01c61662fd989ccdecbe5a0c695eed77765fe32f1fec647c3feee7b7b2e690e3921474a6123892bebd1b3a3a2a6234e5462ed6088dda9ef351d35a4cca399d7cc062f1d1bcb08a25"}) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000001480)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x38, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40044) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000e00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x6a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0xfa1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xf1, 0x9, 0x1}}}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0xdf, 0x1, 0x2, 0x20, 0x8}, 0x5f, &(0x7f0000000e80)={0x5, 0xf, 0x5f, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x7}, @generic={0x53, 0x10, 0x0, "053a31c1c22b6f9256619ff31d4e1989049a595eea53634b062f443fa9237860fa58f2c055f6357488b6e26ecff19bfc61577aead81376e88e873f3ecc706875662d10cf45929bc86e33196da60be4d8"}]}, 0x9, [{0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x820}}, {0xa7, &(0x7f0000000f40)=@string={0xa7, 0x3, "e9d488d8865dc329f1ecb174f2cfadc53fef5f5c54963138dfd49329b17f7859c97a6bec0b511b268fd64d60e2c3bf7bc790ed3273be83f47572cc706b19bd6f5a2fee712b9a6770d41e0c5430689717a3b6625c54665c33282d8969d9441c14c069132d5b0bc6a9ab9c91f9b2c116141d8261dabb766d4b52667892710d2767c7c904415ea89321d57620b9f38f82070ea3ab6690aadcbee7d32ab7c89e229cef742d1adc"}}, {0x19, &(0x7f0000001000)=@string={0x19, 0x3, "158b23bcaa446c5b65b4840396471d6d18965e3c8508db"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "db507b6c30c34a3d5688b172b1f0126b3bbcb7989191588ee3b45fab983abd060f0c4eaf68c6f30588199b191b98c29181bbe18323b4d5418dbbd00451e9a6787fb6ce78743e6695a4b839fc43f55dcc095944f2b3c8d6ef6749922cadb968bdf51fb056347759d06cddd5086953a3bd37ab0921eac107f4fc523985ac276c9e21b8dabba1a378f8f45c63ab0248bdf6d305"}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x8c, &(0x7f0000001200)=@string={0x8c, 0x3, "a8b46de2489c26f5a39fb0657a8335149233e0bd8624b92ebc1439d4b47a5428aedd6315779da2579b343b2a28b3aff9ae5bfe891897cc1ad3ee6520238190ee0fc113a0f5b8dd7582647785707527dc3cdd53eb4d1c862ccfc71db981121df1a1b6e354c82fc8d6a26d758623b18c64ba134ccdd312dddca65a4b7ba4d299915a5576c5bdc74d9ecd99"}}]}) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x80044940, &(0x7f00000030c0)) readv(r9, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/93, 0x5d}], 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0406619, &(0x7f0000006440)={@id={0x2, 0x0, @a}, 0x10, r8, '\x00', @d}) syz_usb_control_io(r5, &(0x7f0000001340)={0x2c, &(0x7f0000000000)={0x0, 0x21, 0x4d, {0x7, 0x2, "b9cb7253ad38c018ced4d66f065526eade633be68ff164825d03ba210a68a0d4591df545"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x1220421, &(0x7f0000000700)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_lock}, {@nojournal_checksum}, {@init_itable}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x80}}, {@nomblk_io_submit}, {@data_err_abort}]}, 0xfc, 0x527, &(0x7f00000001c0)="$eJzs3cFvI1cZAPBvHDu72WSbFDhAJbqFFmUjWDtp1DZwKEVCcKoElPsSEieK4sSr2Gk30YpmxR+AhBAgcYILFyT+ACRUiQtHhFQJziBAIAQpHECCHWR77M06dpIN3jhNfj9pMu/NePx9L86M581MZgK4tF7Lhgdpms5ExGQ2PZcNH29U9iKei4gb+/eW3tu/t5REmr7xtySSiGjU2++VNl2J8dYiEfmIr3wx4uvJ4bi1nd31xUqlvJXVS/WNO6Xazu6ttY3F1fJqeXN+fu7lhVcWXlqY7Z/8p0ePa97KeFa4HhGvfv5P3/3Wj7/w6s8/9dbvb//l5jeSVs5vR1c7HlP+qJmtphfialafycZbpwx2HuUPFsZOtsz97E8EAICz1dgv/UC2nz8TkzESI8NOCQAAABiw9LMT8Z+kfe7ukNE+0wEAAID3kVxETESSK2bX+05ELlcsRvMa3g/FtVylWqt/cqW6vbncmBcxFYXcylqlPJtdKzwVhaRRn2uWH9Zf7KrPR8TTEfGdybFmvbhUrSwP++AHAAAAXBLjXf3/f062+v8AAADABTM17AQAAACAJ07/HwAAAC4+/X8AAAC40L70+uuNIW0//3r5zZ3t9eqbt5bLtfXixvZScam6dae4Wq2uNu/Zt3Hkm3UeBL25fbdUL9fqpdrO7u2N6vZm/fZa5xHYAAAAwBl7+sY7v00iYu8zY82hYfTA/H9nzwkYWoLAE9M5ZBdJNh49/KLfPdUa//GMkgLOxMiwEwCGJj/sBIChKQw7AWDoku4JVx6t9r1451fZ+GODzwkAABis6Y/0P/+fO3LJvaNnA+eelRguL+f/4fJqnv/vcclfT3YW4EIp2AOAS+/Q+f8ux57/P5b/IQIAgGGbaA5Jrpgd3puIXK5YjLjefCxAIVlZq5RnI+KpiPjNZOFKoz7XXDI5ts8AAAAAAAAAAAAAAAAAAAAAAAAAALSkaRIpAAAAcKFF5P6c/KJ1L//pyRcmuo8PjCb/mozsEaFv/eCN791drNe35hrT/96ZXv9+Nv3FYRzBAAAAALq1++ntfjwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNJ7+/eW2sNZxv3r5yJiqlf8fFxtjq9GISKu/SOJ/IHlkogYGUD8vfsR8eFe8ZNGWp2QveKPPfn4MZX9FnrFHx9AfLjM3mlsf17rtf7l4rnmuPf6l494pH5a/bd/0dn+jfRZ/6+fMMYz7/601Df+/Yhn8r23P+34SZ/4z58w/te+urvbb176w4jpnt8/ySOxSvWNO6Xazu6ttY3F1fJqeXN+fu7lhVcWXlqYLa2sVcrZz54xvv3Rnz04qv3X+sSfOqb9L5yw/f999+7+B1vFQq/4N5/vEf+XP8pecTh+Lvvu+0RWbsyfbpf3WuWDnv3Jr589qv3Lfdp/3Od/84Ttn/nyN/9wwpcCAGegtrO7vliplLcubKHRSz8HaTxeYTT7eM5LPhe08PbhWTfi1G+Ypmna+ND+j8SS00cfTCHpTBnudgkAABi8h3v/w84EAAAAAAAAAAAAAAAAAAAALq+zuK9Yd8y9TikZxC20AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4n8BAAD//6ZM5XE=") 6.456188613s ago: executing program 2 (id=385): socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x88, &(0x7f0000000780)=ANY=[]) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 6.265590086s ago: executing program 4 (id=386): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_clone(0x100, 0x0, 0xfffffffffffffc2a, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1) r4 = syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0x9, 0x24, 0x8, 0x0, 0x0, 0x0, 'LX'}, @mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x5, "96efc259"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x2, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7b, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r4, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r4, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[@ANYRES16=r7], 0x920) r8 = dup(r6) write$FUSE_BMAP(r8, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002100)=ANY=[@ANYBLOB="b00000000000000016"], 0xb0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r8}}) syz_usb_control_io$uac1(r4, 0x0, 0x0) r9 = socket(0x11, 0xa, 0x5) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x43, 0x4) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000400)={0x20002007}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) madvise(&(0x7f000030c000/0x1000)=nil, 0x1000, 0xf) 5.808672402s ago: executing program 2 (id=387): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4000001b}) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xb91b, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2502, 0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad09240306010103", @ANYRES64=r4], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1e) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xaa, 0x3a, 0x37, 0x40, 0xb48, 0x2003, 0x3961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0x27, 0xa1, 0x41, 0x0, [], [{{0x9, 0x5, 0x8b, 0x2, 0x200, 0x44, 0xb7, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x294, &(0x7f00000002c0)={[{0x70, 0x4e00, "8f4f4ddf4466c1dc237ea9e1d77d18f495ff6af8b0674c225b319798be346a40149fa6a6c9615c0c91de975ad5f5a609cc97403159f9637fe39b2a515142edecc3364b3a2e3c9dfeca8daed0a5d3bc6a916f3e7e7e73c1133d702106867367c3957b05adbdf5eebfc01aad46ff4c176b"}, {0x30, 0x4e00, "b4eb75e3d24241d8aaf841a90051da8948aad640304970c231dd01c9db70c6307cf97e56dbd4c98e627ba9a2e35448a5"}, {0x8b, 0x4e00, "404a67d30781ac8174dd4e3f5f9684ca41a2499c8406f41aa8aada7322800d85db64f8101ddf01eb72c2b97ff567a79d99c7f82f6019f350fddc13b0fc7aef98eb160dffd82de65e777ac0443142d94b25dd4a25cb6eea82ac0e507ee986a0a24e34449a5a23dff261e0d2f12b7de8427088ab8bd2f7ac49114a9201af024eec528f815caf666cf164622f"}, {0x2, 0x4e00, "3fc7"}, {0xfb, 0x4e00, "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"}, {0x4e, 0x4e00, "8890aacd186fa6910f587a043714f3db9739b22da36619a0fa0def0e743b9c9fbe93462289c43b8f638639c975328599bf6a86f5f8059300bb62dc9ea0bc13bc2dda72f15b4c71465a02fc3ff05c"}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async) epoll_create(0x5) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4000001b}) (async) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xb91b, 0x0, 0x0) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2502, 0x0) (async) syz_usb_connect(0x0, 0x6b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2401020005028a010209240603040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad09240306010103", @ANYRES64=r4], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) (async) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x1e) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xaa, 0x3a, 0x37, 0x40, 0xb48, 0x2003, 0x3961, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x53, 0x0, 0x1, 0x27, 0xa1, 0x41, 0x0, [], [{{0x9, 0x5, 0x8b, 0x2, 0x200, 0x44, 0xb7, 0x3}}]}}]}}]}}, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) (async) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x294, &(0x7f00000002c0)={[{0x70, 0x4e00, "8f4f4ddf4466c1dc237ea9e1d77d18f495ff6af8b0674c225b319798be346a40149fa6a6c9615c0c91de975ad5f5a609cc97403159f9637fe39b2a515142edecc3364b3a2e3c9dfeca8daed0a5d3bc6a916f3e7e7e73c1133d702106867367c3957b05adbdf5eebfc01aad46ff4c176b"}, {0x30, 0x4e00, "b4eb75e3d24241d8aaf841a90051da8948aad640304970c231dd01c9db70c6307cf97e56dbd4c98e627ba9a2e35448a5"}, {0x8b, 0x4e00, "404a67d30781ac8174dd4e3f5f9684ca41a2499c8406f41aa8aada7322800d85db64f8101ddf01eb72c2b97ff567a79d99c7f82f6019f350fddc13b0fc7aef98eb160dffd82de65e777ac0443142d94b25dd4a25cb6eea82ac0e507ee986a0a24e34449a5a23dff261e0d2f12b7de8427088ab8bd2f7ac49114a9201af024eec528f815caf666cf164622f"}, {0x2, 0x4e00, "3fc7"}, {0xfb, 0x4e00, "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"}, {0x4e, 0x4e00, "8890aacd186fa6910f587a043714f3db9739b22da36619a0fa0def0e743b9c9fbe93462289c43b8f638639c975328599bf6a86f5f8059300bb62dc9ea0bc13bc2dda72f15b4c71465a02fc3ff05c"}]}) (async) 4.00775162s ago: executing program 4 (id=393): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$damon_contexts(r1, &(0x7f0000000000)=[{' ', './file0'}, {' ', './file0'}, {' ', './file0'}], 0x3) r2 = syz_open_dev$vbi(&(0x7f0000000280), 0x3, 0x2) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000540)=@fd={0x400, 0x5, 0x4, 0x1, 0x4, {}, {0x5, 0x2, 0xf7, 0x4, 0x7, 0x5, "c133ecc4"}, 0xe, 0x4, {}, 0x7}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000980)=ANY=[@ANYBLOB="12018103000000406a05de0040000102030109022d0001010ef405090400050103013a765b1bf1c54eb022cb090905810320040905ff0905027e8814940700e03b3e2aea5bd75ad63221b1fb96553db5d20c0752d0fa7ea25e7b7cdaf759c6f75a6a93e2d0eb9916b2c86acefb52bffb2fe7a03e28406222c08fd81c0995018c3bfb6c236d56b0f0a294199968879631bb"], &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x7f, 0xc, 0x5, 0xff, 0x6}, 0x49, &(0x7f00000001c0)={0x5, 0xf, 0x49, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x0, 0x5, 0x8000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9, 0x0, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x51, "3e1d427c5f3d3aa52543f3dfe4a8d7b2"}, @ss_container_id={0x14, 0x10, 0x4, 0x8f, "e283249a6465f48d2c6e89d976ff9766"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x60, 0x5, 0xb, 0x8}]}, 0x2, [{0xc5, &(0x7f0000000440)=@string={0xc5, 0x3, "621574645f4a498daf88ac9c863fd282141e8113babb4197798714c67ca0e7f617a1e85f4616da034a66427ab7ab43fffbca9060305e683e2cbad5eee4d5f269b393a5eafc99d06f4bdefd4d0759990ee361bcee9170f54bbdd4d2ab8fe11cddf90acc07535ee69ddc77b230bb856ff99b15a1d58f94fb540e8ff39e152990b68b15b85b70cb6756e3c3608451d406680cc7bcaacbe6a1fa29336b21d65e8c48671c48774a2e4d1b946cebfbfcf4ffbff308ca4cd93b7e00191ff8f139c39d4c366810"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}]}) r3 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockname$llc(r4, &(0x7f0000000000), &(0x7f00000000c0)=0x10) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r5, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [{}, {0x2, 0x6}], {}, [], {0x10, 0x2}}, 0x34, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)={0x144, r8, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x11a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xb1, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x0, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x1, 0x0, 0x2f, 0x6}}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_emit_ethernet(0x15f, &(0x7f00000002c0)={@remote, @remote, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x121, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x67}, @fragment={0x6c, 0x0, 0x40, 0x0, 0x0, 0x6, 0x64}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8], "e706bee7afdca7a4539eb91d778047fb21070e995f3b69b380696c9239b7681f4b4da0a07622edbbb6f41176e096d51405192e2ee0519ea6fab0835b008489bf89843e3b886e848d8abcec27e347c61646d1a14ea429fce742805c7fa7eb69cc48c03ead08c0ed2ea07cb49bd4cc990b923897375990d85c0adec8dbf5aa280c09157dddd59c1f3101bb675cca50879e83f49ff74ace3ee4f6689d1f7693dff616118979e25c9af08155c918d640fc6e90546d4d9db1f884e41800f11c62e508b7fe8ecd6dcea7694a02b0"}}}}}}}, 0x0) 3.249981241s ago: executing program 4 (id=398): io_uring_setup(0xdac, &(0x7f0000000180)) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xfdef) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0c000000000000000000000000000000050000080500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) unshare(0x8000000) r8 = socket$kcm(0x10, 0x2, 0x4) close(r8) socket$kcm(0x10, 0x2, 0x0) 2.558472221s ago: executing program 2 (id=400): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x101, 0x4) getrlimit(0xd, &(0x7f0000000080)) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xbe2, 0x5, 0x2bde1951, 0xc, 0x1, 0x0}) get_robust_list(r1, &(0x7f0000000200)=&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, &(0x7f0000000240)=0x18) setrlimit(0x1, &(0x7f0000000280)={0x5b82, 0xffffffffffff8000}) fallocate(r0, 0x0, 0x9, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r0, 0x0, 0xb0}, 0x18) unshare(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x317f}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xff12}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x3362}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff7}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7f}, {0x6, 0x16, 0x8001}, {0x5}, {0x6, 0x11, 0xa1}, {0x8, 0xb, 0x1a}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) pselect6(0x40, &(0x7f0000000640)={0x5, 0x1, 0x6, 0x7, 0x7, 0x9, 0xfffffffffffffffd, 0xb06}, &(0x7f0000000680)={0x10, 0x3, 0x8001, 0x6893, 0x7ff, 0x1, 0x6227e67e, 0x8000}, &(0x7f00000006c0)={0xb45c, 0x7fffffff, 0x200, 0x8, 0x9, 0x1, 0x1, 0xfffffffffffffff8}, &(0x7f0000000700)={0x0, 0x3938700}, &(0x7f0000000780)={&(0x7f0000000740)={[0x1]}, 0x8}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)=0x0) get_robust_list(r4, &(0x7f00000008c0)=&(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)}}, &(0x7f0000000900)=0x18) socket$kcm(0x29, 0x7, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000940), &(0x7f0000000980)=0x4) r5 = getpgid(r4) syz_clone3(&(0x7f0000000c00)={0x21000, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40), {0x10}, &(0x7f0000000a80)=""/219, 0xdb, &(0x7f0000000b80)=""/28, &(0x7f0000000bc0)=[0x0, r5, r4, r4, r4, r1, r4, 0x0, r4], 0x9, {r0}}, 0x58) getrlimit(0x9, &(0x7f0000000c80)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000cc0)={0x18, 0x1, 0x0, {0x80000001}}, 0x18) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) clock_nanosleep(0x5, 0x1, &(0x7f0000000d40)={r6, r7+10000000}, &(0x7f0000000d80)) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x400) epoll_pwait2(r8, &(0x7f0000000e00)=[{}], 0x1, &(0x7f0000000e40)={0x77359400}, &(0x7f0000000e80)={[0xbf]}, 0x8) getsockname$packet(r8, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000f00)=0x14) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xcb, &(0x7f0000000f40)={0x1, 0x1, 0xf, r9, 0x1}, 0xc) unshare(0x10070a00) setsockopt$MRT6_DEL_MFC(r8, 0x29, 0xcd, &(0x7f0000000f80)={{0xa, 0x4e22, 0x2, @remote, 0x5}, {0xa, 0x4e22, 0x7, @mcast2, 0x400}, 0xffffffffffffffff, {[0x382, 0x5, 0x1, 0x355a, 0x6, 0x1, 0xfffffffb, 0x9ae0]}}, 0x5c) 2.513836102s ago: executing program 3 (id=401): socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.403976234s ago: executing program 1 (id=402): r0 = socket$netlink(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f00000004c0)={0xffffffffffffffff, {0x10, 0x4, 0x2, 0xffffffffffffffff, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1000008) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x404a000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)=0xffffffff) openat$kvm(0xffffff9c, &(0x7f0000002f80), 0x80000, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000180)={0x20000, 0x101, 0x9}, &(0x7f0000002fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345, {0x0, r6}}) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40a000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcf, &(0x7f00000003c0)=""/207, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000080)={0x5, 0xfffffffe}, 0x10, 0x0, r9, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r11 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) io_submit(0x0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x4, r10, &(0x7f0000000500)="e2cac4e4b97c1fdbd0e0ad56fdb11b7a58d142acd600d76549c9c9eb198c3df9e91d05252d56ff39c2eafc6587ef52e97f068562ed8d9383c737c8f54372c59b372cf63ec97b0d1933ebb1723dabaa3548202f0b20f0c4ab9045418f9f585a365ec1a2c0cfcd88db03c835ee401b33bf29", 0x71, 0xccad}]) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000000000004a2a7eb20000000007000000487271c757fde1a7c13842dba9dbd78b621d0fcc2418", @ANYRES32=r13, @ANYBLOB="100a06000908010014001a80100004800c000680080001"], 0x34}}, 0x14) setresuid(0x0, r8, 0x0) 2.293390615s ago: executing program 3 (id=403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.246853906s ago: executing program 2 (id=404): r0 = io_uring_setup(0x5f43, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1, 0x1bc}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.109878738s ago: executing program 2 (id=406): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmsg(r0, &(0x7f0000000a00)={&(0x7f0000000280)=@nfc_llcp, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)=""/56, 0x38}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000400)=""/18, 0x12}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/206, 0xce}, {&(0x7f0000000700)=""/73, 0x49}, {&(0x7f0000000780)=""/221, 0xdd}], 0x9, &(0x7f0000000940)=""/189, 0xbd}, 0x40002060) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000dc0)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_IE={0x5, 0x3, "bb"}]}]}, 0x3c}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xd5, 0x99, 0x3d, 0x8, 0x4e6, 0xc, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9e, 0x0, 0x2, 0xe5, 0xe7, 0xd9, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}, {{0x9, 0x5, 0x8a, 0x3, 0x3ff}}]}}]}}]}}, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x11) 2.109209638s ago: executing program 4 (id=407): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18e0ff00be00"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x230d00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0xd000, 0x1000, &(0x7f0000a58000/0x1000)=nil}) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff6000/0x3000)=nil, 0x400c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0xc618, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x5519, &(0x7f00000079c0)="$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") r4 = getpid() sched_setaffinity(r4, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000780)) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r7, &(0x7f00000008c0)=[{&(0x7f0000002380)=""/169, 0xa9}, {&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000007c0)=""/235, 0xfffffffffffffff6}, {&(0x7f0000000300)=""/51, 0x33}], 0x4, 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f0000000040)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x80000000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x5, &(0x7f00000009c0)=ANY=[@ANYRES64=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000680)=""/170, &(0x7f0000000740)=0xaa) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000005f10000000000000c30000000000000018000000a522000000000000f8ffffff8e00050000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f0000000b80)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xf2ec, 0x74}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000236000/0x3000)=nil, 0x3000, &(0x7f0000000540)='\x00') 1.26374071s ago: executing program 3 (id=409): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x18, 0x8, 0x81, 0x6, 0x40000, 0x4, 0x6, 0x81, 0xffffff19}}) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="60008100", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) fsopen(0x0, 0x1) 1.182543962s ago: executing program 3 (id=411): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2, 0xc7, 0x10, 0x200000000040}}, 0x20, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d4e, 0x103) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000006c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @default, @bcast, @bcast]}) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast]}) 1.113447673s ago: executing program 0 (id=413): r0 = io_uring_setup(0x5f43, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1, 0x1bc}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r4, &(0x7f0000000280)='./file0\x00', 0x200) listen(r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 999.786515ms ago: executing program 0 (id=414): socket(0x10, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 941.113676ms ago: executing program 3 (id=415): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="2c7574663822f9"], 0x81, 0x1504, &(0x7f00000017c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44890}, 0x4000080) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_destroy(r3) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='*sYz1:syz1|'], &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0) 940.189036ms ago: executing program 0 (id=416): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x4000) 832.093397ms ago: executing program 1 (id=417): r0 = io_uring_setup(0x5f43, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x1, 0x1bc}) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 707.832329ms ago: executing program 0 (id=418): socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101842, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) clock_getres(0x2, 0x0) syz_read_part_table(0x5c2, &(0x7f0000000f00)="$eJzs2z9I3GccBvD3Lh6BZMiSKUuTFDKULAkZc0MS7i4JFo5TF7soKCLedIJw0qOCDnqD4g3i6CLCLVYnzxucFIXORRwsgoNLiy6Ci1esb6EU+wd7LQ18PvDjy/vyvO/DO9x4gU9aMvzUarUSIYTW3ZsTE39yuqeeyX54nH9T6A4hEVohhJGvPv/lnkRM/Hrr07g+jOvlpXvNmbP3qfpB1/mzvu1q8jdtV9/9lUZPWx7Iv2o1vfNgcqqUmy2nh/dzlePp77/78tvTTKHRWa2tfUy9G4i53Tg74hwN5TAeRkJ/KIZiGAylNvUv1o9eXD7K1TeGXl9km3NbL2Mu/w/f+Xf7x57M99Yqb5+vP1x4Vd7cK5zcuc4V/+DXBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8tqeufB5FQpN1tOD+/nksfTYyGE00yh0VmtrX1MvRuIud04O+IcDeUwHkZCfyiGRBgMpbb0V44X60cvLh/l6htDry+yzbmtlzGX//3BjlsW/kX/2JP53lrl7fP1hwuvypt7hZM717ni3fb0AQAAAAAAAAAAAAAAAAAAwE0y2Q+P828K3d/E9Rc/fp28mq34f/fP4v7TOA/j/vLSvebM2ftU/aDr/FnfdvWHuD8Rv/srjZ7/9CHcys8BAAD//4Mnkx8=") r1 = syz_open_dev$vim2m(&(0x7f0000000780), 0x83, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000480)={0x12, 0x1, 0x0, "8eb8a828e93b07f1dd06da7a41bfeac48048beb159fbba176fb1de26098c68d9"}) 648.31491ms ago: executing program 1 (id=419): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x19, &(0x7f0000000000)="020000000980ffff", 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async) listen(r0, 0x0) (async) socket(0x28, 0x5, 0x0) (async) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt(r2, 0x84, 0x19, &(0x7f0000000000)="020000000980ffff", 0x8) (async) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) accept4$unix(r0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) (async) 463.977952ms ago: executing program 1 (id=420): r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x3e) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x380c8c1, &(0x7f00000000c0), 0x0, 0x5cf, &(0x7f0000000c40)="$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") ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x1c0, 0x43, 0xa0, 0x1c0, 0x98, 0x290, 0x178, 0x178, 0x290, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {}, 0x89, 0x1}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x3, 0xfffffffd, 0x8, 0x0, 'syz1\x00'}}, @common=@unspec=@devgroup={{0x38}, {0x1, 0x0, 0x7f, 0xfffeffff, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x2}, {0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x388) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, r2}, 0x14) sendmmsg$inet6(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2, @private1, 0x7}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000180)="3e0b883733de528a478c8e8d341f434ed5f2e53f08833986e43506c89196fa936d8a0517fdda7a0429aa004700f3828e01f94b5a67db38de2d63eef4a3095dddc6234a0e6ab50965aabeffbf7820b4405fb1aaf9aff3fcd21bfe7fc05587378dfd4153a23182047dbc25426115a4eea581b72becdebab8ebaca0f213d4068f01b703c1d163", 0x85}, {&(0x7f0000000240)="cc707acb01567d73b1b8ced015ffef8a56a2e77dca0681e5e30b2691c046df88c09114b78cf105fedfa3f33e3f0c8cfd7baf0270a902c0fc17558720b69e28895b33854eaf0cedf40d81b64156a680e1736f5973f85faa1ca3e356933a72d4cca50c8cfae993f12887631b0b1e207d3c2808c5d9a58d875f81a7032fbf27b58df7ebd35ba34007180acb7e4fa70c1e7f76ebf2382076ef8de9715d493985b82ecc9ff700a69eaf668ef3d2c8ca0da53c", 0xb0}, {&(0x7f0000000300)="847ce1b3f65b3e3da8b4e01f9949a82d61cefeba8d63f080ce72971126d8837a1eefc1d81ce710817cf62bc2aaa32682d9915018a1418b36e0ec68d17e688f8472816bd9b20cce1946c9c05dbbf45a7c29586a81e76dcaa9eca7b348f024f054b1203b32c14f1cdd0aa8a097b74530e69771ac25c63104d29bcf4f6e2fbcc853ebbbe63cf24bd165db2fd54f4586f0c489f35358d73e2f2fbdaac8e8e7bd4b5aabd2b8cdc74cfa7b5bcaf35101516fc04c378cd6cd70222604f9223cd98e37c73439d0320695517c07467c2124bd3d48ee0d64df366d9e91b7c4c10a", 0xdc}, {&(0x7f0000000400)="c99ac0bbae6a8e7f78cb466b87e7cee981b479ba26aaf4c38b10d4fd352bdcaf82067faa8aa6f990e82143c44e1c7b2fb7f80687ee7981e0363557d29a9062aa291c59ef84f999ec28b3adc52258b26611af3e3310ae0ecc4f890030b1a6e0aaee14708ce3862b46a234bb676cfb2868d6846604f9daab", 0x77}, {&(0x7f0000000480)="22019f8b1ee34f1f33b648480bb8d913a1b118f3af24afccd1d57b9172fa168dfda573b3b6c5f13b1ea839220784a7041dd4cc2b55fe2a6990aa8bbea976be4395e8c0fce67804989082540fdbff01929b3979b55737165b024f2b7f801bcb905bb97ea8a339ed8a52b972bad897b3e74ad9aafd6ba2ef54263ecf12aa8990bb", 0x80}, {&(0x7f0000000500)="9cd4bfaef2f1ce60f68cf5be4755ed4b659884c579a7adafbbeb45c1ce71c64cfa56285d791324d7ca8e4a57c682a9c9da3868a96b9a70d21109149b0642c000772440085d868de77021850ff55c0d60927c3605cc5c61088fc4173bcfbfcb459944a49f31262dc0fa1f6c15890eb95e7d45d7aa95b320f37179", 0x7a}, {&(0x7f0000001240)="4260a3fb0904ec526619fa5519e801dd61419ae8334b451e1eee43ab388b874babb3d7f1772a439f8eaaf163a2f3770cb8c04f16d9389e828b37497aae3e65936cee5235bad971abd4695c988dc3bd8704f3a3b55662a25c03126ac2da84eba846e32a9da5ace8379734117b9b5d267431f370c3d98ad05e37777fa3bfab328337b90866c5be8eaa3a62311be30f64bf916418008d9849a14549a69f26bbb2690f3ed408b0f32f98317475fcb667a08bc2c3c79e6a17749506eaf147ecb44f51e8bf835712009de23ccc776863861ce28363e4bdb46c2e16c265c4550eb23cd4b767725e0945d0c6870bcc960f3de2813b47b21483c65918ec4dd8b4beab7cea8643e53a2dc8de29403dc6ec02621f5230917c1e2ac1fdf3da54937c354f1e59b0fbd2fd935c689f0da3e7dc98613f3410ce0c8a5788d981d29f58002ff17d773c69662fc1c84c0f0e6ebe75c1507320fad9ea7b9d905ed7b0cd4408f1b543df89a37ec199a682d5124c5a757ab3988d5a5ed7dac15579ba0c13c68375b1ea2419a5a62788cac5ef06719a872866b04f5704e45e65ef281e54c620db92a253faa85160fe789231da249959819f274e4da288f32c40c74f31e85cf3f51782f8fc45406c6bd757a2c64f79a5cadea09c9a2a93bceefa0154c3210bde22f2f34130b4fd00b87d635e20e5225c514acdfa92c102cc0be3cfbe777437c7b7dbd00c54478742093ce13f6d3cc31766ff1571ff944f1e1da3d633789a134ed0019e6961133108a05f331e8381c2c4b40145457b66108d4e339929c4001533acf4d331ff005568502ff7baffae9299786d457a8b319ae7ac066b5d002f02e03772d1bdb5819ed4f4808ae3c5f1aa235df1f393a521248cb20ddec4a1c356f8930102fe4441324f4e0404f40765fe766876ecbea2e469bb7f5f274d50264fec49c68df91c3eaa399e38d79bfc88b15fad9e4f2a57ee4b07b7611aee35ed8e5b33068ad09531cd2699d928ffe766f9d78f533df629efb60445f5a7b5d93ece1d64761124d35333fa82ad88ab8f265227c23257b3d295ccfd8d51c704a36a8bc2820dfc360ad0960a7dff1267efece9337e1f7c5ccf180f26ac20b17646582e0b041b4f6759be17a6301e40b97045127bb1561d80ecc5f8efbd0d8e4ae0e84517d3673d19fce2d96f97940460b0d0ccac42e9d6546c46b269eb16880fa64c86475823e92f01ce16d51474e5959d3df5eee29a9224ee46febdffb57d7dbe19842658ad0f4c43a0f4221f0f757dd245aa3390f540360f134dbca7d6dd85c7a7bdfea65af364fb0c4a987d48ac365cbfe4c4ae9939aef4f52826d62f96af4bcaccb95063e22fb3fb6d0ca05ee4f001824804d6e69f182bf308a7e8ee52e30bfa2c7c4d403e6110ce96dd8d10ba97bc4ad95645ca26607bd738916071d5a60056462db96485515b24f5cb761f83a2293dc30d61aa5c4ad993c4c34a444e444f4cdfdf4a001779a110847afd04c278c5c0fdf8eaa5b7e991ed7b06a0317204da7c23346da5984e34e9c5b16d206bae2f03449761a061cfdbfeafe55267537cd4e797848813f62a9cf488bca6cc56f64c6a63ec476d95e9c450ed3478eba85d30b08cc5f08003f4371f4e9e1c33d400fe80de39289df28ab3532e4356b9383a7ee778572764264037657b9dec9e90dd345a40366bebd57f9596f3f79fe9a5ac665ea01c377f56ee2f93ca1da661135ca0f6ed2aaa44f68751d8871f1a7e2385b3587adb05d8e5e3595d4356abece25a48097194f33affe045798a163cb55d0bbd0b36221dd3c4429f2610d6ca370dd22eb1b5f4cb098edd3fa62bad2d910eb88fb898f713ec7af17ca6b95d9c734335aa48246f3387f741685714ca70a5ba9cb794dd616efbc98a3dc5e7fdb428dd022a2ca3e666c4586be301e7520234250f18bac6c7a45ed76ba071092ce465ce4368be1a15a40570c542ac1a35dc57439d4e7a76680796d4efa7dcf61d52b9a419a2422c3e1c0d01efb9300f0bacaa7db4e94497b2a065b7ef6d8cc3c6d75a19e90a4a94bb41feb99286eacf66b474ae3729bba19859551bd64eac6b086c847f43ea5b4d82b6c9a444352d50cad224dfd176241c46d8b9903a2845fba72e8ffcf5ca5e8c0bd0460ff5f6a61aeb2d8972a901060817eee79efaed9012075ee9ecb9cba2d0e4bc5681b838c74ce70660e6589dfb6a0658ae3842d9acb3cb0b1181103ad7bc6edeb305a6e5844ea14bee574f30d6c571b071e9080fff35a2da2a3c76e690eb232b945c45627556476f89cfdd58715a5c4bec16b48fd9cd5d7285d74e4cdcc8277100a8b0ff6434547132aa1e90489e6516bb7e12d5c72718399fcf095d4b72600dbf8066dc23e2974fc4bd7f95c6779ae4b45c35d97ee17c2c1859acb82edbf952023592ed1c71152d2bd7eed1a2cf1ccf372856870ea675330a6afaa18da7e906ef3edf263be0e4f415e2aff377213d03babedc6483cc6dfda625de52555e44e4ca44438d5688516167ca7add43b5b36ff786465a7244078abd66a703423c7303c4663490e087b2f1039652176bbf08641344b14b02e5f34919bc864e8b25144a4f35891b61ccce4a2e963569b5b3c247c3965e0428dbfa8e2e48a059a26bb8abaf522e819a1571573736fa821db308f6f0d6fb6b734c207e7c5cfe8f0d662565dac9565abb86faef813e6606e5d3dc14ecf22557b8c1d1c8b5685467b4b7d1ec0dfce76aea9197bef33b869e3aace05cd64abe2bc42096c02cc6e8ac38acdd5e3c1f3f37c0d1e4b1512771677ef580572a6ed504f748567afc6f3facecb773213ffd6b02a14383cd76a8b87418f5af80dbdee6bb1d59329d982e84f220b63e4a04a9770c738f78187a5b0e23e907ffaa9cb9b1d0501c60ac7a50d4c571fff6b1288a0c3029d9f87b39f49062a5db96c91e9ab4e0fce9f436704780ad64ee76d209587ade9cccb71728ea33ab6bd1fdceda895dcf1609fb5d46236193f5c0840856b88d051e14088401d74aa761ba5a9f4aa93fbf93a2735b44f1019d53026f5e78a90fc3b85a528165d5f9faf913bed49e1ca3030e86910b7192793dc353b18f1992d7a9a55a0dc01f04982b2c256842d5150ce69f8d6cc2fb6a2217895dd875b91cac34820b8f208f0a1e5a0695f7ca75f0af18041e436a889f744e2fa6678100da6d3a384cba89241aff884b51cd2fa051d23329ba7d229d800504e778036f0141bb099eb4a8f75b17c34a6aba9af2a73a82f5eeefbb907127143cffe35a01df2ea7cd4266498c83682276948dce2eda7e111bd69f0c03e633961e0a8fe18607fec0f0c1e0dd0919203bf8cfa1f23090e5bcfdaa09ca5e3c063d880ab0b6c8131e16b457686a6228c000a549a9307b8f9c13004a259fc5eaa8db8ce4d5bd1e067e3a2046469377f196086d5d5b6783a329f511a8aba46c3eec2485200e5e0d09283804cfddd1bfa2a6fb2ef1859b752678960085a0e93b09c05e3b97e4d117940497a7fb10e5a3f8f5ec40cb9254c84bb4872080a38a0b7c8e9a2cc02cfbd194cb4b6a9ffe0dc5a8efa659210bbb5373253126fc0a146ff17982b3401c3edb2b87bbbdc4c078715e241e3fb0c8d5d9b9bf6d7f293474d5be44c4fcf74819d712e67243c6d2a10cb8e38f93327f3b8470b5329f1698e146fbc3150e2e08af0e2b4681b35f596d83ab9fa8ae13ba0fbd65eeb9de49f37e76379d125bae0decf6da07f2308d232145ba4b29278f095b5282c4ee67d0b815e4b3fc8672a4405b59059ccd3dd943a1d8ba7b0b81677a9fdcb8bb5f36093b7d04be72446d5bd32d70db1d0891de60c2cc5671988f561edd399667f74f0dcb3a17e3043af1ef758ef12eb47eb5148d24ea135367c0f5f1841bc1d4c32b496f6c2995fa933f433bf0cd715a78407ad325f0e0768893407e009aee37cf5af1300a7e57212d6aadd39bd4e64acfd78009ca34748aa5aed9a85f14f1386d5b4a308273db813ca79d883d8ef565f3ef8bb85504e0dd9eca92ef128ec7c2ff76610a3c29ac2c31bf3a99003c5edeef6becd0210660fa4c605ffc374f60fe79aa6edc7c0a03b1a39027162911ff20f75893f1ebd98efbe87d15490093315cfde02049b4936cce88280ae90b3b812a9231cd1a44994dd5731aff736e36d817b8a3dce646880b519915114901a7da79ab2116e7449624f96b140f4d04bd56971bb39ba8beffd394f9a2400de6f057ad1b4fb8772e62d8e4a9849a20f11e8e41b4c8dbb3530f93eedf4b96b3108a9afbf40a71dde75dc09e67f09aaabe94f6666c20eb1f3f63dc05fba8a29e8c09c2273b9f37c2f0ad2553501eef4849c14d7c4b54786944d3f5d2c53d93aac0f41888df696b2fd47b69c7c20739f15188437d85749215c4d1937a095ef68dc1a65a132c9f756fd0e419538653cbf5ed74619004eb750140127fe2ae8c7d9ed863d71cbb3e6be64edb2f22f05458fdf0e2d06ca0218c07c7a91d52f7dfc52f20127aa3a0c3b2c1566c76fc61baa8456d7bf0b3caa8c9ae603f5d63e3a223af81997c59cb17fd4a69f228b4ffadcf210666959457f514955d7c3337551921fc44dec548c7a9d6bced784afcbb89ab9b5f69b54614ec08cd5ce15f5e564ec4f679f7ba5b7f8d0b7d8b0e8a9e7047c6358fc946f932fe45eee1a6d0040bc2c4c81b99b2fef84b80aeeb96d5749552c680d82270ba76486a72dad4b15f4540937e397775cb325fe29c5457265c93bb2f17c581c8dcb429d9d8586a75fd0705422abec3e3bbbd0047b805a5481c0e4addf628b0dd296d1ecf80ed280646bd332766cad3bf316884f54036b49d25918735dcb2c99b4577066fed5a295d6bc98ddc958be648c45c2bdae10ca786bc1c8acfd7bee7d47a1a01ceeeeb0299a8bb9c53a981cc59e01fb679ebb4c13aa9c3439e5affe297f60339f47a556da3cb4427c4f83205878ceceae7006eeb771bb46b632290763bc228e8f28b505a47d325c572b7d6e0944777e2074c67a9b7d37955c1322c510e72ff5b735205975f24b48190c7dc6a42f11a49e68a8406a03b191b0fc8857131ceb293f33fadbe2acf17d55fad702fcf8c092ec098d5b3b85be3e060849dc8b929930d1336abe74606a8296e3fa25f7dbde62506c0361908dceda2b000bfb52a50dba91f861be2aa44c5b0e86900ead718c8a5e1c02d127b5664ad7b7027174f0a86e0ee39132b8762622432f5d0ca527aaee3354468c4f11f72037f2e1ece64ce38ef419eb3a021901a1218907d18fb011990709ed304561ffc8791401de35d5dcb95b7b9fe34a4e83640e176bdd6fe53356f204255848f94209c24b4da037227ae79f2aea98c3e6ffb799a83340a19db86daa948f8c657a98dcd0be032c7945ef04190678cc40c9b759d0543cca9abd98afca6dd452d4c5fd183a2962e71ff9ae62fde4306b83df5553a1754a64bb9f9778850e1b7f8bbe559c371bf172576e47811fc1c7a35120eaaa8d6d97b572338b79f8a9f443686b74d6e5ffe08e859afbb2c14e866061d139fb26acc9a72b4229b5c570b1cf1563f968c30c08b71a44d613317bc94de72c196f82cb5e89ce3826a697d42913a881a1d923cf87698a606a388bb8eaeddc1f825b52e3ef1028a22ce7fa74744fcbc2fdaf70940415b42691fe9105ec6d94a145323ed5c14dc15c6e2c1d5ed6e9b5a35706c1d9440591b7559a45c7a6cb3ef5922fc32af9b22c7ce53885bff552f495af9cb51586b098534dc54c8944b916f1245e1778dad8ca7b315692c4529c76ed0df13f7042564a0af137f", 0x1000}, {&(0x7f0000000580)="e9f99186957cd59cb5feeb85cd2f4d2f7dd4f260b85ca7cae20de1e16a14a03cfecbe1aacb7a47a0ab6cedc67f5e63c631088b646bdb032b8aca22942bf19037a45a3a39dd363c684bda", 0x4a}], 0x16}}], 0x1, 0x0) 442.936023ms ago: executing program 0 (id=421): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xfffe, 0x2, 0x2, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) 324.965555ms ago: executing program 0 (id=422): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xfffd, 0xb, @dev={0xfe, 0x80, '\x00', 0x2f}}, 0x1c) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") r2 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000"], 0x38}, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe4ff) openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x104) 88.554058ms ago: executing program 1 (id=423): openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 0s ago: executing program 1 (id=424): r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3200004, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',decompose,nls=iso8859-2,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653d826d74172c666f7263652c005b9158c4343a36c99fe371002de66813760dc43bb73dad01621ef639cd5e10502ba7202ad5be0198499b88e4f544b7f835c690c4b7b6f303122edd186d0b15a0c5aa2c9639eac1e28513f51a1dd5fba99dbf88e9b5e387eb3d575abce1e3ce227b368074d23d3a1f9c268442c1d8e20786a40fde79c15c0691211f3798a73f1cd5320092b82365800651829c7b033807606b060a06c825503971bf3a1c907e5c2522f53b09e1688c2e54"], 0x3, 0x6b9, &(0x7f0000000a00)="$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") r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000a80)='X', 0x1, 0xfffffffffffffffe) clock_adjtime(0x0, &(0x7f0000000b00)={0xfd0, 0x0, 0x4100, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5}) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200800, &(0x7f0000000400)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@umask={'umask', 0x3d, 0x9}}, {@allow_utime={'allow_utime', 0x3d, 0xe8}}, {@discard}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_remount}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x1) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x3b) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)='.', 0x1, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xf1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r3, r2}, &(0x7f00000004c0)=""/230, 0xe6, &(0x7f0000000000)={&(0x7f0000000100)={'crc32c-intel\x00'}}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRES16=r0, @ANYRES64], 0x0, 0x0, 0x1) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x0) keyctl$reject(0x13, r2, 0x7, 0x1ff, r4) kernel console output (not intermixed with test programs): RCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.912932][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.921226][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.929817][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.938268][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.946224][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.962604][ T4171] device veth1_vlan entered promiscuous mode [ 57.980097][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.989367][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.998048][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.006736][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.024265][ T4170] device veth0_vlan entered promiscuous mode [ 58.041877][ T4177] device veth0_macvtap entered promiscuous mode [ 58.050492][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.060583][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.068375][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.076636][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.084801][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.093209][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.104708][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.115587][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.126905][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.147854][ T4177] device veth1_macvtap entered promiscuous mode [ 58.156480][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.166451][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.174331][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.183367][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.191656][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.200630][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.213594][ T4170] device veth1_vlan entered promiscuous mode [ 58.222936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.231131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.239994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.249571][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.260792][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.272440][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.299793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.307815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.316694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.335160][ T4181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.344453][ T4181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.353510][ T4181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.362932][ T4181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.387100][ T4170] device veth0_macvtap entered promiscuous mode [ 58.397233][ T4171] device veth0_macvtap entered promiscuous mode [ 58.406627][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.423723][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.434529][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.445332][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.456740][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.467494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.477262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.486211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.495056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.503620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.515352][ T4170] device veth1_macvtap entered promiscuous mode [ 58.530946][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.543859][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.553874][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.564787][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.576300][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.584424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.593680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.602880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.611490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.622031][ T4171] device veth1_macvtap entered promiscuous mode [ 58.647314][ T3188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.660569][ T4177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.660606][ T3188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.672867][ T4177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.689947][ T4177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.698662][ T4177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.709881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.717815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.737392][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.748080][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.760207][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.770948][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.781026][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.791707][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.802838][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.813543][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.825835][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.836426][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.847803][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.857702][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.868227][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.879739][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.901956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.911593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.921587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.931914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.944050][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.954858][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.965634][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.976666][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.986730][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.998410][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.008456][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.020125][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.031049][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.042870][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.054760][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.064859][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.076531][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.086613][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.097257][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.107277][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.117906][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.130993][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.149304][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.157926][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.171372][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.179985][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.189756][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.198531][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.207250][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.216466][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.230157][ T4170] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.239282][ T4161] Bluetooth: hci4: command 0x040f tx timeout [ 59.240400][ T4170] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.250597][ T4161] Bluetooth: hci1: command 0x040f tx timeout [ 59.255074][ T4170] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.259959][ T4161] Bluetooth: hci3: command 0x040f tx timeout [ 59.260033][ T4161] Bluetooth: hci2: command 0x040f tx timeout [ 59.268981][ T4170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.309339][ T4161] Bluetooth: hci0: command 0x040f tx timeout [ 59.339440][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.347375][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.374159][ T3092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.382955][ T3092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.396307][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.409455][ T3030] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.473733][ T3092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.493066][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.511595][ T3092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.520903][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.534647][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.543526][ T3092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.553061][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.620565][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.631951][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.640647][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.649635][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.658395][ T3188] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.729973][ T3030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.738022][ T3030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.769836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.816695][ T4256] device batadv_slave_0 entered promiscuous mode [ 59.847087][ T4256] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4'. [ 59.860607][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.868552][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.877143][ T4256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.900803][ T4259] loop0: detected capacity change from 0 to 512 [ 59.942358][ T4256] device batadv_slave_0 left promiscuous mode [ 59.951210][ T4256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.964533][ T4254] loop2: detected capacity change from 0 to 2048 [ 59.973473][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.981551][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.993652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.004492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.014363][ T4254] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 60.063364][ T4254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 60.087373][ T4259] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 60.233561][ T4266] loop1: detected capacity change from 0 to 512 [ 60.625110][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.727561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.786094][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 60.829413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.838492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 60.847983][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 60.909129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.918174][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.989390][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 60.998446][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 61.310330][ T4219] Bluetooth: hci2: command 0x0419 tx timeout [ 61.337215][ T4219] Bluetooth: hci3: command 0x0419 tx timeout [ 61.389280][ T4216] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.414506][ T4266] EXT4-fs (loop1): Test dummy encryption mode enabled [ 61.434048][ T4219] Bluetooth: hci1: command 0x0419 tx timeout [ 62.182975][ T4219] Bluetooth: hci4: command 0x0419 tx timeout [ 62.272814][ T4182] Bluetooth: hci0: command 0x0419 tx timeout [ 62.285365][ T4266] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2: inode #1: comm syz.1.2: iget: illegal inode # [ 62.309450][ T4216] usb 1-1: Using ep0 maxpacket: 8 [ 62.337826][ T4266] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2: error while reading EA inode 1 err=-117 [ 62.411351][ T4266] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.489163][ T4266] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.2: inode #1: comm syz.1.2: iget: illegal inode # [ 62.584783][ T4266] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.2: error while reading EA inode 1 err=-117 [ 62.599076][ T4216] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 62.608478][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.630562][ T4297] loop3: detected capacity change from 0 to 2048 [ 62.688809][ T4269] Alternate GPT is invalid, using primary GPT. [ 62.725007][ T4266] EXT4-fs (loop1): 1 orphan inode deleted [ 62.738719][ T4269] loop3: p1 p2 p3 [ 62.789821][ T4266] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,test_dummy_encryption,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,noblock_validity,nouid32,,errors=continue. Quota mode: none. [ 62.977490][ T4297] Alternate GPT is invalid, using primary GPT. [ 62.986148][ T4297] loop3: p1 p2 p3 [ 63.035783][ T4264] xt_time: unknown flags 0xc [ 63.369356][ T4216] usb 1-1: Product: syz [ 63.373560][ T4216] usb 1-1: Manufacturer: syz [ 63.378150][ T4216] usb 1-1: SerialNumber: syz [ 63.399005][ T4216] usb 1-1: config 0 descriptor?? [ 63.405783][ T4264] loop4: detected capacity change from 0 to 2048 [ 63.419150][ T4216] usb 1-1: can't set config #0, error -71 [ 63.428659][ T4216] usb 1-1: USB disconnect, device number 2 [ 63.502004][ T4300] syz.0.12 (4300): attempted to duplicate a private mapping with mremap. This is not supported. [ 63.525766][ T4164] GPT:first_usable_lbas don't match. [ 63.537145][ T4164] GPT:34 != 290 [ 63.545041][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.549248][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.583929][ T4164] GPT: Use GNU Parted to correct GPT errors. [ 63.602802][ T4302] udevd[4302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.614775][ T4164] loop4: p1 p2 p3 [ 63.840288][ T4162] udevd[4162]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.843377][ T4302] udevd[4302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.855603][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 64.227683][ T4308] loop1: detected capacity change from 0 to 2048 [ 64.235374][ T4308] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 64.272441][ T4264] GPT:first_usable_lbas don't match. [ 64.272460][ T4309] loop3: detected capacity change from 0 to 2048 [ 64.285369][ T4309] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 64.294816][ T4264] GPT:34 != 290 [ 64.308297][ T4309] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.308735][ T4308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.337659][ T4264] GPT: Use GNU Parted to correct GPT errors. [ 64.362612][ T4300] loop0: detected capacity change from 0 to 2048 [ 64.371273][ T4264] loop4: p1 p2 p3 [ 64.561922][ T4300] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 64.580178][ T3548] GPT:first_usable_lbas don't match. [ 64.598896][ T3548] GPT:34 != 290 [ 64.606201][ T3548] GPT: Use GNU Parted to correct GPT errors. [ 64.619912][ T3548] loop4: p1 p2 p3 [ 64.624657][ T4300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 64.656158][ T4296] loop2: detected capacity change from 0 to 32768 [ 64.849309][ T4296] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.11 (4296) [ 64.854643][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 66.088549][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 66.167299][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 66.244086][ T4296] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 66.268182][ T4326] capability: warning: `syz.4.17' uses deprecated v2 capabilities in a way that may be insecure [ 66.294379][ T4296] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 66.327289][ T4296] BTRFS info (device loop2): use zstd compression, level 3 [ 66.347268][ T4296] BTRFS info (device loop2): using free space tree [ 66.378957][ T4219] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 66.393600][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 66.409977][ T4326] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 66.418003][ T4296] BTRFS info (device loop2): has skinny extents [ 67.333996][ T4296] BTRFS error (device loop2): open_ctree failed: -12 [ 67.418250][ T4361] loop1: detected capacity change from 0 to 512 [ 67.437384][ T4363] loop4: detected capacity change from 0 to 512 [ 67.522963][ T4361] ======================================================= [ 67.522963][ T4361] WARNING: The mand mount option has been deprecated and [ 67.522963][ T4361] and is ignored by this kernel. Remove the mand [ 67.522963][ T4361] option from the mount to silence this warning. [ 67.522963][ T4361] ======================================================= [ 67.580332][ T4363] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.616416][ T4302] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by udevd (4302) [ 67.635354][ T4361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.658394][ T4361] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.696973][ T4371] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.901500][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.562250][ T4327] loop3: detected capacity change from 0 to 40427 [ 69.624104][ T4379] loop0: detected capacity change from 0 to 512 [ 69.747518][ T4379] EXT4-fs (loop0): Ignoring removed nobh option [ 69.760105][ T4383] loop1: detected capacity change from 0 to 512 [ 69.784333][ T4379] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 69.802618][ T4379] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.836665][ T4386] netlink: 148 bytes leftover after parsing attributes in process `syz.3.27'. [ 69.941708][ T4386] loop3: detected capacity change from 0 to 64 [ 69.958874][ T13] usb 5-1: Using ep0 maxpacket: 8 [ 69.986961][ T4383] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.999208][ T4379] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.25: invalid indirect mapped block 256 (level 2) [ 70.069865][ T4379] EXT4-fs (loop0): 2 truncates cleaned up [ 70.075611][ T4379] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nobarrier,dioread_nolock,jqfmt=vfsv0,nogrpid,,errors=continue. Quota mode: writeback. [ 70.266232][ T4392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.25: bg 0: block 5: invalid block bitmap [ 70.289055][ T13] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 70.304437][ T4392] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 636 with error 28 [ 70.311695][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.326238][ T4392] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.326238][ T4392] [ 70.348894][ T13] usb 5-1: Product: syz [ 70.358500][ T13] usb 5-1: Manufacturer: syz [ 70.362442][ T4392] EXT4-fs (loop0): Total free blocks count 0 [ 70.376724][ T13] usb 5-1: SerialNumber: syz [ 70.403472][ T4392] EXT4-fs (loop0): Free/Dirty block details [ 70.405966][ T13] usb 5-1: config 0 descriptor?? [ 70.431004][ T4219] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.440349][ T13] usb 5-1: can't set config #0, error -71 [ 70.462812][ T13] usb 5-1: USB disconnect, device number 2 [ 70.465967][ T4392] EXT4-fs (loop0): free_blocks=0 [ 70.494565][ T4392] EXT4-fs (loop0): dirty_blocks=648 [ 70.500658][ T4392] EXT4-fs (loop0): Block reservation details [ 70.506753][ T4392] EXT4-fs (loop0): i_reserved_data_blocks=648 [ 70.576511][ T4275] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 636 with max blocks 12 with error 28 [ 70.601376][ T4275] EXT4-fs (loop0): This should not happen!! Data will be lost [ 70.601376][ T4275] [ 70.700664][ T4219] usb 2-1: Using ep0 maxpacket: 8 [ 70.837045][ T4397] loop2: detected capacity change from 0 to 2048 [ 70.886529][ T4303] Alternate GPT is invalid, using primary GPT. [ 70.935244][ T4303] loop2: p1 p2 p3 [ 70.979252][ T4219] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 71.645443][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.651804][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.702590][ T4399] loop0: detected capacity change from 0 to 2048 [ 71.720323][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.740308][ T4399] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 71.763949][ T4399] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.841364][ T4219] usb 2-1: Product: syz [ 71.845563][ T4219] usb 2-1: Manufacturer: syz [ 71.850874][ T4219] usb 2-1: SerialNumber: syz [ 71.857461][ T4219] usb 2-1: config 0 descriptor?? [ 71.895550][ T4397] Alternate GPT is invalid, using primary GPT. [ 71.901292][ T4219] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 71.908856][ T4397] loop2: p1 p2 p3 [ 71.984706][ T3548] Alternate GPT is invalid, using primary GPT. [ 71.998868][ T3548] loop2: p1 p2 p3 [ 72.036457][ T4403] loop0: detected capacity change from 0 to 2048 [ 72.111083][ T4403] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 72.161284][ T4403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.231287][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.243671][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.256179][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.312578][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.333500][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.361412][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.426680][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 72.441800][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 72.479731][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.483728][ T4405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.628011][ T4394] loop4: detected capacity change from 0 to 32768 [ 72.674801][ T4394] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.29 (4394) [ 72.763268][ T4394] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 72.797304][ T4394] BTRFS info (device loop4): force clearing of disk cache [ 72.811607][ T4394] BTRFS error (device loop4): unrecognized thread_pool value 0x8000000000000000 [ 72.829193][ T4394] BTRFS error (device loop4): open_ctree failed: -34 [ 72.924113][ T4413] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 72.999955][ T4220] usb 2-1: USB disconnect, device number 2 [ 73.014172][ T4381] dccp_close: ABORT with 6275 bytes unread [ 73.021283][ T4394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 73.845337][ T4408] syz.0.34 (4408) used greatest stack depth: 21096 bytes left [ 73.897049][ T4418] loop4: detected capacity change from 0 to 512 [ 74.082474][ T4418] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.131608][ T4429] loop0: detected capacity change from 0 to 2048 [ 75.581290][ T4429] Alternate GPT is invalid, using primary GPT. [ 75.597829][ T4429] loop0: p1 p2 p3 [ 76.037567][ T4353] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.504485][ T4448] loop1: detected capacity change from 0 to 512 [ 76.506074][ T1324] cfg80211: failed to load regulatory.db [ 76.579710][ T4353] usb 5-1: Using ep0 maxpacket: 8 [ 76.628110][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 76.640020][ T4448] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.675723][ T4455] loop3: detected capacity change from 0 to 512 [ 76.757381][ T4427] loop2: detected capacity change from 0 to 32768 [ 76.775085][ T4427] gfs2: Unknown parameter '00000000000000000000005' [ 76.832431][ T4455] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.930434][ T4458] loop0: detected capacity change from 0 to 8192 [ 76.937462][ T4353] usb 5-1: string descriptor 0 read error: -71 [ 76.944100][ T4353] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 76.953868][ T4353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.965847][ T4353] usb 5-1: config 0 descriptor?? [ 76.989129][ T4353] usb 5-1: can't set config #0, error -71 [ 76.996031][ T4353] usb 5-1: USB disconnect, device number 3 [ 77.018851][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 77.082067][ T4458] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 77.090868][ T4458] FAT-fs (loop0): Filesystem has been set read-only [ 77.229742][ T4458] autofs4:pid:4458:autofs_fill_super: called with bogus options [ 77.260282][ T4161] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.303989][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 77.518997][ T4161] usb 4-1: Using ep0 maxpacket: 8 [ 77.535442][ T4464] loop4: detected capacity change from 0 to 2048 [ 77.570784][ T4464] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 77.615157][ T4464] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.684908][ T26] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 77.714477][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.744189][ T26] usb 2-1: Product: syz [ 77.755386][ T26] usb 2-1: Manufacturer: syz [ 77.771048][ T26] usb 2-1: SerialNumber: syz [ 77.799148][ T4161] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 77.804207][ T26] usb 2-1: config 0 descriptor?? [ 77.815283][ T4161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.834040][ T4161] usb 4-1: Product: syz [ 77.844805][ T4161] usb 4-1: Manufacturer: syz [ 77.861302][ T4161] usb 4-1: SerialNumber: syz [ 77.871533][ T4161] usb 4-1: config 0 descriptor?? [ 77.892586][ T4474] loop4: detected capacity change from 0 to 512 [ 77.895654][ T26] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 77.931173][ T4161] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 78.011262][ T4474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.195002][ T4476] loop0: detected capacity change from 0 to 32768 [ 78.216055][ T4476] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.48 (4476) [ 78.250838][ T4476] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 78.266122][ T4476] BTRFS info (device loop0): force clearing of disk cache [ 78.283835][ T4476] BTRFS error (device loop0): unrecognized thread_pool value 0x8000000000000000 [ 78.298882][ T1324] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 78.309918][ T4476] BTRFS error (device loop0): open_ctree failed: -34 [ 78.660124][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 78.940496][ T1324] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 78.958614][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.967071][ T1324] usb 5-1: Product: syz [ 78.971498][ T1324] usb 5-1: Manufacturer: syz [ 78.981586][ T1324] usb 5-1: SerialNumber: syz [ 78.999679][ T26] usb 2-1: USB disconnect, device number 3 [ 79.001486][ T1324] usb 5-1: config 0 descriptor?? [ 79.064810][ T1324] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 79.081103][ T1107] usb 4-1: USB disconnect, device number 2 [ 79.095855][ T4454] dccp_close: ABORT with 6275 bytes unread [ 79.693492][ T4489] FAULT_INJECTION: forcing a failure. [ 79.693492][ T4489] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 79.727813][ T4489] CPU: 0 PID: 4489 Comm: syz.1.51 Not tainted 5.15.185-syzkaller #0 [ 79.735833][ T4489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.745905][ T4489] Call Trace: [ 79.749181][ T4489] [ 79.752121][ T4489] dump_stack_lvl+0x168/0x230 [ 79.756813][ T4489] ? show_regs_print_info+0x20/0x20 [ 79.762009][ T4489] ? load_image+0x3b0/0x3b0 [ 79.766514][ T4489] ? __lock_acquire+0x7c60/0x7c60 [ 79.771536][ T4489] ? lockdep_hardirqs_on+0x94/0x140 [ 79.776744][ T4489] should_fail+0x38c/0x4c0 [ 79.781163][ T4489] prepare_alloc_pages+0x1e4/0x5f0 [ 79.786289][ T4489] __alloc_pages+0x10e/0x470 [ 79.790878][ T4489] ? zone_statistics+0x170/0x170 [ 79.795810][ T4489] ? do_raw_spin_lock+0x11d/0x280 [ 79.800828][ T4489] ? __rwlock_init+0x140/0x140 [ 79.805594][ T4489] __get_free_pages+0x8/0x30 [ 79.810185][ T4489] kasan_populate_vmalloc_pte+0x21/0xc0 [ 79.815734][ T4489] __apply_to_page_range+0x95c/0xc80 [ 79.821030][ T4489] ? kasan_populate_vmalloc+0x70/0x70 [ 79.826408][ T4489] alloc_vmap_area+0x19f7/0x1b20 [ 79.827848][ T4493] loop0: detected capacity change from 0 to 16 [ 79.831367][ T4489] ? vm_map_ram+0xb70/0xb70 [ 79.831397][ T4489] __get_vm_area_node+0x14f/0x2d0 [ 79.831425][ T4489] __vmalloc_node_range+0xef/0x8b0 [ 79.831441][ T4489] ? prealloc_elems_and_freelist+0x86/0x1c0 [ 79.831458][ T4489] ? mutex_unlock+0x10/0x10 [ 79.831484][ T4489] bpf_map_area_alloc+0xd4/0xe0 [ 79.831501][ T4489] ? prealloc_elems_and_freelist+0x86/0x1c0 [ 79.831519][ T4489] prealloc_elems_and_freelist+0x86/0x1c0 [ 79.831541][ T4489] stack_map_alloc+0x3c9/0x570 [ 79.831563][ T4489] map_create+0x46e/0x2140 [ 79.831584][ T4489] __sys_bpf+0x2a4/0x670 [ 79.831602][ T4489] ? bpf_link_show_fdinfo+0x310/0x310 [ 79.831627][ T4489] ? vtime_user_exit+0x2dc/0x400 [ 79.831649][ T4489] __x64_sys_bpf+0x78/0x90 [ 79.831666][ T4489] do_syscall_64+0x4c/0xa0 [ 79.831682][ T4489] ? clear_bhb_loop+0x30/0x80 [ 79.831696][ T4489] ? clear_bhb_loop+0x30/0x80 [ 79.831710][ T4489] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 79.926556][ T4489] RIP: 0033:0x7ff37cdb5929 [ 79.930950][ T4489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.950531][ T4489] RSP: 002b:00007ff37ac1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.958924][ T4489] RAX: ffffffffffffffda RBX: 00007ff37cfdcfa0 RCX: 00007ff37cdb5929 [ 79.966874][ T4489] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 0000000000000000 [ 79.974822][ T4489] RBP: 00007ff37ac1d090 R08: 0000000000000000 R09: 0000000000000000 [ 79.982778][ T4489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.990729][ T4489] R13: 0000000000000001 R14: 00007ff37cfdcfa0 R15: 00007fff9a83c9f8 [ 79.998685][ T4489] [ 80.201721][ T4493] erofs: Unexpected value for 'acl' [ 81.178907][ T4216] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.197056][ T1324] usb 5-1: USB disconnect, device number 4 [ 81.255166][ T4473] dccp_close: ABORT with 6275 bytes unread [ 81.429213][ T4216] usb 2-1: Using ep0 maxpacket: 32 [ 81.519031][ T4219] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.550181][ T4216] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 81.575394][ T4216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.680286][ T4216] usb 2-1: config 0 descriptor?? [ 81.718992][ T4219] usb 4-1: device descriptor read/64, error -71 [ 81.801321][ T4216] gspca_main: sq930x-2.14.0 probing 041e:403c [ 81.999368][ T4219] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 82.141630][ T4517] loop4: detected capacity change from 0 to 512 [ 82.351167][ T4517] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.374388][ T4519] loop2: detected capacity change from 0 to 32768 [ 82.383615][ T4219] usb 4-1: device descriptor read/64, error -71 [ 82.427112][ T4519] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.62 (4519) [ 82.519740][ T4219] usb usb4-port1: attempt power cycle [ 82.550462][ T4523] loop0: detected capacity change from 0 to 32768 [ 82.570154][ T4519] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.571587][ T4523] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.63 (4523) [ 82.579015][ T4519] BTRFS info (device loop2): setting nodatacow, compression disabled [ 82.597364][ T4519] BTRFS info (device loop2): max_inline at 0 [ 82.603440][ T4519] BTRFS info (device loop2): enabling disk space caching [ 82.610529][ T4519] BTRFS info (device loop2): setting datasum, datacow enabled [ 82.617986][ T4519] BTRFS info (device loop2): turning off barriers [ 82.624424][ T4519] BTRFS info (device loop2): turning on flush-on-commit [ 82.631391][ T4519] BTRFS info (device loop2): doing ref verification [ 82.637981][ T4519] BTRFS info (device loop2): force clearing of disk cache [ 82.645629][ T4519] BTRFS info (device loop2): enabling ssd optimizations [ 82.652641][ T4519] BTRFS info (device loop2): max_inline at 4096 [ 82.658921][ T4519] BTRFS info (device loop2): disk space caching is enabled [ 82.666120][ T4519] BTRFS info (device loop2): has skinny extents [ 82.719042][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.719100][ T4519] BTRFS info (device loop2): clearing free space tree [ 82.733784][ T4519] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.744141][ T4519] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.810415][ T4495] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 82.821449][ T4495] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 82.840178][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 82.847353][ T4523] loop0: detected capacity change from 0 to 2048 [ 82.923774][ T4543] udc-core: couldn't find an available UDC or it's busy [ 82.933383][ T4523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.938173][ T4543] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.950447][ T25] audit: type=1800 audit(1750566637.648:2): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="bus" dev="loop0" ino=1368 res=0 errno=0 [ 82.952634][ T4523] FAULT_INJECTION: forcing a failure. [ 82.952634][ T4523] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 82.978844][ T4219] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.983860][ T4523] CPU: 1 PID: 4523 Comm: syz.0.63 Not tainted 5.15.185-syzkaller #0 [ 82.999259][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.009314][ T4523] Call Trace: [ 83.012596][ T4523] [ 83.015527][ T4523] dump_stack_lvl+0x168/0x230 [ 83.020212][ T4523] ? show_regs_print_info+0x20/0x20 [ 83.025417][ T4523] ? load_image+0x3b0/0x3b0 [ 83.029930][ T4523] ? __lock_acquire+0x7c60/0x7c60 [ 83.034961][ T4523] ? __context_tracking_exit+0x4c/0x80 [ 83.040430][ T4523] should_fail+0x38c/0x4c0 [ 83.044863][ T4523] _copy_from_user+0x2e/0x170 [ 83.049546][ T4523] __se_sys_sendfile64+0xa3/0x190 [ 83.054574][ T4523] ? lock_chain_count+0x20/0x20 [ 83.058873][ T4216] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 83.059425][ T4523] ? __x64_sys_sendfile64+0xa0/0xa0 [ 83.070394][ T4523] ? lockdep_hardirqs_on+0x94/0x140 [ 83.075597][ T4523] do_syscall_64+0x4c/0xa0 [ 83.080017][ T4523] ? clear_bhb_loop+0x30/0x80 [ 83.084693][ T4523] ? clear_bhb_loop+0x30/0x80 [ 83.089377][ T4523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.095274][ T4523] RIP: 0033:0x7f61e50e3929 [ 83.099688][ T4523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.119289][ T4523] RSP: 002b:00007f61e2f4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 83.127703][ T4523] RAX: ffffffffffffffda RBX: 00007f61e530afa0 RCX: 00007f61e50e3929 [ 83.135670][ T4523] RDX: 0000200000000080 RSI: 0000000000000004 RDI: 0000000000000004 [ 83.143623][ T4523] RBP: 00007f61e2f4b090 R08: 0000000000000000 R09: 0000000000000000 [ 83.151587][ T4523] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001 [ 83.159540][ T4523] R13: 0000000000000000 R14: 00007f61e530afa0 R15: 00007ffcc85332e8 [ 83.167504][ T4523] [ 83.170565][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.170698][ T4219] usb 4-1: device descriptor read/8, error -71 [ 83.185079][ T4216] sq930x: probe of 2-1:0.0 failed with error -71 [ 83.198173][ T25] audit: type=1800 audit(1750566637.908:3): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.62" name="bus" dev="loop2" ino=264 res=0 errno=0 [ 83.292189][ T4216] usb 2-1: USB disconnect, device number 4 [ 83.318533][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 83.568827][ T4219] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 83.662813][ T4219] usb 4-1: device descriptor read/8, error -71 [ 83.670279][ T26] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 83.684010][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.714564][ T26] usb 5-1: Product: syz [ 83.719165][ T26] usb 5-1: Manufacturer: syz [ 83.723895][ T26] usb 5-1: SerialNumber: syz [ 83.773692][ T26] usb 5-1: config 0 descriptor?? [ 83.789663][ T4219] usb usb4-port1: unable to enumerate USB device [ 83.849115][ T4558] loop1: detected capacity change from 0 to 128 [ 83.866569][ T26] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 83.963755][ T4558] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 84.011217][ T4558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.081251][ T4562] loop2: detected capacity change from 0 to 512 [ 84.191250][ T4562] EXT4-fs (loop2): Ignoring removed bh option [ 84.197340][ T4562] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 84.700093][ T4562] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,bh,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 84.719169][ T4562] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.774608][ T4575] process 'syz.3.70' launched '/dev/fd/4' with NULL argv: empty string added [ 84.830468][ T4560] xt_time: unknown flags 0xc [ 84.836726][ T4562] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 84.884978][ T4562] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 84.932157][ T4562] EXT4-fs error (device loop2): ext4_acquire_dquot:6204: comm syz.2.65: Failed to acquire dquot type 0 [ 84.969241][ T4582] device bond1 entered promiscuous mode [ 84.975276][ T4582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.994690][ T4582] syz.1.72[4582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.994775][ T4582] syz.1.72[4582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.032298][ T4560] loop0: detected capacity change from 0 to 2048 [ 85.120630][ T4360] usb 5-1: USB disconnect, device number 5 [ 85.266603][ T4593] loop1: detected capacity change from 0 to 512 [ 85.435230][ T4355] GPT:first_usable_lbas don't match. [ 85.691562][ T4593] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.725415][ T4355] GPT:34 != 290 [ 85.914405][ T4355] GPT: Use GNU Parted to correct GPT errors. [ 85.969695][ T4355] loop0: p1 p2 p3 [ 86.039424][ T4560] loop_reread_partitions: partition scan of loop0 () failed (rc=-16) [ 86.847040][ T4611] loop4: detected capacity change from 0 to 1024 [ 86.864061][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 86.953409][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 86.978301][ T4615] device macvlan2 entered promiscuous mode [ 87.041465][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 87.105265][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 88.269443][ T4629] loop1: detected capacity change from 0 to 512 [ 88.352328][ T4629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.573309][ T4612] loop3: detected capacity change from 0 to 32768 [ 88.648931][ T4612] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.78 (4612) [ 88.700629][ T4612] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 88.730822][ T4612] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 88.761141][ T4612] BTRFS info (device loop3): use zstd compression, level 3 [ 88.768359][ T4612] BTRFS info (device loop3): using free space tree [ 88.770779][ T4219] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 88.806610][ T4612] BTRFS info (device loop3): has skinny extents [ 89.017311][ T4612] BTRFS info (device loop3): enabling ssd optimizations [ 89.038898][ T4219] usb 2-1: Using ep0 maxpacket: 8 [ 90.069071][ T4219] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 90.078181][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.105383][ T4671] loop2: detected capacity change from 0 to 128 [ 90.118110][ T4219] usb 2-1: Product: syz [ 90.129418][ T4219] usb 2-1: Manufacturer: syz [ 90.134025][ T4219] usb 2-1: SerialNumber: syz [ 90.163831][ T4219] usb 2-1: config 0 descriptor?? [ 90.212549][ T4219] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 90.339299][ T4671] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 90.364552][ T4671] sysv_free_block: trying to free block not in datazone [ 90.380126][ T4671] sysv_free_block: trying to free block not in datazone [ 90.388498][ T4671] sysv_free_block: getblk() failed [ 90.399599][ T4671] sysv_free_block: getblk() failed [ 90.404930][ T4671] sysv_free_block: getblk() failed [ 90.457853][ T4671] sysv_free_block: getblk() failed [ 90.513253][ T4671] sysv_free_block: getblk() failed [ 90.549057][ T4671] sysv_free_block: getblk() failed [ 90.699305][ T4671] sysv_free_block: getblk() failed [ 90.708868][ T4671] sysv_free_block: getblk() failed [ 90.739189][ T4671] sysv_free_block: getblk() failed [ 90.775094][ T4671] sysv_free_block: getblk() failed [ 90.820368][ T4671] sysv_free_block: getblk() failed [ 90.856189][ T4671] sysv_free_block: getblk() failed [ 90.886516][ T4671] sysv_free_block: getblk() failed [ 90.925754][ T4671] sysv_free_block: getblk() failed [ 90.962931][ T4671] sysv_free_block: getblk() failed [ 90.986309][ T4669] loop0: detected capacity change from 0 to 32768 [ 91.021276][ T4671] sysv_free_block: getblk() failed [ 91.057042][ T4671] sysv_free_block: getblk() failed [ 91.068184][ T4678] loop4: detected capacity change from 0 to 512 [ 91.097946][ T4671] sysv_free_block: getblk() failed [ 91.105953][ T4669] jfs_mount: Mount Failure: File System Dirty. [ 91.123109][ T4671] sysv_free_block: getblk() failed [ 91.128431][ T4671] sysv_free_block: getblk() failed [ 91.139398][ T4669] Mount JFS Failure: -22 [ 91.174014][ T4669] jfs_mount failed w/return code = -22 [ 91.184152][ T4671] sysv_free_block: getblk() failed [ 91.235100][ T4671] sysv_free_block: getblk() failed [ 91.246768][ T4671] sysv_free_block: getblk() failed [ 91.261110][ T4671] sysv_free_block: getblk() failed [ 91.266290][ T4671] sysv_free_block: getblk() failed [ 91.271935][ T4671] sysv_free_block: getblk() failed [ 91.277252][ T4671] sysv_free_block: getblk() failed [ 91.282587][ T4671] sysv_free_block: getblk() failed [ 91.287914][ T4671] sysv_free_block: getblk() failed [ 91.293597][ T4671] sysv_free_block: getblk() failed [ 91.299178][ T4671] sysv_free_block: getblk() failed [ 91.304340][ T4671] sysv_free_block: getblk() failed [ 91.309840][ T4671] sysv_free_block: getblk() failed [ 91.315021][ T4671] sysv_free_block: getblk() failed [ 91.320476][ T4671] sysv_free_block: getblk() failed [ 91.321133][ T4678] EXT4-fs (loop4): 1 orphan inode deleted [ 91.325645][ T4671] sysv_free_block: getblk() failed [ 91.336736][ T4671] sysv_free_block: getblk() failed [ 91.342860][ T4671] sysv_free_block: getblk() failed [ 91.348829][ T4671] sysv_free_block: trying to free block not in datazone [ 91.355810][ T4671] sysv_free_block: trying to free block not in datazone [ 91.367304][ T4678] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 91.379540][ T4671] sysv_free_block: trying to free block not in datazone [ 91.386654][ T4678] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.397170][ T4671] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 91.422888][ T4678] xt_policy: neither incoming nor outgoing policy selected [ 91.485100][ T25] audit: type=1800 audit(1750566646.198:4): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.91" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 91.769019][ T4678] syz.4.91 (4678) used greatest stack depth: 20864 bytes left [ 92.016664][ T4696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.94'. [ 92.082155][ T4699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 92.282570][ T4704] device gretap0 entered promiscuous mode [ 92.302297][ T4704] batman_adv: batadv0: Adding interface: macvlan2 [ 92.322991][ T4704] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.400408][ T4704] batman_adv: batadv0: Interface activated: macvlan2 [ 93.248376][ T4360] usb 2-1: USB disconnect, device number 5 [ 93.325515][ T4699] syz.0.96 (4699): drop_caches: 2 [ 93.387737][ T4713] input: syz0 as /devices/virtual/input/input5 [ 94.611099][ T4721] loop3: detected capacity change from 0 to 256 [ 94.689060][ T4719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.774130][ T4726] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 94.820611][ T4727] loop2: detected capacity change from 0 to 2048 [ 94.941616][ T4727] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 94.958000][ T4727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.977258][ T4721] FAT-fs (loop3): Directory bread(block 64) failed [ 94.984105][ T4721] FAT-fs (loop3): Directory bread(block 65) failed [ 94.990747][ T4721] FAT-fs (loop3): Directory bread(block 66) failed [ 94.997313][ T4721] FAT-fs (loop3): Directory bread(block 67) failed [ 95.003962][ T4721] FAT-fs (loop3): Directory bread(block 68) failed [ 95.004692][ T4719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.010527][ T4721] FAT-fs (loop3): Directory bread(block 69) failed [ 95.010624][ T4721] FAT-fs (loop3): Directory bread(block 70) failed [ 95.010650][ T4721] FAT-fs (loop3): Directory bread(block 71) failed [ 95.010707][ T4721] FAT-fs (loop3): Directory bread(block 72) failed [ 95.047527][ T4721] FAT-fs (loop3): Directory bread(block 73) failed [ 95.266850][ T4719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.417553][ T4719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.505889][ T4739] loop3: detected capacity change from 0 to 1024 [ 95.520369][ T4353] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.546486][ T4719] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.560223][ T4739] EXT4-fs (loop3): Invalid log block size: 1280 [ 95.593209][ T4719] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.662747][ T4719] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.683173][ T4719] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.840984][ T4744] loop3: detected capacity change from 0 to 512 [ 95.918887][ T4353] usb 2-1: Using ep0 maxpacket: 8 [ 95.980060][ T4744] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 96.089079][ T4353] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.111088][ T4737] loop2: detected capacity change from 0 to 40427 [ 96.490971][ T4737] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.635613][ T4737] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.806290][ T4737] F2FS-fs (loop2): Unrecognized mount option "0xffffffffffffffff" or missing value [ 96.888978][ T4353] usb 2-1: config 6 has an invalid interface number: 172 but max is 0 [ 96.899533][ T4353] usb 2-1: config 6 has no interface number 0 [ 96.905644][ T4353] usb 2-1: config 6 interface 172 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 97.005671][ T4756] netlink: 144 bytes leftover after parsing attributes in process `syz.4.116'. [ 97.019018][ T4360] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.102210][ T4759] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 97.110343][ T4353] usb 2-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=b1.16 [ 97.124551][ T4353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.132817][ T4759] netlink: 156 bytes leftover after parsing attributes in process `syz.2.117'. [ 97.141825][ T4353] usb 2-1: Product: syz [ 97.146091][ T4353] usb 2-1: Manufacturer: syz [ 97.153729][ T4753] loop0: detected capacity change from 0 to 256 [ 97.168272][ T4353] usb 2-1: SerialNumber: syz [ 97.240008][ T4753] FAT-fs (loop0): Directory bread(block 64) failed [ 97.246629][ T4753] FAT-fs (loop0): Directory bread(block 65) failed [ 97.253895][ T4753] FAT-fs (loop0): Directory bread(block 66) failed [ 97.260490][ T4753] FAT-fs (loop0): Directory bread(block 67) failed [ 97.267118][ T4753] FAT-fs (loop0): Directory bread(block 68) failed [ 97.273686][ T4753] FAT-fs (loop0): Directory bread(block 69) failed [ 97.280418][ T4753] FAT-fs (loop0): Directory bread(block 70) failed [ 97.287243][ T4753] FAT-fs (loop0): Directory bread(block 71) failed [ 97.288833][ T4360] usb 4-1: Using ep0 maxpacket: 8 [ 97.294020][ T4753] FAT-fs (loop0): Directory bread(block 72) failed [ 97.305330][ T4753] FAT-fs (loop0): Directory bread(block 73) failed [ 97.318865][ T4685] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 97.586766][ T4763] loop2: detected capacity change from 0 to 32768 [ 97.641101][ T4763] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.118 (4763) [ 97.646632][ T4360] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 97.690549][ T4360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.708993][ T4685] usb 5-1: Using ep0 maxpacket: 16 [ 97.748614][ T4774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 97.750153][ T4360] usb 4-1: Product: syz [ 97.763623][ T4353] appletouch 2-1:6.172: Could not find int-in endpoint [ 97.773379][ T4353] appletouch: probe of 2-1:6.172 failed with error -5 [ 97.781436][ T4353] usbhid 2-1:6.172: couldn't find an input interrupt endpoint [ 97.789890][ T4360] usb 4-1: Manufacturer: syz [ 97.794484][ T4360] usb 4-1: SerialNumber: syz [ 97.821565][ T4353] usb 2-1: USB disconnect, device number 6 [ 97.843881][ T4685] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 97.845103][ T4360] usb 4-1: config 0 descriptor?? [ 97.863747][ T4685] usb 5-1: config 0 has no interface number 0 [ 97.878265][ T4763] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 97.887115][ T4763] BTRFS info (device loop2): max_inline at 0 [ 97.893172][ T4763] BTRFS info (device loop2): using free space tree [ 97.900553][ T4763] BTRFS info (device loop2): has skinny extents [ 97.910798][ T4360] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 97.915234][ T4685] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=90.06 [ 97.942444][ T4774] xt_limit: Overflow, try lower: 0/0 [ 97.954009][ T4685] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.968150][ T4774] loop1: detected capacity change from 0 to 64 [ 97.990528][ T4774] hfs: unable to parse mount options [ 98.002036][ T4685] usb 5-1: config 0 descriptor?? [ 98.195213][ T4685] asix: probe of 5-1:0.52 failed with error -22 [ 98.241116][ T4786] loop0: detected capacity change from 0 to 2048 [ 98.280489][ T4786] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 98.333703][ T4786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.446867][ T4763] BTRFS info (device loop2): enabling ssd optimizations [ 98.465624][ T4756] loop4: detected capacity change from 0 to 4096 [ 98.491833][ T4353] usb 5-1: USB disconnect, device number 6 [ 99.173473][ T4808] loop4: detected capacity change from 0 to 512 [ 99.214208][ T4808] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.331443][ T4811] loop1: detected capacity change from 0 to 512 [ 99.392473][ T4360] usb 4-1: USB disconnect, device number 7 [ 99.425430][ T4811] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 99.432199][ T4811] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.454186][ T4811] vhci_hcd vhci_hcd.0: Device attached [ 99.610451][ T4812] vhci_hcd: connection closed [ 99.620234][ T4276] vhci_hcd: stop threads [ 99.637524][ T4276] vhci_hcd: release socket [ 99.646863][ T4276] vhci_hcd: disconnect device [ 100.451848][ T4220] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.460036][ T1107] vhci_hcd: vhci_device speed not set [ 101.299906][ T4832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.309273][ T4831] fuse: Unknown parameter 'default_permis' [ 101.466744][ T4838] loop1: detected capacity change from 0 to 256 [ 101.492689][ T25] audit: type=1326 audit(1750566656.208:5): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=4839 comm="syz.4.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f895701a929 code=0x0 [ 101.514741][ T4161] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 101.532093][ T4838] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.557919][ T4838] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 101.576325][ T4838] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 101.697938][ T4829] loop0: detected capacity change from 0 to 40427 [ 101.716852][ T4829] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 101.725670][ T4829] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 101.737495][ T4829] F2FS-fs (loop0): Unrecognized mount option "0xffffffffffffffff" or missing value [ 101.858894][ T4220] usb 3-1: Using ep0 maxpacket: 16 [ 101.879821][ T4161] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.902057][ T4161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 101.930562][ T4161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.950274][ T4161] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 102.020145][ T4220] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.033932][ T4220] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.049442][ T4161] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 102.050759][ T4220] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.073160][ T4220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.075366][ T4161] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 102.083548][ T4220] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.118467][ T4220] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.128902][ T4161] usb 4-1: Manufacturer: syz [ 102.136542][ T4220] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.146163][ T4220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.198843][ T25] audit: type=1800 audit(1750566656.888:6): pid=4838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.131" name="file1" dev="loop1" ino=1048594 res=0 errno=0 [ 102.347437][ T4843] loop0: detected capacity change from 0 to 40427 [ 102.355437][ T4161] usb 4-1: config 0 descriptor?? [ 102.355490][ T4220] usb 3-1: config 0 descriptor?? [ 102.393979][ T4843] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 102.401909][ T4843] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.415233][ T4843] F2FS-fs (loop0): invalid crc value [ 102.464605][ T4843] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.520883][ T4843] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.528025][ T4843] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.625864][ T4836] udc-core: couldn't find an available UDC or it's busy [ 102.645094][ T4856] loop1: detected capacity change from 0 to 512 [ 102.665656][ T4220] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 102.686725][ T4836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.695492][ T4836] udc-core: couldn't find an available UDC or it's busy [ 102.712244][ T4836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.732894][ T4836] udc-core: couldn't find an available UDC or it's busy [ 102.735187][ T4856] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.740077][ T4836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.769317][ T4161] rc_core: IR keymap rc-hauppauge not found [ 102.775551][ T4161] Registered IR keymap rc-empty [ 102.893657][ T4860] attempt to access beyond end of device [ 102.893657][ T4860] loop0: rw=2049, want=78344, limit=40427 [ 103.564989][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.590961][ T4863] loop4: detected capacity change from 0 to 512 [ 103.599143][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.630327][ T4161] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 103.666067][ T4161] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 103.785588][ T21] usb 3-1: USB disconnect, device number 2 [ 103.831354][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.850770][ T21] usblp0: removed [ 103.866467][ T4863] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.879853][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 103.909897][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.291206][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.330057][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.469222][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.650657][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.678935][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.709099][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.738942][ T4161] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 104.780401][ T4161] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.789522][ T4685] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 104.807530][ T4161] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.895870][ T21] usb 4-1: USB disconnect, device number 8 [ 104.930609][ T4880] loop2: detected capacity change from 0 to 2048 [ 105.020390][ T4880] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 105.038880][ T4685] usb 5-1: Using ep0 maxpacket: 8 [ 105.045040][ T4880] EXT4-fs (loop2): shut down requested (0) [ 105.095679][ T4885] EXT4-fs (loop2): shut down requested (0) [ 105.219989][ T4886] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 105.227704][ T4886] netlink: 224 bytes leftover after parsing attributes in process `syz.2.142'. [ 105.318980][ T4685] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 105.341836][ T4685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.384892][ T4685] usb 5-1: Product: syz [ 105.405043][ T4685] usb 5-1: Manufacturer: syz [ 105.426699][ T4685] usb 5-1: SerialNumber: syz [ 105.453625][ T4685] usb 5-1: config 0 descriptor?? [ 105.500731][ T4685] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 105.616993][ T4875] loop1: detected capacity change from 0 to 32768 [ 105.662428][ T4889] device gretap0 entered promiscuous mode [ 105.675145][ T4889] batman_adv: batadv0: Adding interface: macvlan3 [ 105.704780][ T4889] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.748011][ T4875] JBD2: Ignoring recovery information on journal [ 105.761208][ T4875] jbd2_journal_bmap: journal block not found at offset 4609 on loop1-27 [ 105.816816][ T4875] JBD2: bad block at offset 4609 [ 105.822954][ T4875] JBD2: error -5 scanning journal [ 105.888236][ T4875] (syz.1.140,4875,0):ocfs2_journal_wipe:1154 ERROR: status = -5 [ 105.938839][ T4889] batman_adv: batadv0: Interface activated: macvlan3 [ 105.940297][ T4875] (syz.1.140,4875,0):ocfs2_check_volume:2424 ERROR: status = -5 [ 106.018952][ T4875] (syz.1.140,4875,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 106.053905][ T4875] (syz.1.140,4875,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 106.127716][ T4875] (syz.1.140,4875,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 106.672695][ T4220] usb 5-1: USB disconnect, device number 7 [ 106.942821][ T4896] loop0: detected capacity change from 0 to 32768 [ 107.005304][ T4875] loop1: detected capacity change from 0 to 512 [ 107.058046][ T4896] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.113609][ T4896] (syz.0.145,4896,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 107.129827][ T4875] UDF-fs: bad mount option "18446744073709551615" or missing value [ 107.185223][ T4896] ocfs2: Unmounting device (7,0) on (node local) [ 108.229720][ T4917] Zero length message leads to an empty skb [ 108.481167][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.489638][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.553054][ T4925] loop2: detected capacity change from 0 to 2048 [ 108.749973][ T4940] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.856759][ T4925] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.896465][ T4925] Remounting filesystem read-only [ 109.003333][ T4172] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 109.031885][ T4958] device gretap0 entered promiscuous mode [ 109.065858][ T4958] batman_adv: batadv0: Adding interface: macvlan2 [ 109.079301][ T4958] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.104876][ T4958] batman_adv: batadv0: Interface activated: macvlan2 [ 109.267696][ T4217] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 109.888930][ T4217] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 109.925928][ T4217] usb 5-1: config 0 has no interface number 0 [ 109.947308][ T4217] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 110.710574][ T4970] loop3: detected capacity change from 0 to 1024 [ 110.731349][ T4217] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 110.741772][ T4217] usb 5-1: New USB device found, idVendor=abed, idProduct=cdee, bcdDevice= 5.b9 [ 110.751497][ T4217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.764156][ T4217] usb 5-1: config 0 descriptor?? [ 110.819414][ T4970] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 110.842743][ T4217] usb 5-1: MIDIStreaming interface descriptor not found [ 110.871152][ T4970] EXT4-fs (loop3): group descriptors corrupted! [ 111.038538][ T1107] usb 5-1: USB disconnect, device number 8 [ 111.244025][ T4981] netlink: 9 bytes leftover after parsing attributes in process `syz.2.170'. [ 111.283745][ T4981] tipc: Started in network mode [ 111.288957][ T4981] tipc: Node identity , cluster identity 4711 [ 111.388577][ T4988] device bond_slave_0 entered promiscuous mode [ 111.395152][ T4988] device bond_slave_1 entered promiscuous mode [ 111.499344][ T4988] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 111.527063][ T4988] team0: Failed to send port change of device macvlan4 via netlink (err -105) [ 111.542537][ T4988] team0: Failed to send options change via netlink (err -105) [ 111.551593][ T4988] team0: Port device macvlan4 added [ 111.657649][ T4970] loop3: detected capacity change from 0 to 32768 [ 111.754742][ T4993] loop2: detected capacity change from 0 to 40427 [ 111.887091][ T4993] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 111.894888][ T4993] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 111.904811][ T4993] F2FS-fs (loop2): invalid crc value [ 111.935083][ T4997] loop1: detected capacity change from 0 to 2048 [ 111.939180][ T4970] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.996232][ T4997] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 112.037891][ T4997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.124630][ T4993] F2FS-fs (loop2): Found nat_bits in checkpoint [ 112.430011][ T4993] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 112.437278][ T4993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 113.526361][ T5014] attempt to access beyond end of device [ 113.526361][ T5014] loop2: rw=2049, want=78344, limit=40427 [ 114.985121][ T4181] ocfs2: Unmounting device (7,3) on (node local) [ 118.187356][ T5074] loop1: detected capacity change from 0 to 8 [ 118.213483][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop1 [ 118.569020][ T4161] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.858996][ T4161] usb 3-1: Using ep0 maxpacket: 32 [ 119.001204][ T4161] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 119.016849][ T4161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.128258][ T4161] usb 3-1: config 0 descriptor?? [ 119.193801][ T4161] gspca_main: sq930x-2.14.0 probing 041e:403c [ 119.949500][ T4161] gspca_sq930x: reg_r 001f failed -110 [ 119.955050][ T4161] sq930x: probe of 3-1:0.0 failed with error -110 [ 121.172920][ T4217] usb 3-1: USB disconnect, device number 3 [ 121.323883][ T5110] loop1: detected capacity change from 0 to 4096 [ 121.383735][ T5115] device gretap0 entered promiscuous mode [ 121.796698][ T5110] ntfs: volume version 3.1. [ 121.957722][ T5125] loop3: detected capacity change from 0 to 512 [ 122.234199][ T5125] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 122.235085][ T5128] loop4: detected capacity change from 0 to 4096 [ 122.415074][ T5128] ntfs: volume version 3.1. [ 122.460792][ T5128] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 122.486649][ T5136] netlink: 'syz.3.210': attribute type 9 has an invalid length. [ 122.515925][ T5128] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 122.543219][ T5128] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 122.701077][ T5137] loop1: detected capacity change from 0 to 2048 [ 122.721321][ T5128] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 122.730107][ T5137] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 122.747724][ T5137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.137108][ T5120] loop2: detected capacity change from 0 to 32768 [ 123.227901][ T5147] device syzkaller0 entered promiscuous mode [ 123.968317][ T5120] jfs_rename did not expect dtDelete to return rc = -2 [ 124.149912][ T5120] ERROR: (device loop2): jfs_rename: [ 124.149912][ T5120] [ 124.192302][ T5120] ERROR: (device loop2): remounting filesystem as read-only [ 124.287795][ T5163] loop3: detected capacity change from 0 to 512 [ 124.461592][ T5163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.768944][ T4182] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 125.033927][ T5179] loop2: detected capacity change from 0 to 64 [ 125.041454][ T4182] usb 4-1: Using ep0 maxpacket: 8 [ 125.054722][ T5175] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 125.399394][ T4182] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 125.408884][ T4182] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.416875][ T4182] usb 4-1: Product: syz [ 125.528952][ T4182] usb 4-1: Manufacturer: syz [ 125.547390][ T4182] usb 4-1: SerialNumber: syz [ 125.596237][ T4182] usb 4-1: config 0 descriptor?? [ 125.598003][ T5185] loop4: detected capacity change from 0 to 40427 [ 125.658034][ T5185] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 125.666030][ T5185] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.676609][ T5185] F2FS-fs (loop4): invalid crc value [ 125.683918][ T5189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 125.685263][ T4182] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 125.708082][ T5189] loop2: detected capacity change from 0 to 16 [ 125.737791][ T5185] F2FS-fs (loop4): Found nat_bits in checkpoint [ 125.792393][ T5185] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 125.799514][ T5185] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 126.188463][ T5199] attempt to access beyond end of device [ 126.188463][ T5199] loop4: rw=2049, want=78344, limit=40427 [ 127.912266][ T4182] usb 4-1: USB disconnect, device number 9 [ 128.327232][ T5228] loop4: detected capacity change from 0 to 512 [ 128.629034][ T5228] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.075407][ T5233] netlink: 'syz.0.237': attribute type 9 has an invalid length. [ 129.164809][ T5242] mmap: syz.2.241 (5242): VmData 175874048 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 129.296882][ T5239] FAULT_INJECTION: forcing a failure. [ 129.296882][ T5239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.325808][ T5239] CPU: 0 PID: 5239 Comm: syz.4.240 Not tainted 5.15.185-syzkaller #0 [ 129.333916][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.343974][ T5239] Call Trace: [ 129.347256][ T5239] [ 129.350184][ T5239] dump_stack_lvl+0x168/0x230 [ 129.354865][ T5239] ? show_regs_print_info+0x20/0x20 [ 129.360054][ T5239] ? load_image+0x3b0/0x3b0 [ 129.364559][ T5239] ? __lock_acquire+0x7c60/0x7c60 [ 129.369583][ T5239] should_fail+0x38c/0x4c0 [ 129.374001][ T5239] _copy_to_iter+0x409/0x1160 [ 129.378681][ T5239] ? iov_iter_init+0x170/0x170 [ 129.383442][ T5239] ? sched_dynamic_update+0x210/0x210 [ 129.388820][ T5239] tun_do_read+0x919/0x1380 [ 129.393335][ T5239] ? tun_get+0x2a0/0x2a0 [ 129.397585][ T5239] tun_chr_read_iter+0x13a/0x240 [ 129.402525][ T5239] do_iter_readv_writev+0x497/0x600 [ 129.407726][ T5239] ? generic_file_rw_checks+0x280/0x280 [ 129.413273][ T5239] ? common_file_perm+0x171/0x1c0 [ 129.418298][ T5239] ? fsnotify_perm+0x3a7/0x560 [ 129.423068][ T5239] do_iter_read+0x20b/0x7c0 [ 129.427568][ T5239] ? import_iovec+0x6f/0xa0 [ 129.432068][ T5239] do_preadv+0x1f9/0x330 [ 129.436308][ T5239] ? do_writev+0x410/0x410 [ 129.440737][ T5239] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 129.446722][ T5239] ? lock_chain_count+0x20/0x20 [ 129.451579][ T5239] ? vtime_user_exit+0x2dc/0x400 [ 129.456521][ T5239] ? lockdep_hardirqs_on+0x94/0x140 [ 129.461722][ T5239] do_syscall_64+0x4c/0xa0 [ 129.466137][ T5239] ? clear_bhb_loop+0x30/0x80 [ 129.468423][ T5249] loop3: detected capacity change from 0 to 2048 [ 129.470812][ T5239] ? clear_bhb_loop+0x30/0x80 [ 129.470834][ T5239] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.470853][ T5239] RIP: 0033:0x7f895701a929 [ 129.470869][ T5239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.470881][ T5239] RSP: 002b:00007f8954e82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 129.520082][ T5239] RAX: ffffffffffffffda RBX: 00007f8957241fa0 RCX: 00007f895701a929 [ 129.528037][ T5239] RDX: 00000000000003e8 RSI: 0000200000001300 RDI: 0000000000000004 [ 129.535989][ T5239] RBP: 00007f8954e82090 R08: 0000000000000000 R09: 0000000000000000 [ 129.543940][ T5239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.551892][ T5239] R13: 0000000000000000 R14: 00007f8957241fa0 R15: 00007fffdf99da58 [ 129.559856][ T5239] [ 129.605471][ T5250] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.688867][ T5252] 9pnet: Could not find request transport: fy [ 130.386824][ T5258] NILFS error (device loop3): nilfs_lookup: deleted inode referenced: 12 [ 130.806248][ T5258] Remounting filesystem read-only [ 130.930386][ T5249] syz.3.242 (5249) used greatest stack depth: 18848 bytes left [ 131.254661][ T5275] loop4: detected capacity change from 0 to 2048 [ 131.577581][ T5277] loop2: detected capacity change from 0 to 512 [ 131.744646][ T5275] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 131.790784][ T5277] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.795483][ T5275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.174598][ T5291] 9pnet: Insufficient options for proto=fd [ 132.316565][ T5285] loop3: detected capacity change from 0 to 8192 [ 132.324358][ T5284] loop1: detected capacity change from 0 to 8192 [ 132.767323][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.782181][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.089208][ T5285] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 133.119097][ T5285] REISERFS (device loop3): using ordered data mode [ 133.140339][ T5285] reiserfs: using flush barriers [ 133.215223][ T5285] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.229068][ T4220] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.303977][ T5284] loop1: p1 p3 p4 [ 133.316922][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.260'. [ 133.336546][ T5284] loop1: p1 size 8390912 extends beyond EOD, truncated [ 133.354123][ T5285] REISERFS (device loop3): checking transaction log (loop3) [ 133.398133][ T5284] loop1: p3 size 589824 extends beyond EOD, truncated [ 133.422713][ T5285] REISERFS (device loop3): Using r5 hash to sort names [ 133.471611][ T5285] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 133.599021][ T4220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.610460][ T4220] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 133.621948][ T4220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.672719][ T4220] usb 3-1: config 0 descriptor?? [ 134.120584][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 134.166331][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 134.177746][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 134.976086][ T5336] loop4: detected capacity change from 0 to 512 [ 135.073705][ T5336] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 135.103400][ T4220] usbhid 3-1:0.0: can't add hid device: -71 [ 135.110009][ T4220] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.118524][ T4220] usb 3-1: USB disconnect, device number 4 [ 135.301530][ T5338] loop1: detected capacity change from 0 to 2048 [ 135.449667][ T5338] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 135.495598][ T5338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.074541][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 137.085566][ T5357] loop4: detected capacity change from 0 to 2048 [ 137.677950][ T4355] Alternate GPT is invalid, using primary GPT. [ 137.688940][ T4355] loop4: p1 p2 p3 [ 137.759917][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 137.881300][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 137.933410][ T5357] Alternate GPT is invalid, using primary GPT. [ 137.940556][ T5357] loop4: p1 p2 p3 [ 137.986936][ T5361] loop1: detected capacity change from 0 to 2048 [ 138.097916][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 138.098273][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 138.121133][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.144522][ T5375] loop4: detected capacity change from 0 to 256 [ 138.160023][ T5361] Alternate GPT is invalid, using primary GPT. [ 138.179018][ T5361] loop1: p1 p2 p3 [ 138.203322][ T25] audit: type=1804 audit(1750566692.918:7): pid=5375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.279" name="/newroot/54/file1/file0" dev="loop4" ino=1048595 res=1 errno=0 [ 138.338314][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 138.338405][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 138.372297][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 138.535856][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 138.906007][ T5386] loop2: detected capacity change from 0 to 2048 [ 139.361605][ T5386] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 139.389275][ T5386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.579578][ T4269] udevd[4269]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 139.603959][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 139.723818][ T4164] udevd[4164]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 139.749683][ T4182] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 139.987041][ T5389] loop4: detected capacity change from 0 to 8192 [ 140.046560][ T5389] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 140.056746][ T5389] REISERFS (device loop4): using ordered data mode [ 140.079407][ T5389] reiserfs: using flush barriers [ 140.155475][ T5389] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.694887][ T5389] REISERFS (device loop4): checking transaction log (loop4) [ 140.705885][ T5389] REISERFS (device loop4): Using r5 hash to sort names [ 140.713261][ T5389] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 140.757933][ T4182] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 140.772793][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.782963][ T4182] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 140.811535][ T5405] netlink: 296 bytes leftover after parsing attributes in process `syz.1.289'. [ 140.833677][ T4182] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 140.865506][ T4182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.162212][ T5380] loop3: detected capacity change from 0 to 4096 [ 141.249288][ T5412] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.258867][ T4220] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.274930][ T25] audit: type=1800 audit(1750566695.988:8): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.281" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 141.372558][ T5416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 141.413691][ T5380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 141.443812][ T4182] usb 4-1: USB disconnect, device number 10 [ 141.450165][ T13] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01 [ 141.478875][ T4220] usb 2-1: device descriptor read/64, error -71 [ 141.486558][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.524955][ T13] usb 3-1: Product: syz [ 141.536466][ T13] usb 3-1: Manufacturer: syz [ 141.542040][ T13] usb 3-1: SerialNumber: syz [ 141.550615][ T13] usb 3-1: config 0 descriptor?? [ 141.602689][ T13] go7007 3-1:0.0: Sensoray 2250 found [ 141.609541][ T13] go7007: probe of 3-1:0.0 failed with error -12 [ 141.758977][ T4220] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.866193][ T5394] loop2: detected capacity change from 0 to 2048 [ 142.073410][ T4220] usb 2-1: device descriptor read/64, error -71 [ 142.084116][ T5394] loop2: p3 < > p4 < > [ 142.088325][ T5394] loop2: partition table partially beyond EOD, truncated [ 142.119032][ T5394] loop2: p3 start 4284289 is beyond EOD, truncated [ 142.409388][ T4220] usb usb2-port1: attempt power cycle [ 142.672065][ T21] usb 3-1: USB disconnect, device number 5 [ 142.878897][ T4220] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.099469][ T4220] usb 2-1: device descriptor read/8, error -71 [ 143.369080][ T4220] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 143.529891][ T4220] usb 2-1: device descriptor read/8, error -71 [ 143.669898][ T4220] usb usb2-port1: unable to enumerate USB device [ 144.450455][ T5452] loop3: detected capacity change from 0 to 2048 [ 144.525251][ T5452] Alternate GPT is invalid, using primary GPT. [ 144.533945][ T5452] loop3: p1 p2 p3 [ 145.255632][ T4303] udevd[4303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 145.266174][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 145.377265][ T4355] udevd[4355]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 145.681049][ T5483] loop2: detected capacity change from 0 to 512 [ 145.815265][ T5479] loop3: detected capacity change from 0 to 32768 [ 145.912073][ T5487] loop4: detected capacity change from 0 to 256 [ 146.024469][ T5483] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.119789][ T5485] loop1: detected capacity change from 0 to 32768 [ 146.127958][ T5483] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.148236][ T5490] netlink: 72 bytes leftover after parsing attributes in process `syz.0.317'. [ 146.251617][ T5496] loop4: detected capacity change from 0 to 512 [ 146.359431][ T5496] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.011173][ T5504] loop4: detected capacity change from 0 to 8 [ 147.129821][ T5504] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 147.166315][ T5506] loop2: detected capacity change from 0 to 2048 [ 147.173531][ T5506] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 147.192308][ T5506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.194264][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop4 [ 147.218606][ T5504] cramfs: Error -5 while decompressing! [ 147.314969][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop4 [ 147.330803][ T5509] loop1: detected capacity change from 0 to 4096 [ 147.337805][ T5511] fuse: Bad value for 'fd' [ 147.363226][ T5504] cramfs: ffffffff961ce228(26)->ffff888054a62000(4096) [ 147.409551][ T5504] cramfs: Error -3 while decompressing! [ 147.419157][ T5504] cramfs: ffffffff961ce242(26)->ffff88805d631000(4096) [ 147.432646][ T5509] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 147.439040][ T5504] cramfs: Error -3 while decompressing! [ 147.500069][ T5509] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 147.564034][ T5509] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 147.579158][ T5504] cramfs: ffffffff961ce25c(16)->ffff8880553d3000(4096) [ 147.605096][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop4 [ 147.621654][ T5504] cramfs: Error -5 while decompressing! [ 147.627445][ T5504] cramfs: ffffffff961ce228(26)->ffff888054a62000(4096) [ 147.646284][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop4 [ 147.654756][ T5509] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 147.971288][ T5509] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 148.367970][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop4 [ 148.379904][ T5509] ntfs: volume version 3.1. [ 148.401061][ T5509] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 148.503982][ T4355] udevd[4355]: incorrect cramfs checksum on /dev/loop4 [ 148.528409][ T5509] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 148.599225][ T5509] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 148.746974][ T5509] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 148.774453][ T5521] loop2: detected capacity change from 0 to 8192 [ 148.809608][ T5509] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 149.103855][ T5521] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 149.146837][ T5521] REISERFS (device loop2): using ordered data mode [ 149.208858][ T5521] reiserfs: using flush barriers [ 149.235485][ T5521] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.311804][ T5521] REISERFS (device loop2): checking transaction log (loop2) [ 149.344117][ T5521] REISERFS (device loop2): Using r5 hash to sort names [ 149.351288][ T5521] REISERFS warning (device loop2): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 149.407381][ T5539] loop4: detected capacity change from 0 to 512 [ 149.413779][ T4217] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 149.499292][ T5539] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.651092][ T5543] loop4: detected capacity change from 0 to 8 [ 149.789202][ T4217] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 149.807989][ T4217] usb 2-1: config 0 has no interface number 0 [ 149.827503][ T4217] usb 2-1: config 0 interface 98 has no altsetting 0 [ 150.034917][ T4217] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 150.055201][ T5522] loop3: detected capacity change from 0 to 32768 [ 150.066874][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.084792][ T4217] usb 2-1: Product: syz [ 150.104060][ T4217] usb 2-1: Manufacturer: syz [ 150.126236][ T4217] usb 2-1: SerialNumber: syz [ 150.213092][ T5548] loop4: detected capacity change from 0 to 2048 [ 150.225806][ T5548] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051 [ 150.279769][ T5522] gfs2: Bad value for 'quota_quantum' [ 150.318227][ T5548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.627450][ T4217] usb 2-1: config 0 descriptor?? [ 150.718965][ T4217] usb 2-1: can't set config #0, error -71 [ 150.738340][ T4217] usb 2-1: USB disconnect, device number 11 [ 151.154580][ T5558] loop1: detected capacity change from 0 to 2048 [ 151.610320][ T5558] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 151.640525][ T5558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.982004][ T5567] loop3: detected capacity change from 0 to 8 [ 152.024712][ T5567] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 152.094953][ T4323] udevd[4323]: incorrect cramfs checksum on /dev/loop3 [ 152.111698][ T5567] cramfs: Error -5 while decompressing! [ 152.137638][ T5567] cramfs: ffffffff961ca228(26)->ffff888052b4e000(4096) [ 152.174208][ T4323] udevd[4323]: incorrect cramfs checksum on /dev/loop3 [ 152.213887][ T5567] cramfs: Error -3 while decompressing! [ 152.262617][ T5567] cramfs: ffffffff961ca242(26)->ffff888052b4f000(4096) [ 152.293075][ T5567] cramfs: Error -3 while decompressing! [ 152.308661][ T5578] loop1: detected capacity change from 0 to 256 [ 152.355903][ T5567] cramfs: ffffffff961ca25c(16)->ffff888052b50000(4096) [ 152.425559][ T5581] 9pnet: Could not find request transport: fy [ 152.561771][ T5567] cramfs: Error -5 while decompressing! [ 152.657620][ T5580] loop4: detected capacity change from 0 to 512 [ 152.721928][ T5567] cramfs: ffffffff961ca228(26)->ffff888052b4e000(4096) [ 153.047639][ T5578] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.113220][ T5580] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.114385][ T5578] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 153.160511][ T5578] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 153.266977][ T5592] loop4: detected capacity change from 0 to 512 [ 153.425499][ T5592] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 153.432037][ T5592] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 153.463174][ T5592] vhci_hcd vhci_hcd.0: Device attached [ 153.608993][ T5597] vhci_hcd: connection closed [ 153.670560][ T154] vhci_hcd: stop threads [ 153.688910][ T13] vhci_hcd: vhci_device speed not set [ 154.145730][ T13] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 154.524415][ T154] vhci_hcd: release socket [ 154.554869][ T154] vhci_hcd: disconnect device [ 154.568433][ T5606] 9pnet: Insufficient options for proto=fd [ 154.645294][ T5617] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.355'. [ 154.661036][ T5617] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 154.815184][ T5617] cgroup: name respecified [ 154.849685][ T5611] loop2: detected capacity change from 0 to 8192 [ 155.891556][ T5611] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 155.913044][ T5617] netlink: 26 bytes leftover after parsing attributes in process `syz.0.355'. [ 155.929973][ T5611] REISERFS (device loop2): using ordered data mode [ 155.948890][ T5611] reiserfs: using flush barriers [ 156.084885][ T5611] block device autoloading is deprecated. It will be removed in Linux 5.19 [ 156.140696][ T5611] REISERFS warning (device loop2): sh-459 journal_init: unable to read journal header [ 156.222702][ T5611] REISERFS warning (device loop2): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 156.404308][ T5631] mmap: syz.1.357 (5631) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 156.429229][ T5631] loop1: detected capacity change from 0 to 128 [ 156.611748][ T5631] befs: Unrecognized mount option "gid=0xffffffffffffffff˙˙˙˙01777777777777777777777" or missing value [ 156.886352][ T5615] loop3: detected capacity change from 0 to 2048 [ 156.950139][ T5615] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 157.003548][ T5615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.013589][ T25] audit: type=1326 audit(1750566711.728:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.143938][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 157.287616][ T5649] FAULT_INJECTION: forcing a failure. [ 157.287616][ T5649] name failslab, interval 1, probability 0, space 0, times 1 [ 157.300998][ T5649] CPU: 1 PID: 5649 Comm: syz.2.362 Not tainted 5.15.185-syzkaller #0 [ 157.309066][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.319110][ T5649] Call Trace: [ 157.322379][ T5649] [ 157.325304][ T5649] dump_stack_lvl+0x168/0x230 [ 157.329981][ T5649] ? show_regs_print_info+0x20/0x20 [ 157.335172][ T5649] ? load_image+0x3b0/0x3b0 [ 157.339668][ T5649] ? __might_sleep+0xf0/0xf0 [ 157.344249][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 157.349271][ T5649] should_fail+0x38c/0x4c0 [ 157.353686][ T5649] should_failslab+0x5/0x20 [ 157.358180][ T5649] slab_pre_alloc_hook+0x51/0xc0 [ 157.363116][ T5649] kmem_cache_alloc_node_trace+0x4a/0x300 [ 157.368827][ T5649] ? __get_vm_area_node+0x119/0x2d0 [ 157.374032][ T5649] __get_vm_area_node+0x119/0x2d0 [ 157.379053][ T5649] __vmalloc_node_range+0xef/0x8b0 [ 157.384156][ T5649] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.389708][ T5649] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.395248][ T5649] __vmalloc+0x76/0x80 [ 157.399311][ T5649] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.404855][ T5649] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.410222][ T5649] bpf_prog_alloc+0x1a/0x1e0 [ 157.414809][ T5649] bpf_prog_create+0x9a/0x1f0 [ 157.419480][ T5649] bpf_mt_check_v1+0x1fb/0x320 [ 157.424238][ T5649] ? bpf_mt_v1+0x300/0x300 [ 157.428646][ T5649] ? lock_chain_count+0x20/0x20 [ 157.433496][ T5649] xt_check_match+0x3c6/0xaa0 [ 157.438171][ T5649] ? xt_check_proc_name+0x240/0x240 [ 157.443368][ T5649] ? strcmp+0x2d/0xb0 [ 157.447345][ T5649] ? xt_find_match+0x1e1/0x210 [ 157.452107][ T5649] translate_table+0x153d/0x2020 [ 157.457064][ T5649] ? ip6t_register_table+0x7e0/0x7e0 [ 157.462342][ T5649] ? __might_fault+0xb7/0x110 [ 157.467015][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 157.472043][ T5649] ? _copy_from_user+0x111/0x170 [ 157.476977][ T5649] do_ip6t_set_ctl+0x975/0xd00 [ 157.481737][ T5649] ? nf_setsockopt+0x218/0x280 [ 157.486502][ T5649] ? ip6t_unregister_table_exit+0x230/0x230 [ 157.492394][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 157.497412][ T5649] ? __mutex_lock_common+0x431/0x2390 [ 157.502794][ T5649] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 157.508430][ T5649] ? mutex_unlock+0x10/0x10 [ 157.512951][ T5649] ? __local_bh_enable_ip+0x13b/0x1b0 [ 157.518324][ T5649] nf_setsockopt+0x25f/0x280 [ 157.522917][ T5649] ipv6_setsockopt+0x1cb8/0x3890 [ 157.527862][ T5649] ? ipv6_update_options+0x400/0x400 [ 157.533140][ T5649] ? __switch_to_asm+0x34/0x60 [ 157.537897][ T5649] ? verify_lock_unused+0x140/0x140 [ 157.543093][ T5649] ? __schedule+0x11c0/0x43b0 [ 157.547774][ T5649] ? mark_lock+0x94/0x320 [ 157.552112][ T5649] ? __lock_acquire+0x12d9/0x7c60 [ 157.557155][ T5649] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 157.559865][ T25] audit: type=1326 audit(1750566712.278:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.563135][ T5649] ? lock_chain_count+0x20/0x20 [ 157.589982][ T5649] ? verify_lock_unused+0x140/0x140 [ 157.595185][ T5649] ? aa_label_sk_perm+0x37e/0x490 [ 157.600209][ T5649] ? aa_sk_perm+0x8f0/0x8f0 [ 157.604723][ T5649] ? __might_sleep+0xf0/0xf0 [ 157.605488][ T25] audit: type=1326 audit(1750566712.278:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.609309][ T5649] ? rcu_lock_release+0x9/0x20 [ 157.609330][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 157.609351][ T5649] ? aa_sk_perm+0x7b4/0x8f0 [ 157.645602][ T5649] ? aa_af_perm+0x2b0/0x2b0 [ 157.650099][ T5649] ? __fget_files+0x40f/0x480 [ 157.654782][ T5649] ? aa_sock_opt_perm+0x74/0x100 [ 157.659725][ T5649] ? udpv6_setsockopt+0x7a/0xa0 [ 157.664580][ T5649] ? sock_common_recvmsg+0x1b0/0x1b0 [ 157.669871][ T5649] __sys_setsockopt+0x3d6/0x5e0 [ 157.674727][ T5649] ? __ia32_sys_recv+0xb0/0xb0 [ 157.679495][ T5649] ? lockdep_hardirqs_on+0x94/0x140 [ 157.684709][ T5649] __x64_sys_setsockopt+0xb1/0xc0 [ 157.689741][ T5649] do_syscall_64+0x4c/0xa0 [ 157.694160][ T5649] ? clear_bhb_loop+0x30/0x80 [ 157.698953][ T5649] ? clear_bhb_loop+0x30/0x80 [ 157.703637][ T5649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.709537][ T5649] RIP: 0033:0x7fefc3b9b929 [ 157.713959][ T5649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.733564][ T5649] RSP: 002b:00007fefc19c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 157.741988][ T5649] RAX: ffffffffffffffda RBX: 00007fefc3dc3160 RCX: 00007fefc3b9b929 [ 157.749961][ T5649] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 157.757939][ T5649] RBP: 00007fefc19c1090 R08: 00000000000005b8 R09: 0000000000000000 [ 157.765913][ T5649] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 157.773885][ T5649] R13: 0000000000000000 R14: 00007fefc3dc3160 R15: 00007ffec7583628 [ 157.781870][ T5649] [ 157.785992][ T5649] syz.2.362: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 157.793573][ T25] audit: type=1326 audit(1750566712.278:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.802286][ T5649] CPU: 0 PID: 5649 Comm: syz.2.362 Not tainted 5.15.185-syzkaller #0 [ 157.802303][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.802312][ T5649] Call Trace: [ 157.830607][ T25] audit: type=1326 audit(1750566712.448:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.832370][ T5649] [ 157.832379][ T5649] dump_stack_lvl+0x168/0x230 [ 157.861182][ T25] audit: type=1326 audit(1750566712.448:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.867620][ T5649] ? rcu_lock_release+0x5/0x20 [ 157.867643][ T5649] ? show_regs_print_info+0x20/0x20 [ 157.889003][ T25] audit: type=1326 audit(1750566712.448:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.0.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e50e3929 code=0x7ffc0000 [ 157.897240][ T5649] ? load_image+0x3b0/0x3b0 [ 157.897273][ T5649] warn_alloc+0x20e/0x2f0 [ 157.897296][ T5649] ? zone_watermark_ok_safe+0x240/0x240 [ 157.943569][ T5649] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 157.949564][ T5649] ? __get_vm_area_node+0x2b5/0x2d0 [ 157.954771][ T5649] __vmalloc_node_range+0x2b1/0x8b0 [ 157.959980][ T5649] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.965530][ T5649] __vmalloc+0x76/0x80 [ 157.969600][ T5649] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.975147][ T5649] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 157.980528][ T5649] bpf_prog_alloc+0x1a/0x1e0 [ 157.985122][ T5649] bpf_prog_create+0x9a/0x1f0 [ 157.989804][ T5649] bpf_mt_check_v1+0x1fb/0x320 [ 157.994577][ T5649] ? bpf_mt_v1+0x300/0x300 [ 157.995991][ T5654] loop3: detected capacity change from 0 to 1024 [ 157.998992][ T5649] ? lock_chain_count+0x20/0x20 [ 157.999020][ T5649] xt_check_match+0x3c6/0xaa0 [ 157.999043][ T5649] ? xt_check_proc_name+0x240/0x240 [ 157.999064][ T5649] ? strcmp+0x2d/0xb0 [ 157.999084][ T5649] ? xt_find_match+0x1e1/0x210 [ 157.999105][ T5649] translate_table+0x153d/0x2020 [ 157.999135][ T5649] ? ip6t_register_table+0x7e0/0x7e0 [ 157.999150][ T5649] ? __might_fault+0xb7/0x110 [ 158.043665][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 158.048704][ T5649] ? _copy_from_user+0x111/0x170 [ 158.053646][ T5649] do_ip6t_set_ctl+0x975/0xd00 [ 158.058411][ T5649] ? nf_setsockopt+0x218/0x280 [ 158.063172][ T5649] ? ip6t_unregister_table_exit+0x230/0x230 [ 158.069066][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 158.074090][ T5649] ? __mutex_lock_common+0x431/0x2390 [ 158.079478][ T5649] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 158.085109][ T5649] ? mutex_unlock+0x10/0x10 [ 158.089619][ T5649] ? __local_bh_enable_ip+0x13b/0x1b0 [ 158.094992][ T5649] nf_setsockopt+0x25f/0x280 [ 158.099584][ T5649] ipv6_setsockopt+0x1cb8/0x3890 [ 158.104528][ T5649] ? ipv6_update_options+0x400/0x400 [ 158.109812][ T5649] ? __switch_to_asm+0x34/0x60 [ 158.114581][ T5649] ? verify_lock_unused+0x140/0x140 [ 158.119779][ T5649] ? __schedule+0x11c0/0x43b0 [ 158.124456][ T5649] ? mark_lock+0x94/0x320 [ 158.128791][ T5649] ? __lock_acquire+0x12d9/0x7c60 [ 158.133817][ T5649] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 158.139779][ T5649] ? lock_chain_count+0x20/0x20 [ 158.144612][ T5649] ? verify_lock_unused+0x140/0x140 [ 158.149791][ T5649] ? aa_label_sk_perm+0x37e/0x490 [ 158.154800][ T5649] ? aa_sk_perm+0x8f0/0x8f0 [ 158.159289][ T5649] ? __might_sleep+0xf0/0xf0 [ 158.163861][ T5649] ? rcu_lock_release+0x9/0x20 [ 158.168609][ T5649] ? __lock_acquire+0x7c60/0x7c60 [ 158.173615][ T5649] ? aa_sk_perm+0x7b4/0x8f0 [ 158.178099][ T5649] ? aa_af_perm+0x2b0/0x2b0 [ 158.182580][ T5649] ? __fget_files+0x40f/0x480 [ 158.187239][ T5649] ? aa_sock_opt_perm+0x74/0x100 [ 158.192159][ T5649] ? udpv6_setsockopt+0x7a/0xa0 [ 158.196990][ T5649] ? sock_common_recvmsg+0x1b0/0x1b0 [ 158.202254][ T5649] __sys_setsockopt+0x3d6/0x5e0 [ 158.207086][ T5649] ? __ia32_sys_recv+0xb0/0xb0 [ 158.211835][ T5649] ? lockdep_hardirqs_on+0x94/0x140 [ 158.217023][ T5649] __x64_sys_setsockopt+0xb1/0xc0 [ 158.222032][ T5649] do_syscall_64+0x4c/0xa0 [ 158.226430][ T5649] ? clear_bhb_loop+0x30/0x80 [ 158.231088][ T5649] ? clear_bhb_loop+0x30/0x80 [ 158.235743][ T5649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.241616][ T5649] RIP: 0033:0x7fefc3b9b929 [ 158.246015][ T5649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.265600][ T5649] RSP: 002b:00007fefc19c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.273995][ T5649] RAX: ffffffffffffffda RBX: 00007fefc3dc3160 RCX: 00007fefc3b9b929 [ 158.281948][ T5649] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 158.289900][ T5649] RBP: 00007fefc19c1090 R08: 00000000000005b8 R09: 0000000000000000 [ 158.297851][ T5649] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 158.305802][ T5649] R13: 0000000000000000 R14: 00007fefc3dc3160 R15: 00007ffec7583628 [ 158.313766][ T5649] [ 158.317747][ T5649] Mem-Info: [ 158.321203][ T5649] active_anon:342 inactive_anon:14999 isolated_anon:0 [ 158.321203][ T5649] active_file:10633 inactive_file:40285 isolated_file:0 [ 158.321203][ T5649] unevictable:768 dirty:239 writeback:0 [ 158.321203][ T5649] slab_reclaimable:20609 slab_unreclaimable:95450 [ 158.321203][ T5649] mapped:36103 shmem:10715 pagetables:736 bounce:0 [ 158.321203][ T5649] kernel_misc_reclaimable:0 [ 158.321203][ T5649] free:1367225 free_pcp:7480 free_cma:0 [ 158.363011][ T5649] Node 0 active_anon:1336kB inactive_anon:57988kB active_file:42332kB inactive_file:161140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144412kB dirty:952kB writeback:0kB shmem:39384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11268kB pagetables:2944kB all_unreclaimable? no [ 158.394251][ T5649] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 158.423307][ T5649] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.449531][ T5649] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 158.455276][ T5649] Node 0 DMA32 free:1527900kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1336kB inactive_anon:55088kB active_file:42332kB inactive_file:161140kB unevictable:1536kB writepending:1000kB present:3129332kB managed:2609060kB mlocked:0kB bounce:0kB free_pcp:29640kB local_pcp:18704kB free_cma:0kB [ 158.485391][ T5649] lowmem_reserve[]: 0 0 0 0 0 [ 158.490121][ T5649] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 158.515978][ T5649] lowmem_reserve[]: 0 0 0 0 0 [ 158.520714][ T5649] Node 1 Normal free:3925400kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4668kB local_pcp:2236kB free_cma:0kB [ 158.549578][ T5649] lowmem_reserve[]: 0 0 0 0 0 [ 158.554283][ T5649] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 158.566950][ T5649] Node 0 DMA32: 2139*4kB (UME) 1540*8kB (UME) 499*16kB (UME) 251*32kB (UME) 165*64kB (UME) 60*128kB (UME) 29*256kB (UME) 8*512kB (UM) 1*1024kB (U) 5*2048kB (UME) 354*4096kB (M) = 1527900kB [ 158.585643][ T5649] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 158.597143][ T5649] Node 1 Normal: 183*4kB (UE) 48*8kB (UME) 31*16kB (UE) 187*32kB (UME) 72*64kB (UME) 20*128kB (UME) 8*256kB (U) 6*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 952*4096kB (M) = 3925420kB [ 158.614983][ T5649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.624549][ T5649] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.633863][ T5649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 158.643423][ T5649] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 158.652741][ T5649] 58400 total pagecache pages [ 158.657414][ T5649] 0 pages in swap cache [ 158.661600][ T5649] Swap cache stats: add 5294, delete 5294, find 72/143 [ 158.668532][ T5649] Free swap = 124424kB [ 158.672715][ T5649] Total swap = 124996kB [ 158.676871][ T5649] 2097051 pages RAM [ 158.680713][ T5649] 0 pages HighMem/MovableOnly [ 158.685374][ T5649] 410799 pages reserved [ 158.689556][ T5649] 0 pages cma reserved [ 158.693858][ T5649] xt_bpf: check failed: parse error [ 158.798456][ T5654] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 158.875164][ T5654] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000. Quota mode: none. [ 158.875422][ T5659] loop2: detected capacity change from 0 to 512 [ 158.945532][ T5654] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.364: missing EA_INODE flag [ 158.989686][ T5654] EXT4-fs (loop3): Remounting filesystem read-only [ 159.005217][ T5663] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 159.011748][ T5663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.022867][ T5657] loop1: detected capacity change from 0 to 32768 [ 159.029911][ T5654] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.364: error while reading EA inode 11 err=-117 [ 159.032702][ T5663] vhci_hcd vhci_hcd.0: Device attached [ 159.097112][ T5657] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.365 (5657) [ 159.176792][ T5654] EXT4-fs (loop3): Remounting filesystem read-only [ 159.218024][ T5657] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 159.260085][ T5657] BTRFS info (device loop1): setting nodatacow, compression disabled [ 159.277661][ T5657] BTRFS info (device loop1): turning on flush-on-commit [ 159.284165][ T5670] loop4: detected capacity change from 0 to 128 [ 159.284806][ T5657] BTRFS info (device loop1): using free space tree [ 159.297844][ T5657] BTRFS info (device loop1): has skinny extents [ 159.341615][ T5659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 159.348163][ T5659] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 159.370162][ T5659] vhci_hcd vhci_hcd.0: Device attached [ 159.399064][ T13] vhci_hcd: vhci_device speed not set [ 159.644756][ T4686] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 159.779007][ T4182] vhci_hcd: vhci_device speed not set [ 159.858937][ T4182] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 159.948797][ T4686] usb 4-1: Using ep0 maxpacket: 16 [ 160.064472][ T4217] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 160.123835][ T5684] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.124708][ T5684] 9pnet_virtio: no channels available for device 127.0.0.1 [ 160.242883][ T5673] vhci_hcd: connection reset by peer [ 160.256328][ T473] vhci_hcd: stop threads [ 160.267952][ T473] vhci_hcd: release socket [ 160.280503][ T4686] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 160.283643][ T473] vhci_hcd: disconnect device [ 160.295605][ T5657] BTRFS info (device loop1): enabling ssd optimizations [ 160.325466][ T4686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.370476][ T4686] usb 4-1: Product: syz [ 160.385015][ T4686] usb 4-1: Manufacturer: syz [ 160.413822][ T4686] usb 4-1: SerialNumber: syz [ 160.469585][ T4686] usb 4-1: config 0 descriptor?? [ 161.110235][ T4686] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 161.130409][ T4686] usb 4-1: Detected FT232H [ 161.172139][ T5664] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 161.212898][ T473] vhci_hcd: stop threads [ 161.217168][ T473] vhci_hcd: release socket [ 161.245313][ T473] vhci_hcd: disconnect device [ 161.407840][ T5654] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.364: missing EA_INODE flag [ 161.519152][ T5654] EXT4-fs (loop3): Remounting filesystem read-only [ 161.525971][ T5654] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.364: error while reading EA inode 11 err=-117 [ 161.591933][ T5720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.620355][ T5700] loop2: detected capacity change from 0 to 32768 [ 161.641515][ T5654] EXT4-fs (loop3): Remounting filesystem read-only [ 162.188634][ T5700] XFS (loop2): Mounting V5 Filesystem [ 162.559623][ T4686] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 162.587174][ T5700] XFS (loop2): Ending clean mount [ 162.590148][ T4686] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 162.629037][ T4686] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 162.700085][ T4686] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 162.745585][ T4686] usb 4-1: USB disconnect, device number 11 [ 162.836570][ T4686] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 162.878482][ T4686] ftdi_sio 4-1:0.0: device disconnected [ 162.925430][ T4172] XFS (loop2): Unmounting Filesystem [ 163.389169][ T4686] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 163.618863][ T13] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 163.878936][ T4686] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.886960][ T4686] usb 4-1: config 0 has no interface number 0 [ 163.908890][ T4686] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.920165][ T4686] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.938784][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 163.944807][ T4686] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 163.967593][ T5770] loop1: detected capacity change from 0 to 4096 [ 163.974202][ T5732] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.986690][ T4686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.997044][ T4686] usb 4-1: config 0 descriptor?? [ 164.022473][ T5761] qrtr: Invalid version 11 [ 164.027215][ T5770] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 164.087730][ T5770] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 164.179592][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 164.254662][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 164.272632][ T13] usb 5-1: can't read configurations, error -71 [ 164.282719][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 164.376562][ T5777] loop1: detected capacity change from 0 to 47 [ 164.849762][ T5750] loop3: detected capacity change from 0 to 128 [ 165.224720][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.235592][ T4217] vhci_hcd: vhci_device speed not set [ 165.276236][ T5750] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.460654][ T4182] vhci_hcd: vhci_device speed not set [ 165.588730][ C0] sched: RT throttling activated [ 165.620424][ T4686] prodikeys 0003:041E:2801.0001: item fetching failed at offset 5/7 [ 165.629706][ T4686] prodikeys 0003:041E:2801.0001: hid parse failed [ 165.636185][ T4686] prodikeys: probe of 0003:041E:2801.0001 failed with error -22 [ 165.679731][ T5786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.392'. [ 165.782368][ T5790] loop1: detected capacity change from 0 to 512 [ 165.796204][ T4362] usb 4-1: USB disconnect, device number 12 [ 165.808894][ T5732] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 165.817955][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.838674][ T5790] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.868916][ T5732] usb 3-1: Product: syz [ 165.873118][ T5732] usb 3-1: Manufacturer: syz [ 165.877709][ T5732] usb 3-1: SerialNumber: syz [ 165.914696][ T5732] usb 3-1: config 0 descriptor?? [ 166.096224][ T5795] loop1: detected capacity change from 0 to 764 [ 166.145081][ T5795] rock: directory entry would overflow storage [ 166.162065][ T5768] udc-core: couldn't find an available UDC or it's busy [ 166.172865][ T5768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.174951][ T5795] rock: sig=0x4654, size=5, remaining=4 [ 166.192448][ T5799] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 166.229287][ T5768] udc-core: couldn't find an available UDC or it's busy [ 166.251135][ T5768] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 166.838880][ T5732] airspy 3-1:0.0: usb_control_msg() failed -71 request 0a [ 166.848257][ T5732] airspy 3-1:0.0: Could not detect board [ 166.857702][ T5732] airspy: probe of 3-1:0.0 failed with error -71 [ 166.869960][ T5732] usb 3-1: USB disconnect, device number 6 [ 168.273248][ T5842] loop3: detected capacity change from 0 to 1024 [ 168.339403][ T4362] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 168.442362][ T9] hfsplus: bad catalog file entry [ 168.575087][ T5854] loop3: detected capacity change from 0 to 256 [ 168.608860][ T4362] usb 3-1: Using ep0 maxpacket: 8 [ 168.639906][ T5854] exfat: Unknown parameter '˙˙0x0000000000000000' [ 168.665962][ T5830] loop4: detected capacity change from 0 to 40427 [ 168.732372][ T4362] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 168.749701][ T4362] usb 3-1: config 0 has no interface number 0 [ 168.772561][ T4362] usb 3-1: config 0 interface 158 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 168.814883][ T4362] usb 3-1: config 0 interface 158 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 168.838867][ T4362] usb 3-1: config 0 interface 158 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 168.960637][ T5873] overlayfs: failed to clone upperpath [ 168.993551][ T5874] loop1: detected capacity change from 0 to 512 [ 169.019038][ T4362] usb 3-1: New USB device found, idVendor=04e6, idProduct=000c, bcdDevice= 1.00 [ 169.038177][ T4362] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.041940][ T5874] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 169.070104][ T4362] usb 3-1: Product: syz [ 169.099002][ T4362] usb 3-1: Manufacturer: syz [ 169.122900][ T4362] usb 3-1: SerialNumber: syz [ 169.150654][ T4362] usb 3-1: config 0 descriptor?? [ 169.423569][ T4362] usb-storage 3-1:0.158: USB Mass Storage device detected [ 169.488154][ T4362] usb-storage 3-1:0.158: Quirks match for vid 04e6 pid 000c: 4 [ 169.498589][ T5886] loop1: detected capacity change from 0 to 1024 [ 169.588162][ T4362] usb 3-1: USB disconnect, device number 7 [ 169.610216][ T5886] ================================================================== [ 169.618562][ T5886] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x591/0x1200 [ 169.626288][ T5886] Read of size 2 at addr ffff888022cfa218 by task syz.1.424/5886 [ 169.633999][ T5886] [ 169.636316][ T5886] CPU: 0 PID: 5886 Comm: syz.1.424 Not tainted 5.15.185-syzkaller #0 [ 169.644373][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.654427][ T5886] Call Trace: [ 169.657707][ T5886] [ 169.660648][ T5886] dump_stack_lvl+0x168/0x230 [ 169.665331][ T5886] ? show_regs_print_info+0x20/0x20 [ 169.670532][ T5886] ? _printk+0xcc/0x110 [ 169.674687][ T5886] ? hfsplus_uni2asc+0x591/0x1200 [ 169.679728][ T5886] ? load_image+0x3b0/0x3b0 [ 169.684234][ T5886] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 169.689617][ T5886] print_address_description+0x60/0x2d0 [ 169.695165][ T5886] ? hfsplus_uni2asc+0x591/0x1200 [ 169.700192][ T5886] kasan_report+0xdf/0x130 [ 169.704615][ T5886] ? hfsplus_uni2asc+0x591/0x1200 [ 169.709643][ T5886] hfsplus_uni2asc+0x591/0x1200 [ 169.714508][ T5886] hfsplus_listxattr+0x58b/0xb80 [ 169.719455][ T5886] ? hfsplus_getxattr+0xd0/0xd0 [ 169.724306][ T5886] ? user_path_at_empty+0x13e/0x190 [ 169.729517][ T5886] ? __kasan_kmalloc+0xcc/0xf0 [ 169.734293][ T5886] ? __kasan_kmalloc+0xb5/0xf0 [ 169.739055][ T5886] ? kvmalloc_node+0x84/0x130 [ 169.743783][ T5886] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 169.749167][ T5886] listxattr+0x283/0x2e0 [ 169.753407][ T5886] ? hfsplus_getxattr+0xd0/0xd0 [ 169.758261][ T5886] path_listxattr+0xd9/0x1b0 [ 169.762856][ T5886] ? getxattr+0x370/0x370 [ 169.767188][ T5886] ? lockdep_hardirqs_on+0x94/0x140 [ 169.772394][ T5886] do_syscall_64+0x4c/0xa0 [ 169.776809][ T5886] ? clear_bhb_loop+0x30/0x80 [ 169.781485][ T5886] ? clear_bhb_loop+0x30/0x80 [ 169.786165][ T5886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.792069][ T5886] RIP: 0033:0x7ff37cdb5929 [ 169.796489][ T5886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.816102][ T5886] RSP: 002b:00007ff37ac1d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 169.824522][ T5886] RAX: ffffffffffffffda RBX: 00007ff37cfdcfa0 RCX: 00007ff37cdb5929 [ 169.832499][ T5886] RDX: 000000000000003b RSI: 0000000000000000 RDI: 0000200000000a00 [ 169.840472][ T5886] RBP: 00007ff37ce37b39 R08: 0000000000000000 R09: 0000000000000000 [ 169.848444][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.856416][ T5886] R13: 0000000000000000 R14: 00007ff37cfdcfa0 R15: 00007fff9a83c9f8 [ 169.864406][ T5886] [ 169.867427][ T5886] [ 169.869749][ T5886] Allocated by task 5886: [ 169.874069][ T5886] __kasan_kmalloc+0xb5/0xf0 [ 169.878667][ T5886] hfsplus_find_init+0x85/0x1c0 [ 169.883517][ T5886] hfsplus_listxattr+0x38c/0xb80 [ 169.888458][ T5886] listxattr+0x283/0x2e0 [ 169.892703][ T5886] path_listxattr+0xd9/0x1b0 [ 169.897293][ T5886] do_syscall_64+0x4c/0xa0 [ 169.901709][ T5886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 169.907609][ T5886] [ 169.909926][ T5886] The buggy address belongs to the object at ffff888022cfa000 [ 169.909926][ T5886] which belongs to the cache kmalloc-1k of size 1024 [ 169.924048][ T5886] The buggy address is located 536 bytes inside of [ 169.924048][ T5886] 1024-byte region [ffff888022cfa000, ffff888022cfa400) [ 169.937416][ T5886] The buggy address belongs to the page: [ 169.943050][ T5886] page:ffffea00008b3e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22cf8 [ 169.953197][ T5886] head:ffffea00008b3e00 order:3 compound_mapcount:0 compound_pincount:0 [ 169.961516][ T5886] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 169.969498][ T5886] raw: 00fff00000010200 ffffea0001e28800 0000000500000005 ffff888016841dc0 [ 169.978078][ T5886] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 169.986654][ T5886] page dumped because: kasan: bad access detected [ 169.993067][ T5886] page_owner tracks the page as allocated [ 169.998770][ T5886] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3537, ts 56710642580, free_ts 56679608669 [ 170.017864][ T5886] get_page_from_freelist+0x1b77/0x1c60 [ 170.023408][ T5886] __alloc_pages+0x1e1/0x470 [ 170.027992][ T5886] new_slab+0xc0/0x4b0 [ 170.032062][ T5886] ___slab_alloc+0x81e/0xdf0 [ 170.036648][ T5886] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 170.042017][ T5886] syslog_print+0xd6/0x840 [ 170.046438][ T5886] do_syslog+0x7f2/0x8f0 [ 170.050675][ T5886] __x64_sys_syslog+0x78/0x90 [ 170.055353][ T5886] do_syscall_64+0x4c/0xa0 [ 170.059764][ T5886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.065659][ T5886] page last free stack trace: [ 170.070324][ T5886] free_unref_page_prepare+0x637/0x6c0 [ 170.075786][ T5886] free_unref_page+0x94/0x280 [ 170.080465][ T5886] qlist_free_all+0x35/0x90 [ 170.084971][ T5886] kasan_quarantine_reduce+0x150/0x160 [ 170.090433][ T5886] __kasan_slab_alloc+0x2f/0xd0 [ 170.095286][ T5886] slab_post_alloc_hook+0x4c/0x380 [ 170.100394][ T5886] kmem_cache_alloc+0x100/0x290 [ 170.105235][ T5886] __alloc_file+0x25/0x240 [ 170.109643][ T5886] alloc_empty_file+0x90/0x180 [ 170.114406][ T5886] path_openat+0xfc/0x2f30 [ 170.118827][ T5886] do_filp_open+0x1b3/0x3e0 [ 170.123333][ T5886] do_sys_openat2+0x142/0x4a0 [ 170.128006][ T5886] __x64_sys_openat+0x135/0x160 [ 170.132859][ T5886] do_syscall_64+0x4c/0xa0 [ 170.137273][ T5886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.143167][ T5886] [ 170.145480][ T5886] Memory state around the buggy address: [ 170.151085][ T5886] ffff888022cfa100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.159128][ T5886] ffff888022cfa180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 170.167176][ T5886] >ffff888022cfa200: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.175212][ T5886] ^ [ 170.180047][ T5886] ffff888022cfa280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.188096][ T5886] ffff888022cfa300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 170.196158][ T5886] ================================================================== [ 170.204196][ T5886] Disabling lock debugging due to kernel taint [ 170.213226][ T5886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 170.220427][ T5886] CPU: 0 PID: 5886 Comm: syz.1.424 Tainted: G B 5.15.185-syzkaller #0 [ 170.229869][ T5886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.239904][ T5886] Call Trace: [ 170.243171][ T5886] [ 170.246082][ T5886] dump_stack_lvl+0x168/0x230 [ 170.250738][ T5886] ? show_regs_print_info+0x20/0x20 [ 170.255913][ T5886] ? load_image+0x3b0/0x3b0 [ 170.260393][ T5886] panic+0x2c9/0x7f0 [ 170.264270][ T5886] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.270493][ T5886] ? bpf_jit_dump+0xd0/0xd0 [ 170.274973][ T5886] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 170.280843][ T5886] ? _raw_spin_unlock+0x40/0x40 [ 170.285673][ T5886] ? hfsplus_uni2asc+0x591/0x1200 [ 170.290674][ T5886] check_panic_on_warn+0x80/0xa0 [ 170.295591][ T5886] ? hfsplus_uni2asc+0x591/0x1200 [ 170.300606][ T5886] end_report+0x6d/0xf0 [ 170.304739][ T5886] kasan_report+0x102/0x130 [ 170.309226][ T5886] ? hfsplus_uni2asc+0x591/0x1200 [ 170.314242][ T5886] hfsplus_uni2asc+0x591/0x1200 [ 170.319084][ T5886] hfsplus_listxattr+0x58b/0xb80 [ 170.324021][ T5886] ? hfsplus_getxattr+0xd0/0xd0 [ 170.328848][ T5886] ? user_path_at_empty+0x13e/0x190 [ 170.334029][ T5886] ? __kasan_kmalloc+0xcc/0xf0 [ 170.338774][ T5886] ? __kasan_kmalloc+0xb5/0xf0 [ 170.343526][ T5886] ? kvmalloc_node+0x84/0x130 [ 170.348191][ T5886] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 170.353539][ T5886] listxattr+0x283/0x2e0 [ 170.357765][ T5886] ? hfsplus_getxattr+0xd0/0xd0 [ 170.362594][ T5886] path_listxattr+0xd9/0x1b0 [ 170.367166][ T5886] ? getxattr+0x370/0x370 [ 170.371473][ T5886] ? lockdep_hardirqs_on+0x94/0x140 [ 170.376649][ T5886] do_syscall_64+0x4c/0xa0 [ 170.381043][ T5886] ? clear_bhb_loop+0x30/0x80 [ 170.385697][ T5886] ? clear_bhb_loop+0x30/0x80 [ 170.390349][ T5886] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.396221][ T5886] RIP: 0033:0x7ff37cdb5929 [ 170.400618][ T5886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.420203][ T5886] RSP: 002b:00007ff37ac1d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 170.428615][ T5886] RAX: ffffffffffffffda RBX: 00007ff37cfdcfa0 RCX: 00007ff37cdb5929 [ 170.436575][ T5886] RDX: 000000000000003b RSI: 0000000000000000 RDI: 0000200000000a00 [ 170.444522][ T5886] RBP: 00007ff37ce37b39 R08: 0000000000000000 R09: 0000000000000000 [ 170.452470][ T5886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.460417][ T5886] R13: 0000000000000000 R14: 00007ff37cfdcfa0 R15: 00007fff9a83c9f8 [ 170.468366][ T5886] [ 170.471555][ T5886] Kernel Offset: disabled [ 170.475865][ T5886] Rebooting in 86400 seconds..