last executing test programs: 7m28.410061056s ago: executing program 0 (id=1): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x40, 0x101000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x138, 0x1f8, 0x0, 0x98, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xfffffffb}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x5}, {0xffffffffffffffff, 0x5, 0x6}, 0x0, 0x5}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m24.772834892s ago: executing program 0 (id=7): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x101000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x138, 0x1f8, 0x0, 0x98, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xfffffffb}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x5}, {0xffffffffffffffff, 0x5, 0x6}, 0x0, 0x5}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m13.124142228s ago: executing program 0 (id=16): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x101000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x138, 0x1f8, 0x0, 0x98, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xfffffffb}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x5}, {0xffffffffffffffff, 0x5, 0x6}, 0x0, 0x5}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m9.28216786s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e657720757365723a73797a203030303030303030a72cfa0b303030303430393300"], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7m4.428945926s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3f9, 0x0, 0x70bd27, 0x25dfdbfd, {0x20001, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7m0.425433555s ago: executing program 2 (id=31): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x101000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x138, 0x1f8, 0x0, 0x98, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xfffffffb}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x5}, {0xffffffffffffffff, 0x5, 0x6}, 0x0, 0x5}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6m56.338567162s ago: executing program 32 (id=16): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) r1 = socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x101000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x400, 0x298, 0x138, 0x1f8, 0x0, 0x98, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0xfffffffb}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x4, 0x5}, {0xffffffffffffffff, 0x5, 0x6}, 0x0, 0x5}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x460) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6m53.918550351s ago: executing program 2 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) read$dsp(0xffffffffffffffff, &(0x7f0000000240)=""/110, 0x6e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 6m51.507531783s ago: executing program 2 (id=40): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) fanotify_init(0x40, 0x101000) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x7fff, 0xf, "0100216a003067ab0ad4e2670300"}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6m48.45816027s ago: executing program 2 (id=45): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5a08, &(0x7f0000000540)={0x0, 0x69ee, 0x4, 0x5, 0x50}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r5}}) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x4, 0x10d, 0x0, r0}, &(0x7f000001a4c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, &(0x7f000001a400)={0x2e, 0x20, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x44}, 0x0, r5, '\x00', {0x4, 0x32d, 0x0, &(0x7f0000019400)=@buf_max_buf="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"}}, &(0x7f000001a480)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$P9_RREADDIR(r8, &(0x7f00000005c0)={0x6e, 0x29, 0x2, {0x2, [{{0x80, 0x0, 0x7}, 0x7ff, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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") r10 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, 0x0) write$nci(r9, 0x0, 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 6m32.853096077s ago: executing program 33 (id=45): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5a08, &(0x7f0000000540)={0x0, 0x69ee, 0x4, 0x5, 0x50}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x4d2c11947fe9151f, {0x0, r5}}) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000019080)={0x0, 0x597f, 0x1, 0x4, 0x10d, 0x0, r0}, &(0x7f000001a4c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2067, 0x8000, 0x3, 0x17, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xce5e, 0x10, 0x2, 0x2c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xecae, 0x200, 0x3, 0x11a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88d9, 0x800, 0x0, 0x3bd, 0x0, r0}}], 0x4, &(0x7f000001a400)={0x2e, 0x20, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x44}, 0x0, r5, '\x00', {0x4, 0x32d, 0x0, &(0x7f0000019400)=@buf_max_buf="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"}}, &(0x7f000001a480)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/ieee80211/phy0/aql_enable\x00', 0x2, 0x0) write$P9_RREADDIR(r8, &(0x7f00000005c0)={0x6e, 0x29, 0x2, {0x2, [{{0x80, 0x0, 0x7}, 0x7ff, 0x80, 0x21, './debug/ieee80211/phy0/aql_enable'}]}}, 0x44) pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$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") r10 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r10, 0xc038586a, 0x0) write$nci(r9, 0x0, 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) 10.819611846s ago: executing program 5 (id=947): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc6000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.062376727s ago: executing program 5 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='configfs\x00', 0x1a28000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8000000000000000, 0x8, 0x2, 0xffffffffffffffff, 0x8000000000000002, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 6.754024491s ago: executing program 5 (id=963): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) eventfd(0xf7b2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.623581434s ago: executing program 4 (id=964): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x44, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x2, 0x1}, 0x8, 0x800, 0xb60, 0x0, 0xfffffffe, 0x0, 0x0}) 6.525820893s ago: executing program 6 (id=965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860c"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) r4 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 6.434801059s ago: executing program 4 (id=966): ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x18040, &(0x7f0000000100)={[{@nolazytime}, {@dax_never}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@nouuid}]}, 0x4, 0x9736, &(0x7f0000012d80)="$eJzs3Am4pnPhuPH3zBj7ZAyVlJqKaJE1S5SZwQyFZInSgiwpS0lFK5WUNkraF8mSEoVCWdqV7C2U7JUskRbbMP/rzJxhjNvEv9/vp9z3fV3nvO/7vM/znO/7/TzLOZqrradsPnkwmH8wswmDOTvj0qnTxl28yY1HbL/o0SudcOvB911x6Ykjj5NGHicPBoNRI28PzVw2fnDiSaMG88xYfm8LLbDg0NjBYOWRlyP7Gaw+82HsBbPWmz5Hcw506N5vB878mtEiwz9i+MmXD97/8MFgMG627YcGg6F97/dBpW09aeqUe63ucRu2GjPyfPaveWd+jT17MBh78oCPj9nXHXoYPtLwz9z3GaeP2eRh+Nn/dW09aeqGc/gPn4ujR5atPnyOz3kOGpvzOL9+mW3XHJnCGcfbYDB8ibvPufJf0daTpmw0eODr/OCItc46cPrM6+Z8g5k3igUGg8GCI9fXhR9ul/r3mjR5lRn37FmvR9hnHcv70nHx9Vced/fwTXowGCw2GIzfYNa9oKqqqv47mjR5lXXh/j//3O7/xx+/5Mnd/6uqqv5723DS5FWG7/Vz3P8Xntv9f88lf/bumf/tf+LqM7e6++H9EFVVVfWQmrIh3v/Hze3+v/q6523U/b+qquq/t802nnH/X3iO+//ic7v/b3PcWkuNrDfr94a7Ztvl0Gz/e8Kdsy0fPdvyO2ZbPma2/cy+/ryzLb9ttuXzDb8H608YDMbP+veC0+5dPH7C8Hsjy2+fbfnEe/+dztLrzbZ80mzLp8y2fPLIWIeXT51t+dTZ1t9gLlNdVVX1H9Nmq0xZdzDbv7MfWbzErPfp/v/9Uy5b/uEab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf13dveNp54+GAyGBoPBqMFg2mDk+eyPg+nTp08ffn38meef/7AN9D+joTMunTpt3MWb3HjE9osevdIJtx587yz91/bf/wnq32nYf/5jJgwGu2/5cA+lHoY6/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c3TeeevrIMTBqMJg2GHm+76zHUw562ctHVl1zqxNuPvTeLZeeuMvIszMunTptl4dh7A9DQ8OfddzFm9x4xPaLHr3SCbce/Ag4e/77P0H9O83w32VoMBg5v8cNn8ubTNpsi+UGg8GhN5+w1WqDe95bY/i9tcaPHoyeselyM76vvzTveN8NZj5OHP62+D37OH7G/jecftjooTkGMVvPO+OqI16z9a2rzvm47AN/jlGznhx++bdvmT59+vT7LBxp/gfYeNb+Z32WOc/zkbEvNzz2Ffba7fUrvHGfty6/y27b7bzjzjvuvtIqa6y62sorrbbmc1bYaZddd1xx5vcHmLMJM76v+2DmbOE55+zGSbPP2Zyf7YHmbMLc52zGHqe9dWiLWXM2z0Ocs3XnPmcTdhn5QUtPHDPYdsbUDA0GS683ZrD38IuV5hsMll5/ZN0lhtdde/yoweCgez/o8LP57jkGh/YdXmfrKZtPvndk9/+E97tO32fFpSeOPE4aeZw8c4gTBvceiuMHJ540angu7jPNCy2w4NDYwWDlkZcj+xmsOfLul2atN32O5hzo0L3fDpz5NaNFhncy/OS1K556yfC5OMf2/xv9f13/7+e1xtA9EzU08jWyzkyvSVM3vPdnzZiG4bkbPbJs9WGTOefsf7L7jXfCPINxcxnvlA0nrzK8eI75n7UJHl83LXPW22YeWxNXn7nV3f/fKDTehecy3g0n4XgXntt4j3n7uSfN3NX/2HjnuNZtNOP7xAdzrRvM/Vo3mnaw4zlLzXmte+EDD/E+5/GsOZpvjpUe6Fq39ydX3nd4/xPnfq3baHjsY+5zrRs1GCy97qxr3fCFb8qYwUHDL1YefjF1zODo4RerzHixwODM4RfPfvUeu+4wvGCDWXOy4vB+J44fmuF+1urXLTv949Onrzcylonj7zvWkeNjwuz380njZ07mrG1n7Xd41Vn7vfaxM9+bMrLfSQ9hv7O2pfHevMjM96aO7HfyHPsdM5f9ztr2fufDckP3XLge4HozZY7rzcjfOLN+3H2+5p35NfbswWDsyeQ7x7r/8ppJ5+/8cxnvpMmrrDs8vjnO33sORzp/z5168fC9YuxgMFhsMBi/wayxP8SGHmi888x9vJNhvPPMbbwXfnW3jf8HxjuYbbz3Oc623mzmsbLByHE29SEcv7O2nfM6NmbGuzMv+xs8mOvYhPtdx/YbPWqOyZ6tB/qdbQdYf+bzJe79PffSbxw1a+7HzLHff/U722yfZQiuY+Pm+Ht+1AZXDIZozvc9Zu3zhg6Z+5yPGdz3b4tZcz5r27nN+dQHM+dPmPucP9jfk5d76sz3x8wx/tnnfNMPPf6Ds+Z83jn2+6/mfOrc7x33n/OJgzE05yveMXPe5nY9faA5n7XtrDkf/ohrjZ9nsP7wPWtkzqc8mDlf4n/mOF8Q1p/5fMd7Fp12xAkvmTXnc87xv5rzKQ91zifcc5wvPeO9p4wazDvvYO/t9tprz5Vmfp/1cuWZ3/ladNulM+d5bvfSBzKate3czov1HozRuAdlNPSvjJac54GM7j21vrLHno/5/70WrfdQjQZ8LZrvqJnzNrffix5ozi8+6j5zfp/74OKzbT/n36GbbTzj9+6F57gPztoE74OnnbLRAbN2ObLZXXMMc9Z99c7Zlo+ebfkdsy0fM9t+Zl9/3tmW3zbb8uGPMO9s689inTD8N+/I8mn3rj5++JenCSPLb59t+cR7t116vdmWT5pt+ZTZlk++99BYeupsy6fOtv4Gg4fYrP8mvcucF/l6sPXff93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7+4+/gs8fOOoh6fOf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cXffeOrpI8fAqMFg2mDm86GRx8G+Q5vesM7w42AwGLP6sdM3fbjH+zA3dMalU6eNu3iTG4/YftGjVzrh1oMfAWfPf/8nqH+nGf67DA0GI+f3uF0Gg8EmkzbbYrnBYLDp9GNXHzW4570lht9be/yoweCgofvsYL571hnad3idradsPnkwmH9kjQn3+6H3O4/us+LSE0ceJ408Tp55fZowuPd4HT848aRRg3lmLL+3hRZYcGjsYLDyyMuR/QxWn/kw9oJZ602fozkHOnTvtwNnfs1okeEfMfxk752nPnF4rubY/j+mWdfqXUb9y1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7uHpp/R8sjrUTd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vf3UP3X+B/ZRz18NT57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zF3X3jqaePHAOjBoNpg5nPh/YdeRwMHXfi00cOkTH7XHTkYQ/3eB/mhs64dOq0cRdvcuMR2y969Eon3HrwI+Ds+e//BPXvNMN/l6HBYOT8HrfLYDDYZNJmWyw3GAwOO/KifUYN7nlvieH31h4/ajA4aOg+O5jvnnWG9h1eZ+spm08eDOYfWWPC/X7o/c6j+6y49MSRx0kjj5NnXp8mDO49XscPTjxp1GCeGcvvbaEFFhwaOxisPPJyZD+D1Wc+jL1g1nrT52jOgQ7d++3AmV8zWmT4Rww/2X/hS48bnqs5tv+Pada1epdR/3LVzn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIXd/eNp54+cgyMGgymDWY+HzXyOLTvNVe/c4vhx+HXi25wwKUP93gf5obOuHTqtHEXb3LjEdsvevRKJ9x68CPg7Pnv/wT17zTsP/8xEwaD3bd8uIdSD0Od/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/u7htPPX3k6ah7l47at+MCGzrj0qnTxl28yY1HbL/o0SudcOvBD/eA/t0ewH+//DGL/7vzxyz+78kfs/i/N3/M4r9//pjF/335Yxb/A/LHLP7vzx+z+H8gf8zif2D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv+D8scs/gfnj1n8P5Y/ZvH/eP6Yxf+Q/DGL/yfyxyz+h+aPWfw/mT9m8f9U/pjF/9P5Yxb/z+SPWfw/mz9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/7D8MYv/l/PHLP6H549Z/L+SP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/r+aPWfyPyR+z+H8tf8zi//X8MYv/sfljFv9v5I9Z/I/LH7P4H58/ZvH/Zv6Yxf9b+WMW/xPyxyz+J+aPWfxPyh+z+H87f8zi/538MYv/yfljFv9T8scs/qfmj1n8v5s/ZvH/Xv6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/L+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv+z8scs/j/LH7P4/zx/zOJ/dv6Yxf8X+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/y/zxyz+v8ofs/j/On/M4v+b/DGL/8X5Yxb/S/LHLP6/zR+z+P8uf8zif2n+mMX/9/ljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/8f8scs/n/MH7P4/yl/zOJ/bf6Yxf/P+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bx/0v+mMX/pvwxi//N+WMW/7/mj1n8b8kfs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/2n5Yxb/u/LHLP53549Z/Kfnj0n8Rw/yxyz+Q/ljFv9R+WMW/9H5Yxb/efLHLP5j8scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/7Fz+s/zfzyu/9As/o/q/Mcs/ovkj1n8x+WPWfwXzR+z+I/PH7P4L5Y/ZvFfPH/M4v/o/DGL/2Pyxyz+j80fs/gvkT9m8X9c/pjFf8n8MYv/4/PHLP5PyB+z+C+VP2bxf2L+mMX/SfljFv8J+WMW/yfnj1n8n5L//Zr1T2AN/k/NH7Oc/0vnj1n8l8kfs/g/LX/M4r9s/pjFf7n8MYv/0/PHLP7PyB+z+D8zf8zi/6z8MYv/8vljFv9n549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/n5I9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/7n5Yxb/tfLHLP5r549Z/J+XP2bxf37+mMV/nfwxi//E/DGL/6T8MYv/5Pwxi/+6+WMW//Xyxyz+6+ePWfyn5I9Z/Keq/Ec/6DUt/huo/B98Fv8N88cs/i/IH7P4vzB/zOK/Uf6YxX/j/DGL/yb5Yxb/F+WPWfw3zR+z+L84f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+L8kfs/hvlT9m8d86f8zi/9L8MYv/y/LHLP7b5I9Z/F+eP2bxf0X+mMX/lfljFv9X5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/q/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P4vyZ/zOK/S/6Yxf+1+WMW/9flj1n8d80fs/jvlj9m8d89f8ziv0f+mMX/9fljFv835I9Z/PfMH7P4vzF/zOK/V/6Yxf9N+WMW/zfnj1n835I/ZvHfO3/M4r9P/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjF/535Yxb/d+WPWfz3zR+z+O+XP2bxf3f+mMX/PfljFv/35o9Z/PfPH7P4vy9/zOJ/QP6Yxf/9+WMW/w/kj1n8D8wfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4n9Q/pjF/+D8MYv/x/LHLP4fzx+z+B+SP2bx/0T+mMX/0Pwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4H5Y/ZvH/cv6Yxf/w/DGL/1fyxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOL/1fwxi/8x+WMW/6/lj1n8v54/ZvE/Nn/M4v+N/DGL/3H5Yxb/4/PHLP7fzB+z+H8rf8zif0L+mMX/xPwxi/9J+WMW/2/nj1n8v5M/ZvE/OX/M4n9K/pjF/9T8MYv/d/PHLP7fyx+z+J+WP2bxPz3/GR0y+r6vLf5n5I9Z/M/MH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/mflj1n8f5Y/ZvH/ef6Yxf/s/DGL/y/yxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/X+aPWfx/lT9m8f91/pjF/zf5Yxb/i/PHHnH+x7D/Jfljjzj/Bzj/f5s/ZvH/Xf6Yxf/S/DGL/+/zxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/P+SPWfz/mD9m8f9T/pjF/9r8MYv/n/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4v+X/DGL/035Yxb/m/PHLP5/zR+z+N+SP2bx/1v+mMX/7/ljFv9/5I9Z/P+ZP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP7T8scs/nflj1n8784fs/hPzx+T+M8zyB+z+A/lj1n8R+WPWfxH549Z/OfJH7P4j8kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfzH5o9Z/B+VP2bxXyR/zOI/Ln/M4r9o/pjFf3z+mMV/sfwxi//i+WMW/0fnj1n8H5M/ZvF/bP6YxX+J/DGL/+Pyxyz+S+aPWfwfnz9m8X9C/pjFf6n8MYv/E/PHLP5Pyh+z+E/IH7P4Pzl/zOL/lPwxi/9T88cs/kvnj1n8l8kfs/g/LX/M4r9s/pjFf7n8MYv/0/PHLP7PyB+z+D8zf8zi/6z8MYv/8vljFv9n549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/n5I9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/7n5Yxb/tfLHLP5r549Z/J+XP2bxf37+mMV/nfwxi//E/DGL/6T8MYv/5Pwxi/+6+WMW//Xyxyz+6+ePWfyn5I9Z/Kfmj1n8N8gfs/hvmD9m8X9B/pjF/4X5Yxb/jYT+6zyIdSz+Gwv9H0wW/03yxyz+L8ofs/hvmj9m8X/x4Pz8IYv/Zp3/mMV/8/wxi/8W+WMW/y3zxyz+L8kfs/hvlT9m8d86f8zi/9L8MYv/y/LHLP7b5I9Z/F+eP2bxf0X+mMX/lfljFv9X5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/q/DGL/w75Yxb/HfPHLP475Y9Z/HfOH7P4vyZ/zOK/S/6Yxf+1+WMW/9flj1n8d80fs/jvlj9m8d89f8ziv0f+mMX/9fljFv835I9Z/PfMH7P4vzF/zOK/V/6Yxf9N+WMW/zfnj1n835I/ZvHfO3/M4r9P/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjF/535Yxb/d+WPWfz3zR+z+O+XP2bxf3f+mMX/PfljFv/35o9Z/PfPH7P4vy9/zOJ/QP6Yxf/9+WMW/w/kj1n8D8wfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4n9Q/pjF/+D8MYv/x/LHLP4fzx+z+B+SP2bx/0T+mMX/0Pwxi/8n88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4H5Y/ZvH/cv6Yxf/w/DGL/1fyxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOL/1fwxi/8x+WMW/6/lj1n8v54/ZvE/Nn/M4v+N/DGL/3H5Yxb/4/PHLP7fzB+z+H8rf8zif0L+mMX/xPwxi/9J+WMW/2/nj1n8v5M/ZvE/OX/M4n9K/pjF/9T8MYv/d/PHLP7fyx+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL//fzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9W/pjF/2f5Yxb/n+ePWfzPzh+z+P8if8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bx/2X+mMX/V/ljFv9f549Z/H+TP2bxvzh/zOJ/Sf6Yxf+3+WMW/9/lj1n8L80fs/j/Pn/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8f9D/pjF/4/5Yxb/P+WPWfyvzR+z+P85f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+f8kfs/jflD9m8b85f8zi/9f8MYv/LfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8ziPy1/zOJ/V/6Yxf/u/DGL//T8MYn/mEH+mMV/KH/M4j8qf8ziPzp/zOI/T/6YxX9M/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziPzZ/zOL/qPwxi/8i+WMW/3H5Yxb/RfPHLP7j88cs/ovlj1n8F88fs/g/On/M4v+Y/DGL/2Pzxyz+S+SPWfwflz9m8V8yf8zi//j8MYv/E/LHLP5L5Y9Z/J+YP2bxf1L+mMV/Qv6Yxf/J+WMW/6fkj1n8n5o/ZvFfOn/M4r9M/pjF/2n5Yxb/ZfPHLP7L5Y9Z/J+eP2bxf0b+mMX/mfljFv9n5Y9Z/JfPH7P4Pzt/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4Pyd/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7PzR+z+K+VP2bxXzt/zOL/vPwxi//z88cs/uvkj1n8J+aPWfwn5Y9Z/Cfnj1n8180fs/ivlz9m8V8/f8ziPyV/zOI/NX/M4r9B/pjFf8P8MYv/C/LHLP4vzB+z+G+UP2bx3zh/zOK/Sf6Yxf9F+WMW/03zxyz+L84fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9L8scs/lvlj1n8t84fs/i/NH/M4v+y/DGL/zb5Yxb/l+ePWfxfkT9m8X9l/pjF/1X5Yxb/bfPHLP7b5Y9Z/LfPH7P4vzp/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP6vyR+z+O+SP2bxf23+mMX/dfljFv9d88cs/rvlj1n8d88fs/jvkT9m8X99/pjF/w35Yxb/PfPHLP5vzB+z+O+VP2bxf1P+mMX/zfljFv+35I9Z/PfOH7P475M/ZvF/a/6Yxf9t+WMW/7fnj1n835E/ZvF/Z/6Yxf9d+WMW/33zxyz+++WPWfzfnT9m8X9P/pjF/735Yxb//fPHLP7vyx+z+B+QP2bxf3/+mMX/A/ljFv8D88cs/h/MH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4H5Q/ZvE/OH/M4v+x/DGL/8fzxyz+h+SPWfw/kT9m8T80f8zi/8n8MYv/p/LHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP6H5Y9Z/L+cP2bxPzx/zOL/lfwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+H81f8zif0z+mMX/a/ljFv+v549Z/I/NH7P4fyN/zOJ/XP6Yxf/4/DGL/zfzxyz+38ofs/ifkD9m8T8xf8zif1L+mMX/2/ljFv/v5I9Z/E/OH7P4n5I/ZvE/NX/M4v/d/DGL//fyxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/j/NH7P4n5U/ZvH/Wf6Yxf/n+WMW/7Pzxyz+v8gfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfx/mT9m8f9V/pjF/9f5Yxb/3+SPWfwvzh+z+F+SP2bx/23+mMX/d/ljFv9L88cs/r/PH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8/5A/ZvH/Y/6Yxf9P+WMW/2vzxyz+f84fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9f8scs/jflj1n8b84fs/j/NX/M4n9L/pjF/2/5Yxb/v+ePWfz/kT9m8f9n/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/hPyx+z+N+VP2bxvzt/zOI/PX9M4j/vIH/M4j+UP2bxH5U/ZvEfnT9m8Z8nf8ziPyZ/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvEfmz9m8X9U/pjFf5H8MYv/uPwxi/+i+WMW//H5Yxb/xfLHLP6L549Z/B+dP2bxf0z+mMX/sfljFv8l8scs/o/LH7P4L5k/ZvF/fP6Yxf8J+WMW/6Xyxyz+T8wfs/g/KX/M4j8hf8zi/+T8MYv/U/LHLP5PzR+z+C+dP2bxXyZ/zOL/tPwxi/+y+WMW/+Xyxyz+T88fs/g/I3/M4v/M/DGL/7Pyxyz+y+ePWfyfnT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfyfkz9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/+fmj1n818ofs/ivnT9m8X9e/pjF//n5Yxb/dfLHLP4T88cs/pPyxyz+k/PHLP7r5o9Z/NfLH7P4r58/ZvGfkj9m8Z+aP2bx3yB/zOK/Yf6Yxf8F+WMW/xfmj1n8N8ofs/hvnD9m8d8kf8zi/6L8MYv/pvljFv8X549Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/yX5Yxb/rfLHLP5b549Z/F+aP2bxf1n+mMV/m/wxi//L88cs/q/IH7P4vzJ/zOL/qvwxi/+2+WMW/+3yxyz+2+ePWfxfnT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/9fkj1n8d8kfs/i/Nn/M4v+6/DGL/675Yxb/3fLHLP67549Z/PfIH7P4vz5/zOL/hvwxi/+e+WMW/zfmj1n898ofs/i/KX/M4v/m/DGL/1vyxyz+e+ePWfz3yR+z+L81f8zi/7b8MYv/2/PHLP7vyB+z+L8zf8zi/678MYv/vvljFv/98scs/u/OH7P4vyd/zOL/3vwxi//++WMW//flj1n8D8gfs/i/P3/M4v+B/DGL/4H5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfwPyh+z+B+cP2bx/1j+mMX/4/ljFv9D8scs/p/IH7P4H5o/ZvH/ZP6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/8Pyxyz+X84fs/gfnj9m8f9K/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8v5o/ZvE/Jn/M4v+1/DGL/9fzxyz+x+aPWfy/kT9m8T8uf8zif3z+mMX/m/ljFv9v5Y9Z/E/IH7P4n5g/ZvE/KX/M4v/t/DGL/3fyxyz+J+ePWfxPyR+z+J+aP2bx/27+mMX/e/ljFv/T8scs/qfnj1n8z8gfs/ifmT9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/n+aPWfzPyh+z+P8sf8zi//P8MYv/2fljFv9f5I9Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/r/MH7P4/yp/zOL/6/wxi/9v8scs/hfnj1n8L8kfs/j/Nn/M4v+7/DGL/6X5Yxb/3+ePWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP5/yB+z+P8xf8zi/6f8MYv/tfljFv8/549Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/y/5Yxb/m/LHLP43W/0XmPvbFv+/Wv3/RRb/W/LHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjFf1r+mMX/rvwxi//d+WMW/+n5YxL/+Qb5Yxb/ofwxi/+o/DGL/+j8MYv/PPljFv8x+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/9j8MYv/o/LHLP6L5I9Z/Mflj1n8F80fs/iPzx+z+C+WP2bxXzx/zOL/6Pwxi/9j8scs/o/NH7P4L5E/ZvF/XP6YxX/J/DGL/+Pzxyz+T8gfs/gvlT9m8X9i/pjF/0n5Yxb/CfljFv8n549Z/J+SP2bxf2r+mMV/6fwxi/8y+WMW/6flj1n8l80fs/gvlz9m8X96/pjF/xn5Yxb/Z+aPWfyflT9m8V8+f8zi/+z8MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8zi/5z8MYv/avljFv/V88cs/mvkj1n818wfs/g/N3/M4r9W/pjFf+38MYv/8/LHLP7Pzx+z+K+TP2bxn5g/ZvGflD9m8Z+cP2bxXzd/zOK/Xv6YxX/9/DGL/5T8MYv/1Pwxi/8G+WMW/w3zxyz+L8gfs/i/MH/M4r9R/pjFf+P8MYv/JvljFv8X5Y9Z/DfNH7P4vzh/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP4vyR+z+G+VP2bx3zp/zOL/0vwxi//L8scs/tvkj1n8X54/ZvF/Rf6Yxf+V+WMW/1flj1n8t80fs/hvlz9m8d8+f8zi/+r8MYv/DvljFv8d88cs/jvlj1n8d84fs/i/Jn/M4r9L/pjF/7X5Yxb/1+WPWfx3zR+z+O+WP2bx3z1/zOK/R/6Yxf/1+WMW/zfkj1n898wfs/i/MX/M4r9X/pjF/035Yxb/N+ePWfzfkj9m8d87f8ziv0/+mMX/rfljFv+35Y9Z/N+eP2bxf0f+mMX/nfljFv935Y9Z/PfNH7P475c/ZvF/d/6Yxf89+WMW//fmj1n8988fs/i/L3/M4n9A/pjF//35Yxb/D+SPWfwPzB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+H80f8zif1D+mMX/4Pwxi//H8scs/h/PH7P4H5I/ZvH/RP6Yxf/Q/DGL/yfzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/gflj9m8f9y/pjF//D8MYv/V/LHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4v/V/DGL/zH5Yxb/r+WPWfy/nj9m8T82f8zi/438MYv/cfljFv/j88cs/t/MH7P4fyt/zOJ/Qv6Yxf/E/DGL/0n5Yxb/b+ePWfy/kz9m8T85f8zif0r+mMX/1Pwxi/9388cs/t/LH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif1b+mMX/Z/ljFv+f549Z/M/OH7P4/yJ/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/Zf6Yxf9X+WMW/1/nj1n8f5M/ZvG/OH/M4n9J/pjF/7f5Yxb/3+WPWfwvzR+z+P8+f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bx/0P+mMX/j/ljFv8/5Y9Z/K/NH7P4/zl/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP5/yR+z+N+UP2bxvzl/zOL/1/wxi/8t+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOI/LX/M4n9X/pjF/+78MYv/9Pwxif/8g/wxi/9Q/pjFf1T+mMV/dP6YxX+e/DGL/5j8MYv/vPljFv/58scs/vPnj1n8F8gfu4//tQs93MP593sA/wXzxyzn/0L5Yxb/hfPHLP5j88cs/o/KH7P4L5I/ZvEflz9m8V80f8ziPz5/zOK/WP6YxX/x/DGL/6Pzxyz+j8kfs/g/Nn/M4r9E/pjF/3H5Yxb/JfPHLP6Pzx+z+D8hf8ziv1T+mMX/ifljFv8n5Y9Z/Cfkj1n8n5w/ZvF/Sv6Yxf+p+WMW/6Xzxyz+y+SPWfyflj9m8V82f8ziv1z+mMX/6fljFv9n5I9Z/J+ZP2bxf1b+mMV/+fwxi/+z88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9z8scs/qvlj1n8V88fs/ivkT9m8V8zf8zi/9z8MYv/WvljFv+188cs/s/LH7P4Pz9/zOK/Tv6YxX9i/pjFf1L+mMV/cv6YxX/d/DGL/3r5Yxb/9fPHLP5T8scs/lPzxyz+G+SPWfw3zB+z+L8gf8zi/8L8MYv/RvljFv+N88cs/pvkj1n8X5Q/ZvHfNH/M4v/i/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4vyR/zOK/Vf6YxX/r/DGL/0vzxyz+L8sfs/hvkz9m8X95/pjF/xX5Yxb/V+aPWfxfNXf/+f7Xx/UfmsV/285/zOK/Xf6YxX/7/DGL/6vzxyz+O+SPWfx3zB+z+O+UP2bx3zl/zOL/mvwxi/8u+WMW/9fmj1n8X5c/ZvHfNX/M4r9b/pjFf/f8MYv/HvljFv/X549Z/N+QP2bx3zN/zOL/xvwxi/9e+WMW/zflj1n835w/ZvF/S/6YxX/v/DGL/z75Yxb/t+aPWfzflj9m8X97/pjF/x35Yxb/d+aPWfzflT9m8d83f8ziv1/+mMX/3fljFv/35I9Z/N+bP2bx3z9/zOL/vvwxi/8B+WMW//fnj1n8P5A/ZvE/MH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4v/R/DGL/0H5Yxb/g/PHLP4fyx+z+H88f8zif0j+mMX/E/ljFv9D88cs/p/MH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOJ/WP6Yxf/L+WMW/8Pzxyz+X8kfs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/9X88cs/sfkj1n8v5Y/ZvH/ev6Yxf/Y/DGL/zfyxyz+x+WPWfyPzx+z+H8zf8zi/638MYv/CfljFv8T88cs/iflj1n8v50/ZvH/Tv6Yxf/k/DGL/yn5Yxb/U/PHLP7fzR+z+H8vf8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4v/T/DGL/1n5Yxb/n+WPWfx/nj9m8T87f8zi/4v8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/l/ljFv9f5Y9Z/H+dP2bx/03+mMX/4vwxi/8l+WMW/9/mj1n8f5c/ZvG/NH/M4v/7/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/w/5Yxb/P+aPWfz/lD9m8b82f8zi/+f8MYv/dfljFv/r88cs/jfkj1n8b8wfs/j/JX/M4n9T/pjF/+b8MYv/X/PHLP635I9Z/P+WP2bx/3v+mMX/H/ljFv9/5o9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/tPwxi/9d+WMW/7vzxyz+0/PHJP4LDPLHLP5D+WMW/1H5Yxb/0fljFv958scs/mPyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/sfljFv9H5Y9Z/BfJH7P4j8sfs/gvmj9m8R+fP2bxXyx/zOK/eP6Yxf/R+WMW/8fkj1n8H5s/ZvFfIn/M4v+4/DGL/5L5Yxb/x+ePWfyfkD9m8V8qf8zi/8T8MYv/k/LHLP4T8scs/k+2+D/ED2nxf4rF/yFm8X9q/pjFf+n8MYv/MvljFv+nWf2v3Gaub1v8l7X6/4ss/svlj1n8n54/ZvF/Rv6Yxf+Z+WMW/2flj1n8l88fs/g/O3/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/g/J3/M4r9a/pjFf/X8MYv/GvljFv8188cs/s/NH7P4r5U/ZvFfO3/M4v+8/DGL//Pzxyz+6+SPWfwn5o9Z/Cflj1n8J+ePWfzXzR+z+K+XP2bxXz9/zOI/JX/M4j81f8ziv0H+mMV/w/wxi/8L8scs/i/MH7P4b5Q/ZvHfOH/M4r9J/pjF/0X5Yxb/TfPHLP4vzh+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/0vyxyz+W+WPWfy3zh+z+L80f8zi/7L8MYv/NvljFv+X549Z/F+RP2bxf2X+mMX/VfljFv9t88cs/tvlj1n8t88fs/i/On/M4r9D/pjFf8f8MYv/TvljFv+d88cs/q/JH7P475I/ZvF/bf6Yxf91+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bxf33+mMX/DfljFv8988cs/m/MH7P475U/ZvF/U/6Yxf/N+WMW/7fkj1n8984fs/jvkz9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8X9n/pjF/135Yxb/ffPHLP775Y9Z/N+dP2bxf0/+mMX/vfljFv/988cs/u/LH7P4H5A/ZvF/f/6Yxf8D+WMW/wPzxyz+H8wfs/h/KH/M4v/h/DGL/0fyxyz+H80fs/gflD9m8T84f8zi/7H8MYv/x/PHLP6H5I9Z/D+RP2bxPzR/zOL/yfwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/oflj1n8v5w/ZvE/PH/M4v+V/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4fzV/zOJ/TP6Yxf9r+WMW/6/nj1n8j80fs/h/I3/M4n9c/pjF//j8MYv/N/PHLP7fyh+z+J+QP2bxPzF/zOJ/Uv6Yxf/b+WMW/+/kj1n8T84fs/ifkj9m8T81f8zi/938MYv/9/LHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/iflT9m8f9Z/pjF/+f5Yxb/s/PHLP6/yB+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/H+ZP2bx/1X+mMX/1/ljFv/f5I9Z/C/OH7P4X5I/ZvH/bf6Yxf93+WMW/0vzxyz+v88fu6//mId7OP9+D+B/Wf6Y5fy/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8/5A/ZvH/Y/6Yxf9P+WMW/2vzxyz+f84fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9f8scs/jflj1n8b84fs/j/NX/M4n9L/pjF/2/5Yxb/v+ePWfz/kT9m8f9n/pjF/9Y5/Of5vx7Xf2gW/9s6/zGL/+35Yxb/O/LHLP535o9Z/Kflj1n878ofs/jfnT9m8Z+ePybxX3CQP2bxH8ofs/iPyh+z+I/OH7P4z5M/ZvEfkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxx75/vPf81b+9++R7z+jBRfOH7P4j80fs/g/Kn/M4r9I/pjFf1z+mMV/0fwxi//4/DGL/2L5Yxb/xfPHLP6Pzh+z+D8mf8zi/9j8MYv/EvljFv/H5Y9Z/JfMH7P4Pz5/zOL/hPwxi/9S+WMW/yfmj1n8n5Q/ZvGfkD9m8X9y/pjF/yn5Yxb/p+aPWfyXzh+z+C+TP2bxf1r+mMV/2fwxi/9y+WMW/6fnj1n8n5E/ZvF/Zv6Yxf9Z+WMW/+Xzxyz+z84fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+z8kfs/ivpvSf/q5/tYbFf3Wl/7/O4r9G/pjFf838MYv/c/PHLP5r5Y9Z/NfOH7P4Py9/zOL//Pwxi/86+WMW/4n5Yxb/SfljFv/J+WMW/3Xzxyz+6+WPWfzXzx+z+E/JH7P4T80fs/hvkD9m8d8wf8zi/4L8MYv/C/PHLP4b5Y9Z/DfOH7P4b5I/ZvF/Uf6YxX/T/DGL/4vzxyz+m+WPWfw3zx+z+G+RP2bx3zJ/zOL/kvwxi/9W+WMW/63zxyz+L80fs/i/LH/M4r9N/pjF/+X5Yxb/V+SPWfxfmT9m8X9V/pjFf9v8MYv/dvljFv/t88cs/q/OH7P475A/ZvHfMX/M4r9T/pjFf+f8MYv/a/LHLP675I9Z/F+bP2bxf13+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfxfnz9m8X9D/pjFf8/8MYv/G/PHLP575Y9Z/N+UP2bxf3P+mMX/LfljFv+988cs/vvkj1n835o/ZvF/W/6Yxf/t+WMW/3fkj1n835k/ZvF/V/6YxX/f/DGL/375Yxb/d+ePWfzfkz9m8X9v/pjFf//8MYv/+/LHLP4H5I9Z/N+fP2bx/0D+mMX/wPwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/9H88cs/gflj1n8D84fs/h/LH/M4v/x/DGL/yH5Yxb/T+SPWfwPzR+z+H8yf8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/YfljFv8v549Z/A/PH7P4fyV/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP5fzR+z+B+TP2bx/1r+mMX/6/ljFv9j88cs/t/IH7P4H5c/ZvE/Pn/M4v/N/DGL/7fyxyz+J+SPWfxPzB+z+J+UP2bx/3b+mMX/O/ljFv+T88cs/qfkj1n8T80fs/h/N3/M4v+9/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/mflj1n8f5Y/ZvH/ef6Yxf/s/DGL/y/yxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/Cufjv+38xrv/QLP4Xdf5jFv9f5o9Z/H+VP2bx/3X+mMX/N/ljFv+L88cs/pfkj1n8fzu7/1AHw6ws/r+LHLP4X5o/ZvH/ff6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4v+H/DGL/x/zxyz+f8ofs/hfmz9m8f9z/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8/5I/ZvG/KX/M4n9z/pjF/6/5Yxb/W/LHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjFf1r+mMX/rvwxi//d+WMW/+n5YxL/hQb5Yxb//i/fOIv/qPwxi//o/DGL/zz5Yxb/MfljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8ziv1D+mMV/4fwxi//Y/DGL/6Pyxyz+i+SPWfzH5Y9Z/BfNH7P4j88fs/gvlj9m8V88f8zi/+j8MYv/Y/LHLP6PzR+z+C+RP2bxf1z+mMV/yfwxi//j88cs/k/IH7P4L5U/ZvF/Yv6Yxf9J+WMW/wn5Yxb/J+ePWfyfkj9m8X9q/pjFf+n8MYv/MvljFv+n5Y9Z/JfNH7P4L5c/ZvF/ev6Yxf8Z+WMW/2fmj1n8n5U/ZvFfPn/M4v/s/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v+c/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4Pzd/zOK/Vv6YxX/t/DGL//Pyxyz+z88fs/ivkz9m8Z+YP2bxn5Q/ZvGfnD9m8V83f8ziv17+mMV//fwxi/+U/DGL/9T8MYv/BvljFv8N88cs/i/IH7P4vzB/zOK/Uf6YxX/j/DGL/yb5Yxb/F+WPWfw3zR+z+L84f8ziv1n+mMV/8/wxi/8W+WMW/y3zxx7J/tPfdc/ShV6SP/ZI9p/9/N8qf8ziv3X+mMX/pfljFv+X5Y9Z/LfJH7P4vzx/zOL/ivwxi/8r88cs/q/KH7P4b5s/ZvHfLn/M4r99/pjF/9X5Yxb/HfLHLP475o9Z/HfKH7P475w/ZvF/Tf6YxX+X/DGL/2vzxyz+r8sfs/jvmj9m8d8tf8ziv3v+mMV/j/wxi//r88cs/m/IH7P475k/ZvF/Y/6YxX+v/DGL/5vyxyz+b84fs/i/JX/M4r93/pjFf5/8MYv/W/PHLP5vyx+z+L89f8zi/478MYv/O/PHLP7vyh+z+O+bP2bx3y9/zOL/7vwxi/978scs/u/NH7P4758/ZvF/X/6Yxf+A/DGL//vzxyz+H8gfs/gfmD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8f9o/pjF/6D8MYv/wfljFv+P5Y9Z/D+eP2bxPyR/zOL/ifwxi/+h+WMW/0/mj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8v5Q/ZvE/LH/M4v/l/DGL/+H5Yxb/r+SPWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+r+WMW/2Pyxyz+X8sfs/h/PX/M4n9s/pjF/xv5Yxb/4/LHLP7H549Z/L+ZP2bx/1b+mMX/hPwxi/+J+WMW/5Pyxyz+384fs/h/J3/M4n9y/pjF/5T8MYv/qfljFv/v5o9Z/L+XP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/7+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/6z8MYv/z/LHLP4/zx+z+J+dP2bx/0X+mMX/nPwxi/+5+WMW//Pyxyz+5/v8F3gwK1n8L/D5P6gs/hfmj1n8L8ofs/j/Mn/M4v+r/DGL/6/zxyz+v8kfs/hfnD9m8b8kf8zi/9v8MYv/7/LHLP6X5o9Z/H+fP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4/yF/zOL/x/wxi/+f8scs/tfmj1n8/5w/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+/5I9Z/G/KH7P435w/ZvH/a/6Yxf+W/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvGflj9m8b8rf8zif3f+mMV/ev6YxH/hQf6YxX8of8ziPyp/zOI/On/M4j9P/pjFf0z+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOI/Nn/M4v+o/DGL/yL5Yxb/cfljFv9F88cs/uPzxyz+i+WPWfwXzx+z+D86f8zi/5j8MYv/Y/PHLP5L5I9Z/B+XP2bxXzJ/zOL/+Pwxi/8T8scs/kvlj1n8n5g/ZvF/Uv6YxX9C/pjF/8n5Yxb/p+SPWfyfmj9m8V86f8ziv0z+mMX/afljFv9l88cs/svlj1n8n54/ZvF/Rv6Yxf+Z+WMW/2flj1n8l88fs/g/O3/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/g/J3/M4r9a/pjFf/X8MYv/GvljFv8188cs/s/NH7P4r5U/ZvFfO3/M4v+8/DGL//Pzxyz+6+SPWfwn5o9Z/Cflj1n8J+ePWfzXzR+z+K+XP2bxXz9/zOI/JX/M4j81f8ziv0H+mMV/w/wxi/8L8scs/i/MH7P4b5Q/ZvHfOH/M4r9J/pjF/0X5Yxb/TfPHLP4vzh+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/0vyxyz+W+WPWfy3zh+z+L80f8zi/7L8MYv/NvljFv+X549Z/F+RP2bxf2X+mMX/VfljFv9t88cs/tvlj1n8t88fs/i/On/M4r9D/pjFf8f8MYv/TvljFv+d88cs/q/JH7P475I/ZvF/bf6Yxf91+WMW/13zxyz+u+WPWfx3zx+z+O+RP3aP/07HPaL9X58/Zjn/35A/ZvHfM3/M4v/G/DGL/175Yxb/N+WPWfzfnD9m8X9L/pjFf+/8MYv/PvljFv+35o9Z/N+WP6bwnz59+rvyxxT+g8HC78gfs/i/M3/M4t/1n7P475s/ZvHfL3/M4v/u/DGL/3vyxyz+780fs/jvnz9m8X9f/pjF/4D8MYv/+/PHLP4fyB+z+B+YP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMX/oPwxi//B+WMW/4/lj1n8P54/ZvE/JH/M4v+J/DGL/6H5Yxb/T+aPWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8T8sf8zi/+X8MYv/4fljFv+v5I9Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/6v5Yxb/Y/LHLP5fyx97hPqPHszh//X8sUeo/4xm9z82f8zi/438MYv/cfljFv/j88cs/t/MH7P4fyt/zOJ/Qv6Yxf/E/DGL/0n5Yxb/b+ePWfy/kz9m8T85f8zif0r+mMX/1Pwxi/9388cs/t/LH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/9/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif1b+mMX/Z/ljFv+f549Z/M/OH7P4/yJ/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvH/Zf6Yxf9X+WMW/1/nj1n8f5M/ZvG/OH/M4n9J/pjF/7f5Yxb/3+WPWfwvzR+z+P8+f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bx/0P+mMX/j/ljFv8/5Y9Z/K/NH7P4/zl/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP5/yR+z+N+UP2bxvzl/zOL/1/wxi/8t+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOI/LX/M4n9X/pjF/+78MYv/9Pwxif/YQf6YxX8of8ziPyp/zOI/On/M4j9P/pjFf0z+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP/ZI9x898+nYhfPHHun+I40dmz9m8X9U/pjFf5H8MYv/uPwxi/+i+WMW//H5Yxb/xfLHLP6L549Z/B+dP2bxf0z+mMX/sfljFv8l8scs/o/LH7P4L5k/ZvF/fP6Yxf8J+WMW/6Xyxyz+T8wfs/g/KX/M4j8hf8zi/+T8MYv/U/LHLP5PzR+z+C+dP2bxXyZ/zOL/tPwxi/+y+WMW/+Xyxyz+T88fs/g/I3/M4v/M/DGL/7Pyxyz+y+ePWfyfnT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfyfkz9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/+fmj1n818ofs/ivnT9m8X9e/pjF//n5Yxb/dfLHLP4T88cs/pPyxyz+k/PHLP7r5o9Z/NfLH7P4r58/ZvGfkj9m8Z+aP2bx3yB/zOK/Yf6Yxf8F+WMW/xfmj1n8N8ofs/hvnD9m8d8kf8zi/6L8MYv/pvljFv8X549Z/DfLH7P4b54/ZvHfIn/M4r9l/pjF/yX5Yxb/rfLHLP5b549Z/F+aP2bxf1n+mMV/m/wxi//L88cs/q/IH7P4vzJ/zOL/qvwxi/+2+WMW/+3yxyz+2+ePWfxfnT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/9fkj1n8d8kfs/i/Nn/ske6/38ynY1+XP/ZI9x9p7K75Yxb/3fLHLP67549Z/PfIH7P4vz5/zOL/hvwxi/+ec/Nf4P9gXP+hWfzf2PmPWfz3yh+z+L8pf8zi/+b8MYv/W/LHLP57549Z/PfJH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4vzN/zOL/rvwxi/+++WMW//3yxyz+784fs/i/J3/M4v/e/DGL//75Yxb/9+WPWfwPyB+z+L8/f8zi/4H8MYv/gfljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/A/KH7P4H5w/ZvH/WP6Yxf/j+WMW/0Pyxyz+n8gfs/gfmj9m8f9k/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/w/LHLP5fzh+z+B+eP2bx/0r+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfy/mj9m8T8mf8zi/7X8MYv/1/PHLP7H5o9Z/L+RP2bxPy5/zOJ/fP6Yxf+b+WMW/2/lj1n8T8gfs/ifmD9m8T8pf8zi/+38MYv/d/LHLP4n549Z/E/JH7P4n5o/ZvH/bv6Yxf97+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bx/37+mMX/B/ljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/M/KH7P4/yx/zOL/8/wxi//Z+WMW/1/kj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+v8wfs/j/Kn/M4v/r/DGL/2/yxx6R/vPeb+nYi/PHHpH+I09nP/8vyR+z+P82f8zi/7v8MYv/pfljFv/f549Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/n/IH7P4/zF/zOL/p/wxi/+1+WMW/z/nj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/L/ljFv+b8scs/jfnj1n8/5o/ZvG/JX/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n8p+WPWfzvyh+z+N+dP2bxn54/JvF/1CB/zOI/lD9m8R+VP2bxH50/ZvGfJ3/M4j8mf8ziP2/+mMV/vvwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxH5s/ZvF/VP6YxX+R/DGL/7j8MYv/ovljFv/x+WMW/8Xyxyz+i+ePWfwfnT9m8X9M/pjF/7H5Yxb/JfLHLP6Pyx+z+C+ZP2bxf3z+mMX/CfljFv+l8scs/k/MH7P4Pyl/zOI/IX/M4v/k/DGL/1Pyxyz+T80fs/gvnT9m8V8mf8zi/7T8MYv/svljFv/l8scs/k/PH7P4PyN/zOL/zPwxi/+z8scs/svnj1n8n50/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8n5M/ZvFfLX/M4r96/pjFf438MYv/mvljFv/n5o9Z/NfKH7P4r50/ZvF/Xv6Yxf/5+WMW/3Xyxyz+E/PHLP6T8scs/pPzxyz+6+aPWfzXE/nP/xDWtfivL/J/KFn8p+SPWfyn5o9Z/DfIH7P4b5g/ZvF/Qf6Yxf+F+WMW/43yxyz+G+ePWfw3yR+z+L8of8ziv2n+mMX/xfljFv/N8scs/pvnj1n8t8gfs/hvmT9m8X9J/pjFf6v8MYv/1vljFv+X5o9Z/F+WP2bx3yZ/zOL/8vwxi/8r8scs/q/MH7P4vyp/zOK/bf6YxX+7/DGL//b5Yxb/V+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6Yxf81+WMW/13yxyz+r80fs/i/Ln/M4r9r/pjFf7f8MYv/7vljFv898scs/q/PH7P4vyF/zOK/Z/6Yxf+N+WMW/73yxyz+b8ofs/i/OX/M4v+W/DGL/975Yxb/ffLHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP7vzB+z+L8rf8ziv2/+mMV/v/wxi/+788cs/u/JH7P4vzd/zOK/f/6Yxf99+WMW/wPyxyz+788fs/h/IH/M4n9g/pjF/4P5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/g/LHLP4H549Z/D+WP2bx/3j+mMX/kPwxi/8n8scs/ofmj1n8P5k/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6Yxf+w/DGL/5fzxyz+h+ePWfy/kj9m8T8if8zif2T+mMX/qPwxi//R+WMW/6/mj1n8j8kfs/h/LX/M4v/1/DGL/7H5Yxb/b+SPWfyPyx+z+B+fP2bx/2b+mMX/W/ljFv8T8scs/ifmj1n8T8ofs/h/O3/M4v+d/DGL/8n5Yxb/U/LHLP6n5o9Z/L+bP2bx/17+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfy/nz9m8f9B/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb/s/LHLP4/yx+z+P88f8zif3b+mMX/F/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi/8v88cs/r/KH7P4/zp/zOL/m/wxi//F+WMW/0vyxyz+v80fs/j/Ln/M4n9p/pjF//f5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/H/LHLP5/zB+z+P8pf8zif23+mMX/z/ljFv/r8scs/tfnj1n8b8gfs/jfmD9m8f9L/pjF/6b8MYv/zfljFv+/5o9Z/G/JH7P4/y1/zOL/9/wxi/8/8scs/v/MH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv9p+WMW/7vyxyz+d+ePWfyn549J/BcZ5I9Z/Ifyxyz+o/LHLP6j88cs/vPkf59Gjzxa/Mfkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+Y/PHLP6Pyh+z+C+SP2bxH5c/ZvFfNH/M4j8+f8ziv1j+mMV/8fwxi/+j88cs/o/JH7P4PzZ/zOK/RP6Yxf9x+WMW/yXzxyz+j88fs/g/IX/M4r9U/pjF/4n5Yxb/J+WPWfwn5I9Z/J+cP2bxf0r+mMX/qfljFv+l88cs/svkj1n8n5Y/ZvFfNn/M4r9c/pjF/+n5Yxb/Z+SPWfyfmT9m8X9W/pjFf/n8MYv/s/PHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/c/LHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/c/DGL/1r5Yxb/tfPHLP7Pyx+z+D8/f8ziv07+mMV/Yv6YxX9S/pjFf3L+mMV/3fwxi/96+WMW//Xzxyz+U/LHLP5T88cs/hvkj1n8N8wfs/i/IH/M4v/C/DGL/0b5Yxb/jfPHLP6b5I9Z/F+UP2bx3zR/zOL/4vwxi/9m+WMW/83zxyz+W+SPWfy3zB+z+L8kf8ziv1X+mMV/6/wxi/9L88cs/i/LH7P4b5M/ZvF/ef6Yxf8V+WMW/1fmj1n8X5U/ZvHfNn/M4r9d/pjFf/v8MYv/q/PHLP475I9Z/HfMH7P475Q/ZvHfOX/M4v+a/DGL/y75Yxb/1+aPWfxflz9m8d81f8ziv1v+mMV/9/wxi/8e+WMW/9fnj1n835A/ZvHfM///xz49PY1hoFEc3iyy3s3atm2jtm0bsWvbtm3btm2badP260zTi3Tm/AXfeZ6r973+zYla+g/XP2rpP0L/qKX/SP2jlv6j9I9a+o/WP2rpP0b/qKX/WP2jlv7j9I9a+o/XP2rpP0H/qKX/RP2jlv6T9I9a+k/WP2rpv57+UUv/9fWPWvpvoH/0Tv8pA9MM4v4b6h+17H8j/aOW/hvrH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/7b6Ry39t9M/aum/vf5RS/8d9I9a+u+of9TSfyf9o5b+O+sftfTfRf+opf+u+kct/XfTP2rpv7v+UUv/PfSPWvrvqX/U0n8v/aOW/nvrH7X030f/qKX/vvpHLf330z9q6b+//lFL/wP0j1r6H6h/1NL/IP2jlv4H6x+19D9E/6il/6H6Ry39D9M/aul/uP5RS/8j9I9a+h+pf9TS/yj9o5b+R+sftfQ/Rv+opf+x+kct/Y/TP2rpf7z+UUv/E/SPWvqfqH/U0v8k/aOW/ifrH7X0P0X/qKX/qfpHLf1P0z9q6X+6/lFL/zP0j1r6n6l/1NL/LP2jlv5n6x+19D9H/6il/7n6Ry39z9M/aul/vv5RS/8L9I9a+l+of9TS/yL9o5b+F+sftfS/RP+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvpfqX/U0v8q/aOW/lfrH7X0v0b/qKX/tfpHLf2v0z9q6X+9/lFL/xv0j1r636h/1NL/Jv2jlv436x+19L9F/2hQ9h867Zy+/636R4Oy/7vn9P1v0z9q6X+7/lFL/zv0j1r636l/1NL/Lv2jlv536x+19L9H/6il/736Ry3979M/aul/v/5RS/8H9I9a+j+of9TS/yH9o5b+D+sftfR/RP+opf+j+kct/R/TP2rp/7j+UUv/J/SPWvo/qX/U0v8p/aOW/k/rH7X0f0b/qKX/s/pHLf2f0z9q6f+8/lFL/xf0j1r6v6h/1NL/Jf2jlv4v6x+19H9F/6il/6v6Ry39p+gftfR/Tf+opf/r+kct/afqH7X0f0P/qKX/m/pHLf3f0j9q6T+gf1TSf9j79I9a+g/RP2rp/379o5b+H9A/aun/Qf2jlv4f0j9q6T9U/6il/4f1j1r6f0T/qKX/R/WPWvp/TP+opf/H9Y9a+n9C/6il/yf1j1r6f0r/qKX/p/WPWvoP0z9q6f8Z/aOW/p/VP2rp/zn9o5b+n9c/aun/Bf2jlv5f1D9q6f8l/aOW/l/WP2rp/xX9o5b+X9U/aun/Nf2jlv5f1z9q6f8N/aOW/t/UP2rp/y39o5b+39Y/aun/Hf2jlv7f1T9q6f89/aOW/t/XP2rp/wP9o5b+P9Q/aun/I/2jlv4/1j9q6f8T/aOW/j/VP2rp/zP9o5b+P9c/GjJ1YGCgoP8v9I9a9v9L/aOW/r/SP2rp/2v9o5b+v9E/aun/W/2jlv6/0z9q6f97/aOW/n/QP2rp/0f9o5b+f9I/aun/Z/2jlv5/0T9q6f9X/aOW/n/TP2rp/3f9o5b+/9A/aun/T/2jlv7/0j9q6f9v/aOW/v/RP2rp/1/9o5b+/9M/aun/f/2jlv4z6B+19J9R/6il/0z6Ry39Z9Y/auk/i/5RS/9Z9Y9a+s+mf9TSf3b9o5b+c+gftfSfU/+opf9c+kct/efWP2rpP4/+UUv/efWPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6L6Z/1NJ/cf2jlv5L6B+19F9S/6il/1L6Ry39l9Y/aum/jP5RS/9l9Y9a+i+nf9TSf3n9o5b+K+gftfRfUf+opf9K+kct/VfWP2rpv4r+UUv/VfWPWvqvpn/U0n91/aOW/mvoP83Ae9+W/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL/+H6Ry39R+gftfQfqX/U0n+U/lFL/9H6Ry39x+gftfQfq3/U0n+c/lFL//H6Ry39J+gftfSfqH/U0n+S/lFL/8n6R4OuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG+zb/8xXtcFHMc/Bxwg2YaLGcPaIN+Wbind8WP4hxMSgQs98DeihsAdCN4BHYcdp8aPP8il80du5NjKlTAsJ23eck1nl2bWLFZtNfuhZunKWmQ6C7ZY17533zvvvh23vu/z/Wbl4/HHfb+fz5fXB7jtyefDFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD439XQuODI2Johp8YOPvjw4ebe19lHV9x04PfdF/S/lj9eOswlxww+6Onp6Zn97Kwd5cMJRVGUfrad5eOJlePS9XfWf6mj7yjM735x8fHJv2w8cmDNaQ/XdR29r7b3bG1x47oNLc2fGFMU4aLaoqN0UFdTFGFRbXFv6aC+dLC4tni4dDCr9+CU4rulg/PWbm5pKp1YEv09g/8XDY07i7FDii2G/GkwuP+d9d+5o/91hEv2X21cUe7/8s4fvlnxWb8T9N9//bCgsv+qf4PACVXX//Pz+19HuOR/3P8nPbny5eE+O3H//dcPn9Q/pDPM8/+QRiuf+yue/6cPc8mB/ZU1ncdL/V9y6zMzyqfG/TfP/+9cP1xU2f+YIc//pef4hf3P/xOKIlw8ym8HvKc0NO46MtL9f+T+x02r2NQM7v/0ts37S/0/tvgHj5dP1VbZ/8IR7v9jllT8WoHqNDR+tafi/l9F/8XHhrnkQP9vPf7bh0r9P/rH+88Y9Fk1/V9c2f/M9tYtM7du7zx3Q+vq9c3rmzfVzZo3e2593dzz58zsfSTo+zrK7wq8N4zu/l9MqtjUFEXzwP7qrgNPlfqf88ADs8unJlbZ/6IR7//T3f9hWB8ZU4wfX3Ssbm9vq+v72n9Y3/e174cN038Vf/8/8+zyD6stv9YUxdSB/Z1n3LW81P/bh57ZXT41vsr+F4/Y//yBnxeIMMr7f1PFZkj/Bw+92Pv8v/Seg6eXT1X79/8lI/b/ivs/jEZDY8X/8PMuK/W/q7g0stPQ4L//QTo5+n/07eu749bhU/qHdHL0/4cvHD0nbh2W6h/SydH/uI33Pxe3DpfoH9LJ0f+yKfOWx63DpfqHdHL0v/aVc/4atw6N+od0cvR/9ld2d8StwzL9Qzo5+n+wbfa2uHVYrn9IJ0f/Pz/1wVfj1uEy/UM6Ofo/duzuG+LW4XL9Qzo5+u/ac9aP4tbhCv1DOjn6v2zdghC3DlfqH9LJ0f+0qX9+LG4drtI/pJOj/7l/+eepcetwtf4hnRz93/7F5fvi1uEa/UM6Ofofe93LL8Stwwr9Qzo5+l9y1rYFcetwrf4hnRz9N/2sqSduHVaW+59Q6B/edTn6n/nNn2yIW4fr3P8hnRz9H172yJ64dbhe/5BOjv731BWT49bhBv1DOjn6/8b3TzsUtw6f1j+kk6P/3z35xLy4dVilf0gnR//Pfui2b8Wtw436h3Ry9H/PmhfOjFuH1fqHdHL0/9De574ctw5r9A/p5Oj/9ddb3xe3Dmv1D+nk6H/SxFNei1uHJv1DOjn6X3DL19ri1qFZ/5BOjv5bd3f9OG4d1ukf0snR/0ePT10Ztw7r9Q/p5Oh/xZy9H4xbh5v0D+nk6P8DSy/YFbcOG/QP6eTo/8Luj18Ytw4b9Q/p5Oi//enPfz1uHW7WP6STo/+9M15dFLcOLfqHdHL0/9KqJT+NW4dW/UM6Ofp/85FrN8Wtwyb9Qzo5+n/iF28di1uHzfqHdHL0//7zF/49bh226B/SydH/osVvrI1bh8/oH9LJ0f/Grn+9FLcObfqHdHL0P+PwVUvj1mGr/iGdHP1/79y6/XHr0K5/SCdH/3dcsa8+bh226R/SydH//oN33hW3DrfoH9LJ0f8bv5o+LW4dPqt/SCdH//dNPnRN3Dp06B/SydH/rzfVPh23Dtv1D+nk6P8f+6bsiFuHTv1DOjn6f+q17j/FrcOt+od0cvS/atxvxsetw236h3Ry9D+lc8u9cetwu/4hnRz9z7t79Xlx6/A5/UM6Ofrf+rfnvx23Djv0D+ls3d558+qWluY2b7zxxpuBNyf7TyYgtXeiP9m/EgAAAAAAAAAAAAAA4ERy/HOik/17BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Dc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IFjAQAAAABh/tZB9G4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfAUAAP//x5jrlg==") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1008020, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) unlink(&(0x7f00000000c0)='./file1\x00') chdir(&(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') 6.378164257s ago: executing program 1 (id=967): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.386163109s ago: executing program 6 (id=968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000200)={0xb, 0x29, 0x2, {0x98b}}, 0xb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 5.366447702s ago: executing program 5 (id=969): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x1bf, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x44, 0x1000) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7, 0xd44, 0x6}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000) 5.277983035s ago: executing program 1 (id=971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in=@dev, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x82}, 0x0) 4.747647662s ago: executing program 3 (id=972): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000540)=0x1) close_range(r0, r1, 0x0) 4.25137919s ago: executing program 1 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='configfs\x00', 0x1a28000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8000000000000000, 0x8, 0x2, 0xffffffffffffffff, 0x8000000000000002, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 4.055821464s ago: executing program 3 (id=974): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x1) 3.833773286s ago: executing program 3 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd2a, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 3.808779508s ago: executing program 5 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x4102, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xfffffffc, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 3.686073731s ago: executing program 1 (id=977): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x40000, 0xc, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x6}, {0xe000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xdddd0000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xffff1000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x1, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x10000, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14008a, 0x6, 0x0, 0x5000, [0x6, 0x401, 0x8, 0xc5]}) 3.663332359s ago: executing program 6 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c0000004400010029bd700004000000010000000400488071000180c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afea9e4a9de59e1ce0e3a23d11a7e1de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1effc71ca09de48d27f4529f315fa1aeab"], 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 2.797516447s ago: executing program 6 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x54, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0xffffffffffffffc7, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12e5, 0x6}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000015}, 0xc844) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="e87d1120c34370074c8c3159e585e1e7d9d64a51aed756c6943ef9fd32f2845cbdf2adf9b97e6be3d8dea2bee1471e88037c2ffb589116b46549ed728fa80200000000000000565d0879d80203c98a72320180f58b97c9e7006bc20e6abd9264e308eca7ef78d98a2d6b410d2b15e6e085cca6a169fd5801b79b5e5dd5ca55277a42df43f04fb6a3bcc1a6632b89f49f93df860c"], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x850003d1) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) r4 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000680)=""/240) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 2.571032353s ago: executing program 5 (id=980): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x2290034, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000040)=0xf0, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 2.57073805s ago: executing program 4 (id=981): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x14}], 0x18, 0x20000040}], 0x1, 0x8040) r4 = syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = dup(r4) lsm_set_self_attr(0x65, &(0x7f0000007000)={0x68, 0xffffffffffffffff, 0x37, 0x17, "719253c233c813bb57cc2450c9c8b97d24ecc020f50021"}, 0x37, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) 1.849440977s ago: executing program 1 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1.584932542s ago: executing program 6 (id=983): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000e35000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x7000, 0x40000, 0xc, 0xf1, 0x23, 0xfd, 0xea, 0xd4, 0x0, 0xd9, 0xf6, 0x6}, {0xe000, 0x1, 0xa, 0x19, 0x8, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7, 0x45}, {0x8080000, 0xdddd0000, 0xf, 0x2, 0x2, 0x2, 0x4, 0x9, 0x5, 0x1, 0xc4, 0x44}, {0xeeee3000, 0xffffffff, 0x805b134020ae36da, 0xf8, 0x3, 0x68, 0x9, 0x1, 0x6, 0x3, 0x8, 0x1}, {0xffffffff, 0xa000, 0x4, 0x5, 0x3, 0x9, 0xd, 0xa, 0x5, 0xc, 0x2c, 0x4b}, {0x8b000, 0xffff1000, 0xa, 0x0, 0x3, 0x9, 0x1, 0xc3, 0x4, 0x90, 0x2, 0xb9}, {0xa000, 0xf000, 0xf, 0x82, 0x1, 0xfb, 0x0, 0x5, 0xfe, 0x7, 0x47, 0xf5}, {0x2000, 0x41000, 0xf, 0x5, 0xf9, 0x1, 0xa, 0x1, 0xb6, 0x1, 0xff, 0x7}, {0x10000, 0x6}, {0x0, 0x8}, 0x1000c, 0x0, 0xffff1000, 0x14008a, 0x6, 0x0, 0x5000, [0x6, 0x401, 0x8, 0xc5]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x7, 0x3, 0x0, 0xd2, 0x9c, 0x5, 0x8, 0x10, 0x8, 0xf1, 0x1, 0x0, 0x3, 0x4, 0x5, 0xbc, 0x3, 0xe9, '\x00', 0x9, 0x9f70}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 826.766857ms ago: executing program 4 (id=984): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) iopl(0x3) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @empty, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) recvfrom(r1, &(0x7f0000003800)=""/4085, 0xffffffb6, 0x100, 0x0, 0x0) 785.161903ms ago: executing program 3 (id=985): r0 = syz_open_dev$usbfs(0x0, 0xfffffffffffffffe, 0x1781) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xffffffff, 0x44, &(0x7f0000000300)={0x4b5a9da54893e123, 0x3, 0x2, 0x1}, 0x8, 0x800, 0xb60, 0x0, 0xfffffffe, 0x0, 0x0}) 753.781176ms ago: executing program 1 (id=986): syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x16}, @l2cap_cid_signaling={{0x12}, [@l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x7fff, 0x0, 0xf}}, @l2cap_info_req={{0xa, 0xe, 0x2}, {0x3}}]}}, 0x1b) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 470.218549ms ago: executing program 4 (id=987): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000180)='configfs\x00', 0x1a28000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) unshare(0x8000000) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x8000000000000000, 0x8, 0x2, 0xffffffffffffffff, 0x8000000000000002, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 432.855013ms ago: executing program 3 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) 311.84669ms ago: executing program 6 (id=989): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001a40)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc9}}}, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 182.079702ms ago: executing program 4 (id=990): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in=@dev, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x82}, 0x0) 0s ago: executing program 3 (id=991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x4102, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0xfffffffc, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000580)={""/32, 0x0, 0x0, 0xffffffffffffff2e, 0x0, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) bind$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): T7425] dump_stack_lvl+0xe8/0x150 [ 293.899737][ T7425] should_fail_ex+0x3eb/0x540 [ 293.899765][ T7425] _copy_from_iter+0x1d3/0x1660 [ 293.899787][ T7425] ? irqentry_exit+0x218/0x910 [ 293.899822][ T7425] ? __pfx__copy_from_iter+0x10/0x10 [ 293.899853][ T7425] ? netlink_sendmsg+0x5fa/0xae0 [ 293.899873][ T7425] ? skb_put+0x112/0x210 [ 293.899903][ T7425] netlink_sendmsg+0x667/0xae0 [ 293.899981][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.900009][ T7425] ? apparmor_socket_sendmsg+0x98/0x360 [ 293.900034][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.900053][ T7425] sock_sendmsg_nosec+0x13a/0x180 [ 293.900078][ T7425] ____sys_sendmsg+0x54e/0x850 [ 293.900111][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 293.900147][ T7425] ? import_iovec+0x73/0xa0 [ 293.900176][ T7425] ___sys_sendmsg+0x2a5/0x360 [ 293.900203][ T7425] ? __lock_acquire+0x6df/0x2e50 [ 293.900227][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.900289][ T7425] ? __fget_files+0x2a/0x420 [ 293.900317][ T7425] ? __fget_files+0x3a2/0x420 [ 293.900354][ T7425] __x64_sys_sendmsg+0x1b1/0x290 [ 293.900381][ T7425] ? lockdep_hardirqs_on+0x7b/0x110 [ 293.900407][ T7425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 293.900448][ T7425] do_syscall_64+0x166/0x520 [ 293.900467][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.900483][ T7425] ? clear_bhb_loop+0x70/0xc0 [ 293.900502][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.900522][ T7425] RIP: 0033:0x7fb537d9e159 [ 293.900541][ T7425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.900558][ T7425] RSP: 002b:00007fb538c33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.900580][ T7425] RAX: ffffffffffffffda RBX: 00007fb538026180 RCX: 00007fb537d9e159 [ 293.900596][ T7425] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 293.900609][ T7425] RBP: 00007fb538c33090 R08: 0000000000000000 R09: 0000000000000000 [ 293.900621][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.900633][ T7425] R13: 00007fb538026218 R14: 00007fb538026180 R15: 00007ffc69544b68 [ 293.900665][ T7425] [ 294.635011][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 294.871022][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 294.888032][ T25] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 295.126466][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.137576][ T25] usb 4-1: Product: syz [ 295.145203][ T25] usb 4-1: Manufacturer: syz [ 295.151335][ T25] usb 4-1: SerialNumber: syz [ 295.785161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 295.945170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 296.921723][ T25] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 297.156495][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 297.172137][ T25] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 297.183790][ T25] usb 4-1: media controller created [ 297.207885][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 297.447678][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 297.465898][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 297.581551][ T25] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 297.600833][ T25] usb 4-1: USB disconnect, device number 5 [ 297.639515][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.640124][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 297.640156][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.641420][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.641444][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 297.654056][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.654083][ T9] usb 2-1: Product: syz [ 297.654097][ T9] usb 2-1: Manufacturer: syz [ 297.654111][ T9] usb 2-1: SerialNumber: syz [ 297.734076][ T7464] FAULT_INJECTION: forcing a failure. [ 297.734076][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 297.734169][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.3.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.734195][ T7464] Tainted: [L]=SOFTLOCKUP [ 297.734201][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.734210][ T7464] Call Trace: [ 297.734216][ T7464] [ 297.734222][ T7464] dump_stack_lvl+0xe8/0x150 [ 297.734255][ T7464] should_fail_ex+0x3eb/0x540 [ 297.734283][ T7464] should_failslab+0xa8/0x100 [ 297.734306][ T7464] ? security_inode_alloc+0x39/0x310 [ 297.734332][ T7464] kmem_cache_alloc_noprof+0xa1/0x600 [ 297.734360][ T7464] ? __pfx_make_kgid+0x10/0x10 [ 297.734386][ T7464] ? security_inode_alloc+0x39/0x310 [ 297.734416][ T7464] security_inode_alloc+0x39/0x310 [ 297.734443][ T7464] inode_init_always_gfp+0x97e/0xd30 [ 297.734473][ T7464] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 297.734501][ T7464] alloc_inode+0x82/0x1b0 [ 297.734526][ T7464] new_inode+0x1f/0x170 [ 297.734549][ T7464] ? shmem_get_inode+0x29a/0x1030 [ 297.734579][ T7464] shmem_get_inode+0x3a4/0x1030 [ 297.734603][ T7464] ? __lock_acquire+0x6df/0x2e50 [ 297.734630][ T7464] ? __pfx_shmem_get_inode+0x10/0x10 [ 297.734666][ T7464] __shmem_file_setup+0x20b/0x370 [ 297.734692][ T7464] ? __pfx___shmem_file_setup+0x10/0x10 [ 297.734713][ T7464] ? do_raw_spin_lock+0x12b/0x2f0 [ 297.734746][ T7464] memfd_alloc_file+0x99/0x540 [ 297.734773][ T7464] ? __pfx_memfd_alloc_file+0x10/0x10 [ 297.734796][ T7464] ? alloc_fd+0x651/0x6c0 [ 297.734829][ T7464] __se_sys_memfd_create+0x31f/0x410 [ 297.734858][ T7464] do_syscall_64+0x166/0x520 [ 297.734880][ T7464] ? trace_irq_disable+0x3b/0x140 [ 297.734899][ T7464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.734918][ T7464] ? clear_bhb_loop+0x70/0xc0 [ 297.734940][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.734959][ T7464] RIP: 0033:0x7ff77b99e159 [ 297.734977][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.734993][ T7464] RSP: 002b:00007ff77c83be08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 297.735014][ T7464] RAX: ffffffffffffffda RBX: 00000000000005d8 RCX: 00007ff77b99e159 [ 297.735027][ T7464] RDX: 00007ff77c83bee0 RSI: 0000000000000000 RDI: 00007ff77ba35204 [ 297.735041][ T7464] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 297.735053][ T7464] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000640 [ 297.735065][ T7464] R13: 00007ff77c83bee0 R14: 00007ff77c83bea0 R15: 0000200000000680 [ 297.735096][ T7464] [ 298.258732][ T7471] FAULT_INJECTION: forcing a failure. [ 298.258732][ T7471] name failslab, interval 1, probability 0, space 0, times 0 [ 298.258768][ T7471] CPU: 0 UID: 0 PID: 7471 Comm: syz.5.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 298.258795][ T7471] Tainted: [L]=SOFTLOCKUP [ 298.258803][ T7471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.258814][ T7471] Call Trace: [ 298.258825][ T7471] [ 298.258834][ T7471] dump_stack_lvl+0xe8/0x150 [ 298.258868][ T7471] should_fail_ex+0x3eb/0x540 [ 298.258895][ T7471] should_failslab+0xa8/0x100 [ 298.258919][ T7471] ? security_inode_alloc+0x39/0x310 [ 298.258945][ T7471] kmem_cache_alloc_noprof+0xa1/0x600 [ 298.258976][ T7471] ? __pfx_make_kgid+0x10/0x10 [ 298.259003][ T7471] ? security_inode_alloc+0x39/0x310 [ 298.259035][ T7471] security_inode_alloc+0x39/0x310 [ 298.259062][ T7471] inode_init_always_gfp+0x97e/0xd30 [ 298.259093][ T7471] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 298.259121][ T7471] alloc_inode+0x82/0x1b0 [ 298.259155][ T7471] new_inode+0x1f/0x170 [ 298.259180][ T7471] ? shmem_get_inode+0xdd7/0x1030 [ 298.259210][ T7471] shmem_get_inode+0x3a4/0x1030 [ 298.259236][ T7471] ? __lock_acquire+0x6df/0x2e50 [ 298.259264][ T7471] ? __pfx_shmem_get_inode+0x10/0x10 [ 298.259302][ T7471] __shmem_file_setup+0x20b/0x370 [ 298.259329][ T7471] ? __pfx___shmem_file_setup+0x10/0x10 [ 298.259351][ T7471] ? do_raw_spin_lock+0x12b/0x2f0 [ 298.259386][ T7471] memfd_alloc_file+0x99/0x540 [ 298.259415][ T7471] ? __pfx_memfd_alloc_file+0x10/0x10 [ 298.259438][ T7471] ? alloc_fd+0x651/0x6c0 [ 298.259474][ T7471] __se_sys_memfd_create+0x31f/0x410 [ 298.259501][ T7471] do_syscall_64+0x166/0x520 [ 298.259526][ T7471] ? trace_irq_disable+0x3b/0x140 [ 298.259546][ T7471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.259566][ T7471] ? clear_bhb_loop+0x70/0xc0 [ 298.259592][ T7471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.259612][ T7471] RIP: 0033:0x7fc9d6f9e159 [ 298.259631][ T7471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.259647][ T7471] RSP: 002b:00007fc9d7f41e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 298.259670][ T7471] RAX: ffffffffffffffda RBX: 00000000000001ff RCX: 00007fc9d6f9e159 [ 298.259684][ T7471] RDX: 00007fc9d7f41ee0 RSI: 0000000000000000 RDI: 00007fc9d7035204 [ 298.259698][ T7471] RBP: 00002000000002c0 R08: 00000000ffffffff R09: 0000000000000000 [ 298.259712][ T7471] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000240 [ 298.259725][ T7471] R13: 00007fc9d7f41ee0 R14: 00007fc9d7f41ea0 R15: 0000200000000280 [ 298.259757][ T7471] [ 298.745798][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 298.745860][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 298.746014][ T9] usb 2-1: 0:2 : does not exist [ 299.414392][ T7483] FAULT_INJECTION: forcing a failure. [ 299.414392][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 299.414458][ T7483] CPU: 1 UID: 0 PID: 7483 Comm: syz.6.266 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.414485][ T7483] Tainted: [L]=SOFTLOCKUP [ 299.414492][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.414503][ T7483] Call Trace: [ 299.414511][ T7483] [ 299.414519][ T7483] dump_stack_lvl+0xe8/0x150 [ 299.414561][ T7483] should_fail_ex+0x3eb/0x540 [ 299.414588][ T7483] should_failslab+0xa8/0x100 [ 299.414612][ T7483] ? security_inode_alloc+0x39/0x310 [ 299.414638][ T7483] kmem_cache_alloc_noprof+0xa1/0x600 [ 299.414670][ T7483] ? __pfx_make_kgid+0x10/0x10 [ 299.414700][ T7483] ? security_inode_alloc+0x39/0x310 [ 299.414736][ T7483] security_inode_alloc+0x39/0x310 [ 299.414763][ T7483] inode_init_always_gfp+0x97e/0xd30 [ 299.414793][ T7483] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 299.414822][ T7483] alloc_inode+0x82/0x1b0 [ 299.414847][ T7483] new_inode+0x1f/0x170 [ 299.414869][ T7483] ? shmem_get_inode+0x29a/0x1030 [ 299.414899][ T7483] shmem_get_inode+0x3a4/0x1030 [ 299.414925][ T7483] ? __lock_acquire+0x6df/0x2e50 [ 299.414952][ T7483] ? __pfx_shmem_get_inode+0x10/0x10 [ 299.414990][ T7483] __shmem_file_setup+0x20b/0x370 [ 299.415017][ T7483] ? __pfx___shmem_file_setup+0x10/0x10 [ 299.415039][ T7483] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.415075][ T7483] memfd_alloc_file+0x99/0x540 [ 299.415102][ T7483] ? __pfx_memfd_alloc_file+0x10/0x10 [ 299.415121][ T7483] ? alloc_fd+0x651/0x6c0 [ 299.415150][ T7483] __se_sys_memfd_create+0x31f/0x410 [ 299.415176][ T7483] do_syscall_64+0x166/0x520 [ 299.415194][ T7483] ? trace_irq_disable+0x3b/0x140 [ 299.415209][ T7483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.415224][ T7483] ? clear_bhb_loop+0x70/0xc0 [ 299.415241][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.415256][ T7483] RIP: 0033:0x7f030899e159 [ 299.415270][ T7483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.415282][ T7483] RSP: 002b:00007f0309930e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 299.415299][ T7483] RAX: ffffffffffffffda RBX: 0000000000000243 RCX: 00007f030899e159 [ 299.415310][ T7483] RDX: 00007f0309930ee0 RSI: 0000000000000000 RDI: 00007f0308a35204 [ 299.415320][ T7483] RBP: 0000200000000340 R08: 00000000ffffffff R09: 0000000000000000 [ 299.415329][ T7483] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000002c0 [ 299.415338][ T7483] R13: 00007f0309930ee0 R14: 00007f0309930ea0 R15: 0000200000000300 [ 299.415362][ T7483] [ 300.149382][ T7499] ubi: mtd0 is already attached to ubi0 [ 300.569210][ T9] usb 2-1: USB disconnect, device number 5 [ 300.799601][ T7503] siw: device registration error -23 [ 300.809223][ T7505] siw: device registration error -23 [ 301.590314][ T7524] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 302.149873][ T7528] netlink: Failed to add ipvlan1 helper -22 [ 302.149975][ T7528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.210087][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.278'. [ 304.456457][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 304.975281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 306.140384][ T7583] overlay: ./file1 is not a directory [ 306.339220][ T7593] gadgetfs: bound to dummy_udc driver [ 306.562296][ T7606] XFS (mtdblock0): Invalid superblock magic number [ 307.814704][ T7643] FAULT_INJECTION: forcing a failure. [ 307.814704][ T7643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.814757][ T7643] CPU: 0 UID: 0 PID: 7643 Comm: syz.3.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.814784][ T7643] Tainted: [L]=SOFTLOCKUP [ 307.814791][ T7643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.814803][ T7643] Call Trace: [ 307.814810][ T7643] [ 307.814819][ T7643] dump_stack_lvl+0xe8/0x150 [ 307.814852][ T7643] should_fail_ex+0x3eb/0x540 [ 307.814880][ T7643] _copy_to_user+0x31/0xb0 [ 307.814907][ T7643] simple_read_from_buffer+0xe1/0x170 [ 307.814941][ T7643] proc_fail_nth_read+0x1bb/0x230 [ 307.814965][ T7643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.814988][ T7643] ? rw_verify_area+0x24a/0x4c0 [ 307.815018][ T7643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.815046][ T7643] vfs_read+0x213/0xa80 [ 307.815080][ T7643] ? __pfx___mutex_lock+0x10/0x10 [ 307.815107][ T7643] ? __pfx_vfs_read+0x10/0x10 [ 307.815132][ T7643] ? __fget_files+0x2a/0x420 [ 307.815160][ T7643] ? __fget_files+0x3a2/0x420 [ 307.815182][ T7643] ? __fget_files+0x2a/0x420 [ 307.815216][ T7643] ksys_read+0x150/0x270 [ 307.815247][ T7643] ? __pfx_ksys_read+0x10/0x10 [ 307.815288][ T7643] do_syscall_64+0x166/0x520 [ 307.815311][ T7643] ? trace_irq_disable+0x3b/0x140 [ 307.815330][ T7643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.815350][ T7643] ? clear_bhb_loop+0x70/0xc0 [ 307.815373][ T7643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.815393][ T7643] RIP: 0033:0x7ff77b95e98e [ 307.815411][ T7643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.815428][ T7643] RSP: 002b:00007ff77c83bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.815449][ T7643] RAX: ffffffffffffffda RBX: 00007ff77c83c6c0 RCX: 00007ff77b95e98e [ 307.815463][ T7643] RDX: 000000000000000f RSI: 00007ff77c83c0a0 RDI: 0000000000000003 [ 307.815476][ T7643] RBP: 00007ff77c83c090 R08: 0000000000000000 R09: 0000000000000000 [ 307.815489][ T7643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.815501][ T7643] R13: 00007ff77bc26038 R14: 00007ff77bc25fa0 R15: 00007ffd88b06928 [ 307.815531][ T7643] [ 309.222923][ T7659] batadv_slave_0: entered promiscuous mode [ 309.371334][ T7646] batadv_slave_0: left promiscuous mode [ 309.765820][ T7658] netlink: Failed to add  helper -22 [ 309.765919][ T7658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.807202][ T1564] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 309.955662][ T1564] usb 4-1: Using ep0 maxpacket: 8 [ 309.956555][ T1564] usb 4-1: New USB device found, idVendor=ee8d, idProduct=081e, bcdDevice=61.23 [ 309.959285][ T1564] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 309.959311][ T1564] usb 4-1: config 16 has an invalid descriptor of length 157, skipping remainder of the config [ 309.959350][ T1564] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.959391][ T1564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.988224][ T1564] usbtmc 4-1:16.0: bulk endpoints not found [ 310.272956][ T7670] misc userio: Invalid payload size [ 310.613608][ T7678] sd 0:0:1:0: PR command failed: 1026 [ 310.613938][ T7678] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 310.614206][ T7678] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 311.619111][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.621609][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.813594][ T7692] netlink: 300 bytes leftover after parsing attributes in process `syz.4.310'. [ 312.085376][ T1564] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 312.306655][ T1564] usb 5-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 312.325993][ T1564] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 312.326471][ T1564] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.326486][ T1564] usb 5-1: config 0 has no interface number 0 [ 312.326512][ T1564] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.326528][ T1564] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.326541][ T1564] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.326566][ T1564] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.383820][ T1564] usb 5-1: config 0 descriptor?? [ 313.244098][ T43] usb 4-1: USB disconnect, device number 6 [ 314.128453][ T7705] openvswitch: netlink: Missing valid actions attribute. [ 314.140904][ T7705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.255823][ T7708] FAULT_INJECTION: forcing a failure. [ 314.255823][ T7708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.255924][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.1.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 314.255953][ T7708] Tainted: [L]=SOFTLOCKUP [ 314.255966][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.255978][ T7708] Call Trace: [ 314.255987][ T7708] [ 314.255996][ T7708] dump_stack_lvl+0xe8/0x150 [ 314.256031][ T7708] should_fail_ex+0x3eb/0x540 [ 314.256058][ T7708] _copy_to_user+0x31/0xb0 [ 314.256086][ T7708] simple_read_from_buffer+0xe1/0x170 [ 314.256120][ T7708] proc_fail_nth_read+0x1bb/0x230 [ 314.256144][ T7708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.256168][ T7708] ? rw_verify_area+0x24a/0x4c0 [ 314.256199][ T7708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.256218][ T7708] vfs_read+0x213/0xa80 [ 314.256252][ T7708] ? __pfx___mutex_lock+0x10/0x10 [ 314.256278][ T7708] ? __pfx_vfs_read+0x10/0x10 [ 314.256307][ T7708] ? __fget_files+0x2a/0x420 [ 314.256339][ T7708] ? __fget_files+0x3a2/0x420 [ 314.256364][ T7708] ? __fget_files+0x2a/0x420 [ 314.256417][ T7708] ksys_read+0x150/0x270 [ 314.256447][ T7708] ? __pfx_ksys_read+0x10/0x10 [ 314.256495][ T7708] do_syscall_64+0x166/0x520 [ 314.256520][ T7708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.256541][ T7708] ? clear_bhb_loop+0x70/0xc0 [ 314.256565][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.256585][ T7708] RIP: 0033:0x7fb537d5e98e [ 314.256604][ T7708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.256621][ T7708] RSP: 002b:00007fb538c53fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.256643][ T7708] RAX: ffffffffffffffda RBX: 00007fb538c546c0 RCX: 00007fb537d5e98e [ 314.256657][ T7708] RDX: 000000000000000f RSI: 00007fb538c540a0 RDI: 0000000000000004 [ 314.256670][ T7708] RBP: 00007fb538c54090 R08: 0000000000000000 R09: 0000000000000000 [ 314.256682][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.256693][ T7708] R13: 00007fb538026128 R14: 00007fb538026090 R15: 00007ffc69544b68 [ 314.256725][ T7708] [ 315.251474][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251549][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251575][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251595][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251618][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251639][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251663][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251687][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251712][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.251738][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 315.257141][ T1564] holtek_mouse 0003:04D9:A04A.0002: unknown global tag 0xd [ 315.257163][ T1564] holtek_mouse 0003:04D9:A04A.0002: item 0 4 1 13 parsing failed [ 315.260535][ T1564] holtek_mouse 0003:04D9:A04A.0002: hid parse failed: -22 [ 315.260606][ T1564] holtek_mouse 0003:04D9:A04A.0002: probe with driver holtek_mouse failed with error -22 [ 315.389035][ T25] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz1] on syz0 [ 315.417210][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.431348][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.530354][ T7715] fido_id[7715]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 315.580782][ T7722] FAULT_INJECTION: forcing a failure. [ 315.580782][ T7722] name failslab, interval 1, probability 0, space 0, times 0 [ 315.580843][ T7722] CPU: 0 UID: 0 PID: 7722 Comm: syz.5.318 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.580868][ T7722] Tainted: [L]=SOFTLOCKUP [ 315.580874][ T7722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.580885][ T7722] Call Trace: [ 315.580891][ T7722] [ 315.580898][ T7722] dump_stack_lvl+0xe8/0x150 [ 315.580928][ T7722] should_fail_ex+0x3eb/0x540 [ 315.580954][ T7722] should_failslab+0xa8/0x100 [ 315.580978][ T7722] ? security_file_alloc+0x34/0x310 [ 315.580998][ T7722] kmem_cache_alloc_noprof+0xa1/0x600 [ 315.581024][ T7722] ? rcu_is_watching+0x16/0xb0 [ 315.581047][ T7722] ? security_file_alloc+0x34/0x310 [ 315.581071][ T7722] security_file_alloc+0x34/0x310 [ 315.581092][ T7722] init_file+0x90/0x2b0 [ 315.581117][ T7722] alloc_empty_file+0x74/0x1d0 [ 315.581138][ T7722] path_openat+0x9d/0x1e40 [ 315.581160][ T7722] ? __lock_acquire+0x6df/0x2e50 [ 315.581189][ T7722] do_file_open+0x23e/0x4a0 [ 315.581214][ T7722] ? __pfx_do_file_open+0x10/0x10 [ 315.581253][ T7722] ? _raw_spin_unlock+0x28/0x50 [ 315.581272][ T7722] ? alloc_fd+0x651/0x6c0 [ 315.581307][ T7722] do_sys_openat2+0x115/0x200 [ 315.581334][ T7722] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.581358][ T7722] ? ksys_write+0x242/0x270 [ 315.581462][ T7722] ? __pfx_ksys_write+0x10/0x10 [ 315.581493][ T7722] __x64_sys_openat+0x138/0x170 [ 315.581521][ T7722] do_syscall_64+0x166/0x520 [ 315.581543][ T7722] ? trace_irq_disable+0x3b/0x140 [ 315.581561][ T7722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.581581][ T7722] ? clear_bhb_loop+0x70/0xc0 [ 315.581604][ T7722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.581622][ T7722] RIP: 0033:0x7fc9d6f9e159 [ 315.581641][ T7722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.581656][ T7722] RSP: 002b:00007fc9d7f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.581677][ T7722] RAX: ffffffffffffffda RBX: 00007fc9d7225fa0 RCX: 00007fc9d6f9e159 [ 315.581695][ T7722] RDX: 0000000000000000 RSI: 0000200000002180 RDI: ffffffffffffff9c [ 315.581709][ T7722] RBP: 00007fc9d7f42090 R08: 0000000000000000 R09: 0000000000000000 [ 315.581721][ T7722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.581732][ T7722] R13: 00007fc9d7226038 R14: 00007fc9d7225fa0 R15: 00007ffc9bb506c8 [ 315.581761][ T7722] [ 315.598931][ T1564] usb 5-1: USB disconnect, device number 5 [ 315.729222][ T7724] netlink: 136 bytes leftover after parsing attributes in process `syz.1.316'. [ 317.141228][ T7734] FAULT_INJECTION: forcing a failure. [ 317.141228][ T7734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.141284][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.3.324 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.141321][ T7734] Tainted: [L]=SOFTLOCKUP [ 317.141328][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.141341][ T7734] Call Trace: [ 317.141349][ T7734] [ 317.141358][ T7734] dump_stack_lvl+0xe8/0x150 [ 317.141393][ T7734] should_fail_ex+0x3eb/0x540 [ 317.141417][ T7734] _copy_from_iter+0x1d3/0x1660 [ 317.141441][ T7734] ? __alloc_skb+0x27a/0x7a0 [ 317.141469][ T7734] ? __alloc_skb+0x27a/0x7a0 [ 317.141494][ T7734] ? __alloc_skb+0x27a/0x7a0 [ 317.141518][ T7734] ? __pfx__copy_from_iter+0x10/0x10 [ 317.141627][ T7734] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 317.141694][ T7734] ? __alloc_skb+0x27a/0x7a0 [ 317.141714][ T7734] ? __alloc_skb+0x27a/0x7a0 [ 317.141740][ T7734] ? netlink_sendmsg+0x5fa/0xae0 [ 317.141758][ T7734] ? skb_put+0x112/0x210 [ 317.141787][ T7734] netlink_sendmsg+0x667/0xae0 [ 317.141812][ T7734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.141840][ T7734] ? apparmor_socket_sendmsg+0x98/0x360 [ 317.141869][ T7734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.141889][ T7734] sock_sendmsg_nosec+0x13a/0x180 [ 317.141928][ T7734] ____sys_sendmsg+0x54e/0x850 [ 317.141960][ T7734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.142001][ T7734] ? import_iovec+0x73/0xa0 [ 317.142031][ T7734] ___sys_sendmsg+0x2a5/0x360 [ 317.142057][ T7734] ? __lock_acquire+0x6df/0x2e50 [ 317.142082][ T7734] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.142115][ T7734] ? kstrtouint+0x6e/0xe0 [ 317.142159][ T7734] ? __fget_files+0x2a/0x420 [ 317.142187][ T7734] ? __fget_files+0x3a2/0x420 [ 317.142233][ T7734] __sys_sendmmsg+0x273/0x4d0 [ 317.142268][ T7734] ? __pfx___sys_sendmmsg+0x10/0x10 [ 317.142305][ T7734] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 317.142344][ T7734] ? ksys_write+0x242/0x270 [ 317.142376][ T7734] ? __pfx_ksys_write+0x10/0x10 [ 317.142412][ T7734] __x64_sys_sendmmsg+0xa0/0xc0 [ 317.142442][ T7734] do_syscall_64+0x166/0x520 [ 317.142467][ T7734] ? trace_irq_disable+0x3b/0x140 [ 317.142487][ T7734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.142508][ T7734] ? clear_bhb_loop+0x70/0xc0 [ 317.142533][ T7734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.142552][ T7734] RIP: 0033:0x7ff77b99e159 [ 317.142573][ T7734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.142590][ T7734] RSP: 002b:00007ff77c83c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 317.142613][ T7734] RAX: ffffffffffffffda RBX: 00007ff77bc25fa0 RCX: 00007ff77b99e159 [ 317.142628][ T7734] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 317.142643][ T7734] RBP: 00007ff77c83c090 R08: 0000000000000000 R09: 0000000000000000 [ 317.142655][ T7734] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000001 [ 317.142667][ T7734] R13: 00007ff77bc26038 R14: 00007ff77bc25fa0 R15: 00007ffd88b06928 [ 317.142699][ T7734] [ 317.415909][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.415969][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.893758][ T7746] netlink: Failed to add ipvlan1 helper -22 [ 317.893836][ T7746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.738193][ T7764] batadv_slave_0: entered promiscuous mode [ 320.177811][ T7760] batadv_slave_0: left promiscuous mode [ 320.579559][ T7775] siw: device registration error -23 [ 320.602937][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.333'. [ 321.624396][ T7778] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 321.825194][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 321.975909][ T9] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 322.281374][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.281419][ T9] usb 7-1: Product: syz [ 322.281445][ T9] usb 7-1: Manufacturer: syz [ 322.281461][ T9] usb 7-1: SerialNumber: syz [ 322.688524][ T9] usb 7-1: config 0 descriptor?? [ 324.605420][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 324.892455][ T9] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 004 [ 325.667631][ T9] usb 7-1: USB disconnect, device number 4 [ 326.177838][ T7823] kAFS: No cell specified [ 326.840198][ T7826] ima: policy update failed [ 327.560218][ T31] audit: type=1807 audit(1788372419.332:8): UNKNOWN=eas res=0 [ 327.560270][ T31] audit: type=1802 audit(1788372419.332:9): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.348" res=0 errno=0 [ 327.560313][ T31] audit: type=1802 audit(1788372419.642:10): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.348" res=0 errno=0 [ 327.609943][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 327.776396][ T25] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 327.790318][ T25] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 327.803764][ T25] usb 6-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 327.816800][ T25] usb 6-1: config 1 interface 0 has no altsetting 0 [ 327.827584][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.837872][ T25] usb 6-1: Product: syz [ 327.846864][ T25] usb 6-1: Manufacturer: syz [ 327.854305][ T25] usb 6-1: SerialNumber: syz [ 327.867543][ T7820] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 327.878365][ T7820] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 329.633716][ T7835] overlayfs: failed to resolve './file0': -2 [ 329.860989][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 329.879248][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 329.896022][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3e8f instead [ 329.910199][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x579b instead [ 329.910268][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 329.910286][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 329.910300][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 329.910318][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 329.910348][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 329.910379][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 329.910409][ T7837] jffs2: Further such events for this erase block will not be printed [ 329.910822][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 329.910841][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 329.910859][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3e8f instead [ 329.910878][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x579b instead [ 329.910893][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 329.910909][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 329.910925][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 329.910958][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 329.910990][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 329.911020][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 329.911035][ T7837] jffs2: Further such events for this erase block will not be printed [ 329.967016][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 329.967045][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 329.967063][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3e8f instead [ 329.967082][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9ca4 instead [ 329.967132][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 329.967148][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 329.967166][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3e8f instead [ 329.967184][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9ca4 instead [ 329.967244][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 329.967261][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 329.967278][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3e8f instead [ 329.967297][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9ca4 instead [ 329.967341][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 329.967357][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 329.967375][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3e8f instead [ 329.967393][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9ca4 instead [ 329.967438][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 329.967460][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 329.967477][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3e8f instead [ 329.967495][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9ca4 instead [ 329.967546][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 329.967562][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 329.967608][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3e8f instead [ 329.967628][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9ca4 instead [ 329.967673][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 329.967690][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 329.967706][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3e8f instead [ 329.967726][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9ca4 instead [ 329.972996][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 329.973026][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 329.973043][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3e8f instead [ 329.973062][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9ca4 instead [ 329.973108][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 329.973125][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 329.973142][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3e8f instead [ 329.973161][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9ca4 instead [ 329.973202][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 329.973218][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 329.973234][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3e8f instead [ 329.973253][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9ca4 instead [ 329.973295][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 329.973311][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 329.973328][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3e8f instead [ 329.973346][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9ca4 instead [ 329.973389][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 329.973405][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 329.973422][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3e8f instead [ 329.973439][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9ca4 instead [ 329.973482][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 329.973497][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 329.973513][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3e8f instead [ 329.973532][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9ca4 instead [ 329.973574][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 329.973590][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 329.973606][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3e8f instead [ 329.973625][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9ca4 instead [ 329.973668][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 329.973684][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 329.973701][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3e8f instead [ 329.973718][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9ca4 instead [ 329.973761][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 329.973777][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 329.973794][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3e8f instead [ 329.973813][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9ca4 instead [ 329.973856][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 329.973872][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 329.973889][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3e8f instead [ 329.973907][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9ca4 instead [ 329.973956][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 329.973973][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 329.973989][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3e8f instead [ 329.974008][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9ca4 instead [ 329.974051][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 329.974068][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 329.974085][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3e8f instead [ 329.974103][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9ca4 instead [ 329.974146][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 329.974162][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 329.974179][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3e8f instead [ 329.974198][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9ca4 instead [ 329.974240][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 329.974256][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 329.974273][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3e8f instead [ 329.974291][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9ca4 instead [ 329.974333][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 329.974349][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 329.974366][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3e8f instead [ 329.974383][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9ca4 instead [ 329.974426][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 329.982183][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 329.982206][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3e8f instead [ 329.982225][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9ca4 instead [ 329.982280][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 329.982297][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 329.982314][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3e8f instead [ 329.982333][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9ca4 instead [ 329.982458][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 329.982481][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 329.982499][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3e8f instead [ 329.982519][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9ca4 instead [ 329.982564][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 329.982580][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 329.982597][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3e8f instead [ 329.982616][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9ca4 instead [ 329.982659][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 329.982676][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 329.982693][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3e8f instead [ 329.982713][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9ca4 instead [ 329.982803][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 329.982821][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 329.982839][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3e8f instead [ 329.982858][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9ca4 instead [ 329.982904][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 329.982921][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 329.982948][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3e8f instead [ 329.982970][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9ca4 instead [ 329.983016][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 329.983033][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 329.983050][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3e8f instead [ 329.983068][ T7837] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9ca4 instead [ 329.983115][ T7837] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 329.983135][ T7837] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 332.219577][ T7853] ubi: mtd0 is already attached to ubi0 [ 332.512858][ T25] rtl8150 6-1:1.0: couldn't reset the device [ 332.513136][ T25] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5 [ 332.573884][ T25] usb 6-1: USB disconnect, device number 3 [ 332.903100][ T7867] FAULT_INJECTION: forcing a failure. [ 332.903100][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 332.903142][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.5.359 Tainted: G L syzkaller #0 PREEMPT(full) [ 332.903161][ T7867] Tainted: [L]=SOFTLOCKUP [ 332.903165][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.903172][ T7867] Call Trace: [ 332.903177][ T7867] [ 332.903182][ T7867] dump_stack_lvl+0xe8/0x150 [ 332.903203][ T7867] should_fail_ex+0x3eb/0x540 [ 332.903219][ T7867] should_failslab+0xa8/0x100 [ 332.903232][ T7867] ? security_file_alloc+0x34/0x310 [ 332.903244][ T7867] kmem_cache_alloc_noprof+0xa1/0x600 [ 332.903260][ T7867] ? rcu_is_watching+0x16/0xb0 [ 332.903273][ T7867] ? security_file_alloc+0x34/0x310 [ 332.903287][ T7867] security_file_alloc+0x34/0x310 [ 332.903298][ T7867] init_file+0x90/0x2b0 [ 332.903312][ T7867] alloc_empty_file+0x74/0x1d0 [ 332.903325][ T7867] path_openat+0x9d/0x1e40 [ 332.903339][ T7867] ? __lock_acquire+0x6df/0x2e50 [ 332.903356][ T7867] do_file_open+0x23e/0x4a0 [ 332.903375][ T7867] ? __pfx_do_file_open+0x10/0x10 [ 332.903404][ T7867] ? _raw_spin_unlock+0x28/0x50 [ 332.903417][ T7867] ? alloc_fd+0x651/0x6c0 [ 332.903438][ T7867] do_sys_openat2+0x115/0x200 [ 332.903453][ T7867] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.903467][ T7867] ? ksys_write+0x242/0x270 [ 332.903482][ T7867] ? __pfx_ksys_write+0x10/0x10 [ 332.903499][ T7867] __x64_sys_openat+0x138/0x170 [ 332.903514][ T7867] do_syscall_64+0x166/0x520 [ 332.903527][ T7867] ? trace_irq_disable+0x3b/0x140 [ 332.903538][ T7867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.903548][ T7867] ? clear_bhb_loop+0x70/0xc0 [ 332.903561][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.903571][ T7867] RIP: 0033:0x7fc9d6f9e159 [ 332.903582][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.903592][ T7867] RSP: 002b:00007fc9d7f42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.903605][ T7867] RAX: ffffffffffffffda RBX: 00007fc9d7225fa0 RCX: 00007fc9d6f9e159 [ 332.903613][ T7867] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 332.903620][ T7867] RBP: 00007fc9d7f42090 R08: 0000000000000000 R09: 0000000000000000 [ 332.903626][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.903632][ T7867] R13: 00007fc9d7226038 R14: 00007fc9d7225fa0 R15: 00007ffc9bb506c8 [ 332.903648][ T7867] [ 334.332324][ T7879] ubi0: detaching mtd0 [ 334.431756][ T7879] ubi0: mtd0 is detached [ 335.627647][ T5743] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 335.919375][ T5743] usb 7-1: unable to get BOS descriptor or descriptor too short [ 335.919967][ T5743] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 336.177081][ T7903] FAULT_INJECTION: forcing a failure. [ 336.177081][ T7903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.177122][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.5.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.177150][ T7903] Tainted: [L]=SOFTLOCKUP [ 336.177157][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 336.177169][ T7903] Call Trace: [ 336.177177][ T7903] [ 336.177185][ T7903] dump_stack_lvl+0xe8/0x150 [ 336.177219][ T7903] should_fail_ex+0x3eb/0x540 [ 336.177246][ T7903] _copy_from_iter+0x1d3/0x1660 [ 336.177270][ T7903] ? __alloc_skb+0x27a/0x7a0 [ 336.177296][ T7903] ? __alloc_skb+0x27a/0x7a0 [ 336.177322][ T7903] ? __alloc_skb+0x27a/0x7a0 [ 336.177346][ T7903] ? __pfx__copy_from_iter+0x10/0x10 [ 336.177367][ T7903] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 336.177396][ T7903] ? __alloc_skb+0x27a/0x7a0 [ 336.177444][ T7903] ? __alloc_skb+0x27a/0x7a0 [ 336.177474][ T7903] ? netlink_sendmsg+0x5fa/0xae0 [ 336.177493][ T7903] ? skb_put+0x112/0x210 [ 336.177521][ T7903] netlink_sendmsg+0x667/0xae0 [ 336.177547][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.177575][ T7903] ? apparmor_socket_sendmsg+0x98/0x360 [ 336.177600][ T7903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.177619][ T7903] sock_sendmsg_nosec+0x13a/0x180 [ 336.177644][ T7903] ____sys_sendmsg+0x54e/0x850 [ 336.177677][ T7903] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.177713][ T7903] ? import_iovec+0x73/0xa0 [ 336.177741][ T7903] ___sys_sendmsg+0x2a5/0x360 [ 336.177767][ T7903] ? __lock_acquire+0x6df/0x2e50 [ 336.177793][ T7903] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.177855][ T7903] ? __fget_files+0x2a/0x420 [ 336.177881][ T7903] ? __fget_files+0x3a2/0x420 [ 336.177917][ T7903] __x64_sys_sendmsg+0x1b1/0x290 [ 336.177948][ T7903] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.177997][ T7903] do_syscall_64+0x166/0x520 [ 336.178021][ T7903] ? trace_irq_disable+0x3b/0x140 [ 336.178041][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.178060][ T7903] ? clear_bhb_loop+0x70/0xc0 [ 336.178084][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.178104][ T7903] RIP: 0033:0x7fc9d6f9e159 [ 336.178123][ T7903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.178140][ T7903] RSP: 002b:00007fc9d7f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.178162][ T7903] RAX: ffffffffffffffda RBX: 00007fc9d7226090 RCX: 00007fc9d6f9e159 [ 336.178178][ T7903] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 336.178190][ T7903] RBP: 00007fc9d7f21090 R08: 0000000000000000 R09: 0000000000000000 [ 336.178203][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.178215][ T7903] R13: 00007fc9d7226128 R14: 00007fc9d7226090 R15: 00007ffc9bb506c8 [ 336.178247][ T7903] [ 336.218515][ T5743] usb 7-1: config 13 has an invalid interface number: 50 but max is 3 [ 336.218544][ T5743] usb 7-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 336.218562][ T5743] usb 7-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 336.218582][ T5743] usb 7-1: config 13 has no interface number 0 [ 336.218635][ T5743] usb 7-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 336.218660][ T5743] usb 7-1: config 13 interface 50 has no altsetting 0 [ 336.244672][ T5743] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.244702][ T5743] usb 7-1: Product: syz [ 336.244716][ T5743] usb 7-1: Manufacturer: syz [ 336.244730][ T5743] usb 7-1: SerialNumber: syz [ 336.248384][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 336.685473][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 336.732144][ T7913] ubi0: attaching mtd0 [ 336.750071][ T7913] ubi0: scanning is finished [ 336.771420][ T9] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 337.012156][ T5743] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 337.020614][ T5743] usb 7-1: USB disconnect, device number 5 [ 337.184074][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 337.184147][ T9] usb 5-1: can't read configurations, error -71 [ 337.659326][ T7913] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 338.514099][ T7920] FAULT_INJECTION: forcing a failure. [ 338.514099][ T7920] name failslab, interval 1, probability 0, space 0, times 0 [ 338.514196][ T7920] CPU: 0 UID: 0 PID: 7920 Comm: syz.6.371 Tainted: G L syzkaller #0 PREEMPT(full) [ 338.514224][ T7920] Tainted: [L]=SOFTLOCKUP [ 338.514231][ T7920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.514244][ T7920] Call Trace: [ 338.514251][ T7920] [ 338.514260][ T7920] dump_stack_lvl+0xe8/0x150 [ 338.514294][ T7920] should_fail_ex+0x3eb/0x540 [ 338.514321][ T7920] should_failslab+0xa8/0x100 [ 338.514348][ T7920] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 338.514398][ T7920] ? __d_alloc+0x37/0x6f0 [ 338.514414][ T7920] ? __d_alloc+0x37/0x6f0 [ 338.514432][ T7920] ? __asan_memset+0x22/0x50 [ 338.514454][ T7920] __d_alloc+0x37/0x6f0 [ 338.514470][ T7920] ? trace_irq_disable+0x3b/0x140 [ 338.514491][ T7920] ? dquot_alloc_inode+0x216/0xa50 [ 338.514524][ T7920] d_alloc_pseudo+0x21/0xc0 [ 338.514544][ T7920] alloc_path_pseudo+0x107/0x220 [ 338.514573][ T7920] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 338.514608][ T7920] alloc_file_pseudo+0xa8/0x1e0 [ 338.514635][ T7920] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 338.514803][ T7920] __shmem_file_setup+0x2e9/0x370 [ 338.514832][ T7920] ? __pfx___shmem_file_setup+0x10/0x10 [ 338.514854][ T7920] ? do_raw_spin_lock+0x12b/0x2f0 [ 338.514961][ T7920] memfd_alloc_file+0x99/0x540 [ 338.514989][ T7920] ? __pfx_memfd_alloc_file+0x10/0x10 [ 338.515011][ T7920] ? alloc_fd+0x651/0x6c0 [ 338.515047][ T7920] __se_sys_memfd_create+0x31f/0x410 [ 338.515078][ T7920] do_syscall_64+0x166/0x520 [ 338.515104][ T7920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.515122][ T7920] ? clear_bhb_loop+0x70/0xc0 [ 338.515144][ T7920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.515164][ T7920] RIP: 0033:0x7f030899e159 [ 338.515183][ T7920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.515200][ T7920] RSP: 002b:00007f0309930e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 338.515224][ T7920] RAX: ffffffffffffffda RBX: 0000000000000516 RCX: 00007f030899e159 [ 338.515241][ T7920] RDX: 00007f0309930ee0 RSI: 0000000000000000 RDI: 00007f0308a35204 [ 338.515255][ T7920] RBP: 0000200000000600 R08: 00000000ffffffff R09: 0000000000000000 [ 338.515269][ T7920] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000580 [ 338.515282][ T7920] R13: 00007f0309930ee0 R14: 00007f0309930ea0 R15: 00002000000005c0 [ 338.515315][ T7920] [ 339.071985][ T7925] FAULT_INJECTION: forcing a failure. [ 339.071985][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 339.096285][ T7925] CPU: 1 UID: 0 PID: 7925 Comm: syz.1.370 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.096321][ T7925] Tainted: [L]=SOFTLOCKUP [ 339.096329][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.096341][ T7925] Call Trace: [ 339.096348][ T7925] [ 339.096358][ T7925] dump_stack_lvl+0xe8/0x150 [ 339.096391][ T7925] should_fail_ex+0x3eb/0x540 [ 339.096419][ T7925] should_failslab+0xa8/0x100 [ 339.096445][ T7925] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 339.096480][ T7925] ? __d_alloc+0x37/0x6f0 [ 339.096496][ T7925] ? __d_alloc+0x37/0x6f0 [ 339.096513][ T7925] ? __asan_memset+0x22/0x50 [ 339.096535][ T7925] __d_alloc+0x37/0x6f0 [ 339.096553][ T7925] ? __pfx_get_random_u32+0x10/0x10 [ 339.096575][ T7925] ? dquot_alloc_inode+0x216/0xa50 [ 339.096607][ T7925] d_alloc_pseudo+0x21/0xc0 [ 339.096627][ T7925] alloc_path_pseudo+0x107/0x220 [ 339.096656][ T7925] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 339.096690][ T7925] alloc_file_pseudo+0xa8/0x1e0 [ 339.096715][ T7925] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 339.096747][ T7925] __shmem_file_setup+0x2e9/0x370 [ 339.096774][ T7925] ? __pfx___shmem_file_setup+0x10/0x10 [ 339.096795][ T7925] ? do_raw_spin_lock+0x12b/0x2f0 [ 339.096825][ T7925] memfd_alloc_file+0x99/0x540 [ 339.096853][ T7925] ? __pfx_memfd_alloc_file+0x10/0x10 [ 339.096876][ T7925] ? alloc_fd+0x651/0x6c0 [ 339.096911][ T7925] __se_sys_memfd_create+0x31f/0x410 [ 339.096940][ T7925] do_syscall_64+0x166/0x520 [ 339.096964][ T7925] ? trace_irq_disable+0x3b/0x140 [ 339.096983][ T7925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.097003][ T7925] ? clear_bhb_loop+0x70/0xc0 [ 339.097026][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.097046][ T7925] RIP: 0033:0x7fb537d9e159 [ 339.097065][ T7925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.097089][ T7925] RSP: 002b:00007fb538c74e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 339.097111][ T7925] RAX: ffffffffffffffda RBX: 00000000000005d8 RCX: 00007fb537d9e159 [ 339.097125][ T7925] RDX: 00007fb538c74ee0 RSI: 0000000000000000 RDI: 00007fb537e35204 [ 339.097139][ T7925] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 339.097153][ T7925] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000640 [ 339.097166][ T7925] R13: 00007fb538c74ee0 R14: 00007fb538c74ea0 R15: 0000200000000680 [ 339.097197][ T7925] [ 339.825726][ T7954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.381'. [ 346.038997][ T8010] fuse: Unknown parameter 'use00000000000000000000' [ 346.057786][ T31] audit: type=1326 audit(1788372438.852:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.057867][ T31] audit: type=1326 audit(1788372438.862:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.077626][ T31] audit: type=1326 audit(1788372438.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.077836][ T31] audit: type=1326 audit(1788372438.882:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.078067][ T31] audit: type=1326 audit(1788372438.882:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.078250][ T31] audit: type=1326 audit(1788372438.882:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.079107][ T31] audit: type=1326 audit(1788372438.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.079148][ T31] audit: type=1326 audit(1788372438.882:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 346.079186][ T31] audit: type=1326 audit(1788372438.882:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.402" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb537d9e159 code=0x7ffc0000 [ 347.101009][ T8014] input: syz1 as /devices/virtual/input/input7 [ 353.276023][ T8061] netlink: 72 bytes leftover after parsing attributes in process `syz.6.414'. [ 362.171676][ T8146] syz.6.454 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 372.767716][ T8252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.767782][ T8252] IPv6: NLM_F_CREATE should be set when creating new route [ 373.979942][ T8259] FAULT_INJECTION: forcing a failure. [ 373.979942][ T8259] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.980017][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.4.485 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.980047][ T8259] Tainted: [L]=SOFTLOCKUP [ 373.980055][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.980071][ T8259] Call Trace: [ 373.980083][ T8259] [ 373.980092][ T8259] dump_stack_lvl+0xe8/0x150 [ 373.980221][ T8259] should_fail_ex+0x3eb/0x540 [ 373.980355][ T8259] _copy_from_user+0x2d/0xb0 [ 373.980416][ T8259] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 373.980480][ T8259] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.980631][ T8259] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 373.980770][ T8259] ? rcu_is_watching+0x16/0xb0 [ 373.980845][ T8259] do_syscall_64+0x166/0x520 [ 373.980948][ T8259] ? trace_irq_disable+0x3b/0x140 [ 373.980990][ T8259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.981027][ T8259] ? clear_bhb_loop+0x70/0xc0 [ 373.981054][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.981075][ T8259] RIP: 0033:0x7f64ae19e159 [ 373.981096][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.981126][ T8259] RSP: 002b:00007f64ac3f5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 373.981151][ T8259] RAX: ffffffffffffffda RBX: 0000200000000080 RCX: 00007f64ae19e159 [ 373.981166][ T8259] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 000000000000127e [ 373.981184][ T8259] RBP: 00007f64ae235024 R08: 0000000000000000 R09: 0000000000000000 [ 373.981199][ T8259] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000140 [ 373.981213][ T8259] R13: 0000200000000180 R14: 0000200000000100 R15: 00007ffe9408e138 [ 373.981246][ T8259] [ 378.036130][ T8267] lo speed is unknown, defaulting to 1000 [ 378.866203][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.866302][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.070088][ T8295] netlink: 'syz.1.495': attribute type 13 has an invalid length. [ 381.095192][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.495'. [ 381.095280][ T8295] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 385.708406][ T8353] kvm [8350]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 385.708647][ T8353] kvm [8350]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 387.227067][ T8376] netlink: 'syz.3.521': attribute type 3 has an invalid length. [ 400.571827][ T8411] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 400.718126][ T8413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.536'. [ 400.731005][ T8417] FAULT_INJECTION: forcing a failure. [ 400.731005][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 400.748606][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.3.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.748646][ T8417] Tainted: [L]=SOFTLOCKUP [ 400.748654][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 400.748667][ T8417] Call Trace: [ 400.748676][ T8417] [ 400.748684][ T8417] dump_stack_lvl+0xe8/0x150 [ 400.748720][ T8417] should_fail_ex+0x3eb/0x540 [ 400.748748][ T8417] ? __pfx_sock_alloc_inode+0x10/0x10 [ 400.748886][ T8417] should_failslab+0xa8/0x100 [ 400.748941][ T8417] ? __pfx_sock_alloc_inode+0x10/0x10 [ 400.748962][ T8417] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 400.749148][ T8417] ? sock_alloc_inode+0x2c/0x1a0 [ 400.749182][ T8417] ? sock_alloc_inode+0x2c/0x1a0 [ 400.749211][ T8417] ? __pfx_sock_alloc_inode+0x10/0x10 [ 400.749231][ T8417] sock_alloc_inode+0x2c/0x1a0 [ 400.749254][ T8417] ? __pfx_sock_alloc_inode+0x10/0x10 [ 400.749274][ T8417] alloc_inode+0x6a/0x1b0 [ 400.749325][ T8417] __sock_create+0x127/0xac0 [ 400.749409][ T8417] __sys_socketpair+0x239/0x560 [ 400.749441][ T8417] __x64_sys_socketpair+0x9b/0xb0 [ 400.749467][ T8417] do_syscall_64+0x166/0x520 [ 400.749493][ T8417] ? trace_irq_disable+0x3b/0x140 [ 400.749514][ T8417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.749578][ T8417] ? clear_bhb_loop+0x70/0xc0 [ 400.749605][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.749626][ T8417] RIP: 0033:0x7ff77b99e159 [ 400.749648][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.749667][ T8417] RSP: 002b:00007ff77c83c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 400.749695][ T8417] RAX: ffffffffffffffda RBX: 00007ff77bc25fa0 RCX: 00007ff77b99e159 [ 400.749711][ T8417] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 400.749724][ T8417] RBP: 00007ff77ba35024 R08: 0000000000000000 R09: 0000000000000000 [ 400.749738][ T8417] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 400.749752][ T8417] R13: 00007ff77bc26038 R14: 00007ff77bc25fa0 R15: 00007ffd88b06928 [ 400.749784][ T8417] [ 400.853370][ T8417] socket: no more sockets [ 402.825183][ T5750] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 402.979005][ T5750] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 402.994784][ T5750] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 402.994875][ T5750] usb 4-1: config 1 has no interface number 0 [ 403.034344][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.034388][ T5750] usb 4-1: Product: syz [ 403.034414][ T5750] usb 4-1: Manufacturer: syz [ 403.034431][ T5750] usb 4-1: SerialNumber: syz [ 403.084031][ T5750] usb 4-1: cannot find UAC_HEADER [ 403.237045][ T5750] snd-usb-audio 4-1:1.3: probe with driver snd-usb-audio failed with error -22 [ 403.311024][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.356139][ T5783] usb 4-1: USB disconnect, device number 7 [ 403.662132][ T8461] usbip-vudc usbip-vudc.0: gadget not bound [ 404.493108][ T8467] netlink: zone id is out of range [ 404.503098][ T8467] netlink: zone id is out of range [ 408.070201][ T8503] openvswitch: netlink: Key type 30 is not supported [ 408.831956][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.6.568'. [ 415.466235][ T6630] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 415.625863][ T6630] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 415.640444][ T6630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.654326][ T6630] usb 4-1: config 0 descriptor?? [ 415.969035][ T6630] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 415.995328][ T1564] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 416.145160][ T1564] usb 5-1: Using ep0 maxpacket: 16 [ 416.191602][ T6630] [drm:udl_init] *ERROR* Selecting channel failed [ 416.306475][ T6630] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 416.314033][ T6630] [drm] Initialized udl on minor 1 [ 416.333589][ T6630] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 416.348519][ T6630] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 416.363369][ T6630] usb 4-1: USB disconnect, device number 8 [ 417.253340][ T8596] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 417.542936][ T8596] lo speed is unknown, defaulting to 1000 [ 418.096831][ T1564] usb 5-1: unable to get BOS descriptor or descriptor too short [ 418.096914][ T1564] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 418.096946][ T1564] usb 5-1: no configurations [ 418.096956][ T1564] usb 5-1: can't read configurations, error -22 [ 421.397929][ T8629] syzkaller0: entered promiscuous mode [ 421.400751][ T8629] syzkaller0: entered allmulticast mode Hü[ 421.772463][ T5626] Bluetooth: hci3: setting up ROME/QCA6390 [ 422.068663][ T8631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 ü[ 424.154645][ T5632] Bluetooth: hci3: command 0xfc00 tx timeout [ 424.170813][ T5626] Bluetooth: hci3: Reading QCA version information failed (-110) [ 424.170968][ T5626] Bluetooth: hci3: Retry BT power ON:0 Hüü[ 426.623465][ T5632] Bluetooth: hci3: command 0xfc00 tx timeout Hü[ 426.623812][ T5626] Bluetooth: hci3: Reading QCA version information failed (-110) [ 426.623955][ T5626] Bluetooth: hci3: Retry BT power ON:1 ü[ 427.248814][ T5623] block nbd0: Receive control failed (result -32) [ 427.297306][ T8678] syzkaller0: entered promiscuous mode [ 427.303161][ T8678] syzkaller0: entered allmulticast mode [ 428.165154][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 428.345324][ T9] usb 5-1: device descriptor read/64, error -71 [ 428.639080][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 428.776453][ T9] usb 5-1: device descriptor read/64, error -71 [ 428.885474][ T9] usb usb5-port1: attempt power cycle [ 429.018841][ T8708] Bluetooth: hci3: command 0xfc00 tx timeout [ 429.026405][ T5626] Bluetooth: hci3: Reading QCA version information failed (-110) [ 429.026453][ T5626] Bluetooth: hci3: Retry BT power ON:2 Hü[ 429.235355][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 429.273542][ T9] usb 5-1: device descriptor read/8, error -71 ü[ 429.619955][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 429.768771][ T9] usb 5-1: device descriptor read/8, error -71 [ 429.891901][ T9] usb usb5-port1: unable to enumerate USB device [ 431.266713][ T8727] syzkaller0: entered promiscuous mode [ 431.266761][ T8727] syzkaller0: entered allmulticast mode [ 431.332465][ T8731] FAULT_INJECTION: forcing a failure. [ 431.332465][ T8731] name failslab, interval 1, probability 0, space 0, times 0 [ 431.332566][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.6.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.332592][ T8731] Tainted: [L]=SOFTLOCKUP [ 431.332598][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 431.332610][ T8731] Call Trace: [ 431.332618][ T8731] [ 431.332627][ T8731] dump_stack_lvl+0xe8/0x150 [ 431.332664][ T8731] should_fail_ex+0x3eb/0x540 [ 431.332693][ T8731] should_failslab+0xa8/0x100 [ 431.332720][ T8731] __kmalloc_cache_noprof+0xa3/0x600 [ 431.332741][ T8731] ? __raw_spin_lock_init+0x45/0x100 [ 431.332808][ T8731] ? __kthread_create_on_node+0x115/0x3d0 [ 431.332869][ T8731] ? __kthread_create_on_node+0x115/0x3d0 [ 431.332899][ T8731] ? __init_swait_queue_head+0xa8/0x150 [ 431.332928][ T8731] ? __pfx_rescuer_thread+0x10/0x10 [ 431.332959][ T8731] __kthread_create_on_node+0x115/0x3d0 [ 431.332990][ T8731] ? __pfx___kthread_create_on_node+0x10/0x10 [ 431.333033][ T8731] ? __pfx_rescuer_thread+0x10/0x10 [ 431.333060][ T8731] ? __pfx_rescuer_thread+0x10/0x10 [ 431.333090][ T8731] kthread_create_on_node+0xeb/0x140 [ 431.333124][ T8731] ? __pfx_kthread_create_on_node+0x10/0x10 [ 431.333154][ T8731] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 431.333174][ T8731] ? init_rescuer+0x167/0x530 [ 431.333195][ T8731] ? init_rescuer+0x167/0x530 [ 431.333224][ T8731] init_rescuer+0x312/0x530 [ 431.333249][ T8731] ? __pfx_init_rescuer+0x10/0x10 [ 431.333281][ T8731] ? wq_adjust_max_active+0x1a2/0x500 [ 431.333311][ T8731] __alloc_workqueue+0x175e/0x1b70 [ 431.333346][ T8731] alloc_workqueue_noprof+0xe3/0x210 [ 431.333371][ T8731] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 431.333398][ T8731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 431.333425][ T8731] nci_register_device+0x22c/0xa00 [ 431.333566][ T8731] ? __pfx_nci_register_device+0x10/0x10 [ 431.333593][ T8731] ? __raw_spin_lock_init+0x45/0x100 [ 431.333623][ T8731] ? __raw_spin_lock_init+0x45/0x100 [ 431.333652][ T8731] ? __init_waitqueue_head+0xa8/0x150 [ 431.333681][ T8731] virtual_ncidev_open+0x129/0x1a0 [ 431.333785][ T8731] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 431.333810][ T8731] misc_open+0x2d5/0x350 [ 431.333960][ T8731] chrdev_open+0x4d9/0x600 [ 431.333985][ T8731] ? __pfx_chrdev_open+0x10/0x10 [ 431.334010][ T8731] ? devcgroup_check_permission+0x31/0x8f0 [ 431.334121][ T8731] ? __pfx_chrdev_open+0x10/0x10 [ 431.334143][ T8731] do_dentry_open+0x80e/0x1360 [ 431.334181][ T8731] vfs_open_consume+0x4a/0x350 [ 431.334203][ T8731] ? path_openat+0x14bb/0x1e40 [ 431.334227][ T8731] path_openat+0x14d7/0x1e40 [ 431.334267][ T8731] do_file_open+0x23e/0x4a0 [ 431.334292][ T8731] ? __pfx_do_file_open+0x10/0x10 [ 431.334335][ T8731] ? _raw_spin_unlock+0x28/0x50 [ 431.334355][ T8731] ? alloc_fd+0x651/0x6c0 [ 431.334391][ T8731] do_sys_openat2+0x115/0x200 [ 431.334416][ T8731] ? __se_sys_futex+0x3a8/0x450 [ 431.334452][ T8731] ? __pfx_do_sys_openat2+0x10/0x10 [ 431.334490][ T8731] ? rcu_is_watching+0x16/0xb0 [ 431.334520][ T8731] __x64_sys_openat+0x138/0x170 [ 431.334552][ T8731] do_syscall_64+0x166/0x520 [ 431.334575][ T8731] ? trace_irq_disable+0x3b/0x140 [ 431.334594][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.334613][ T8731] ? clear_bhb_loop+0x70/0xc0 [ 431.334637][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.334657][ T8731] RIP: 0033:0x7f030899e159 [ 431.334677][ T8731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.334694][ T8731] RSP: 002b:00007f0309931028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 431.334715][ T8731] RAX: ffffffffffffffda RBX: 00007f0308c25fa0 RCX: 00007f030899e159 [ 431.334730][ T8731] RDX: 0000000000000002 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 431.334744][ T8731] RBP: 00007f0308a35024 R08: 0000000000000000 R09: 0000000000000000 [ 431.334757][ T8731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.334768][ T8731] R13: 00007f0308c26038 R14: 00007f0308c25fa0 R15: 00007ffc0738cad8 [ 431.334800][ T8731] [ 431.380820][ T8731] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -ENOMEM [ 431.410310][ T8683] Bluetooth: hci3: command 0xfc00 tx timeout [ 431.413566][ T5626] Bluetooth: hci3: Reading QCA version information failed (-110) [ 432.008016][ T31] audit: type=1800 audit(1788372524.802:20): pid=8714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.624" name="file2" dev="sda1" ino=2053 res=0 errno=0 [ 432.396518][ T6630] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 432.546244][ T6630] usb 4-1: Using ep0 maxpacket: 32 [ 432.556867][ T6630] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 432.567862][ T6630] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 432.567904][ T6630] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 432.568024][ T6630] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 432.568079][ T6630] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 432.568107][ T6630] usb 4-1: config 0 interface 0 has no altsetting 0 [ 432.573519][ T6630] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 432.573549][ T6630] usb 4-1: Product: syz [ 432.573563][ T6630] usb 4-1: Manufacturer: syz [ 432.573578][ T6630] usb 4-1: SerialNumber: syz [ 432.581254][ T6630] usb 4-1: config 0 descriptor?? [ 432.617453][ T6630] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 432.653688][ T6630] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 432.707947][ T8744] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 432.797548][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.635'. [ 432.991852][ T1564] usb 4-1: USB disconnect, device number 9 [ 432.991886][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 433.094847][ T1564] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 434.375168][ T8759] kvm: requested 83809 ns i8254 timer period limited to 200000 ns [ 434.426703][ T8759] kvm: requested 78781 ns i8254 timer period limited to 200000 ns [ 434.474454][ T8759] kvm: requested 149181 ns i8254 timer period limited to 200000 ns [ 434.499942][ T8759] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 434.509126][ T8759] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 434.592094][ T8759] kvm: requested 95542 ns i8254 timer period limited to 200000 ns [ 434.658272][ T8759] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 434.779590][ T8759] kvm: requested 115657 ns i8254 timer period limited to 200000 ns [ 434.795162][ T8759] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 434.805680][ T8759] kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 434.987010][ T8770] sg_write: data in/out 1265126/1 bytes for SCSI command 0x32-- guessing data in; [ 434.987010][ T8770] program syz.3.643 not setting count and/or reply_len properly [ 436.017577][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.647'. [ 436.017668][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.647'. [ 436.362252][ T8788] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'. [ 438.316489][ T8800] 9pnet_virtio: no channels available for device syz [ 439.801663][ T8809] comedi comedi0: das16m1: I/O base address not correctly aligned [ 440.322216][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.322337][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.393610][ T8813] lo speed is unknown, defaulting to 1000 [ 442.596319][ T8830] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 442.707147][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 442.707224][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 442.707242][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x3e8f instead [ 442.707258][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x579b instead [ 442.707272][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 442.707287][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 442.707303][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 442.707324][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 442.707353][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 442.707380][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 442.707423][ T8829] jffs2: Further such events for this erase block will not be printed [ 442.720120][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 442.720164][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 442.720183][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x3e8f instead [ 442.720202][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x579b instead [ 442.720218][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 442.720234][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 442.720250][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 442.720271][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 442.720300][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 442.720330][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 442.720346][ T8829] jffs2: Further such events for this erase block will not be printed [ 442.720688][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 442.720706][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 442.720723][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x3e8f instead [ 442.720741][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x9ca4 instead [ 442.720785][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 442.720811][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 442.720829][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x3e8f instead [ 442.720847][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x9ca4 instead [ 442.720892][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 442.720908][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 442.720925][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x3e8f instead [ 442.720943][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x9ca4 instead [ 442.720988][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 442.721001][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 442.721014][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x3e8f instead [ 442.721030][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x9ca4 instead [ 442.721116][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 442.721134][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 442.721151][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x3e8f instead [ 442.721172][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x9ca4 instead [ 442.721219][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 442.721235][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 442.721251][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3e8f instead [ 442.721269][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x9ca4 instead [ 442.721311][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 442.721327][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 442.721344][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x3e8f instead [ 442.721361][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x9ca4 instead [ 442.721405][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 442.721421][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 442.721437][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x3e8f instead [ 442.721454][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x9ca4 instead [ 442.721497][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 442.721513][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 442.721530][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x3e8f instead [ 442.721547][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x9ca4 instead [ 442.732074][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 442.732101][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 442.732119][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x3e8f instead [ 442.732138][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x9ca4 instead [ 442.732184][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 442.732200][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 442.732217][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x3e8f instead [ 442.732236][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x9ca4 instead [ 442.732280][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 442.732296][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 442.732312][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x3e8f instead [ 442.732330][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x9ca4 instead [ 442.732373][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 442.732389][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 442.732405][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x3e8f instead [ 442.732422][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x9ca4 instead [ 442.732463][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 442.732479][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 442.732495][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x3e8f instead [ 442.732513][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x9ca4 instead [ 442.732557][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 442.732572][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 442.732589][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x3e8f instead [ 442.732606][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x9ca4 instead [ 442.732648][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 442.732664][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 442.732681][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x3e8f instead [ 442.732700][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x9ca4 instead [ 442.732742][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 442.732757][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 442.732774][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x3e8f instead [ 442.732792][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x9ca4 instead [ 442.732834][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 442.732850][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 442.732866][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3e8f instead [ 442.732885][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x9ca4 instead [ 442.733013][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 442.733036][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 442.733050][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x3e8f instead [ 442.733069][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x9ca4 instead [ 442.733115][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 442.733132][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 442.733158][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x3e8f instead [ 442.733181][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x9ca4 instead [ 442.733230][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 442.733247][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 442.733263][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x3e8f instead [ 442.733279][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x9ca4 instead [ 442.733315][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 442.733332][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 442.733349][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x3e8f instead [ 442.733369][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x9ca4 instead [ 442.733415][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 442.733432][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 442.733451][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x3e8f instead [ 442.751907][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x9ca4 instead [ 442.751983][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 442.752002][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 442.752020][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x3e8f instead [ 442.752039][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x9ca4 instead [ 442.752084][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 442.752102][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 442.752119][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x3e8f instead [ 442.752139][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x9ca4 instead [ 442.752185][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 442.752201][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 442.752219][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x3e8f instead [ 442.752238][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x9ca4 instead [ 442.752281][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 442.752297][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 442.752315][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x3e8f instead [ 442.752334][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x9ca4 instead [ 442.752377][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 442.752394][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 442.752411][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x3e8f instead [ 442.752430][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x9ca4 instead [ 442.752475][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 442.752490][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 442.752508][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x3e8f instead [ 442.752527][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x9ca4 instead [ 442.752572][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 442.752587][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 442.752604][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x3e8f instead [ 442.752623][ T8829] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x9ca4 instead [ 442.752786][ T8829] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 442.752797][ T8829] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 444.721136][ T8842] 9pnet_virtio: no channels available for device syz [ 450.715651][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 450.888310][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 450.889413][ T9] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 450.890971][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.890997][ T9] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 450.891042][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.129671][ T9] usb 6-1: USB disconnect, device number 4 [ 452.071965][ T8896] hub 8-0:1.0: USB hub found [ 452.079681][ T8896] hub 8-0:1.0: 1 port detected [ 454.738336][ T8921] netlink: 'syz.1.684': attribute type 11 has an invalid length. [ 454.853350][ T8932] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 454.973359][ T8932] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 454.974998][ T8932] overlayfs: failed to look up (tracing) for ino (-66) [ 456.234026][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 456.234213][ T8933] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 459.769542][ T5626] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 459.964639][ T8935] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 459.968420][ T8928] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 459.968446][ T8928] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 459.971352][ T8941] netlink: 64 bytes leftover after parsing attributes in process `syz.3.692'. [ 460.974324][ T8977] netlink: 'syz.6.701': attribute type 2 has an invalid length. [ 460.990203][ T8977] netlink: 'syz.6.701': attribute type 9 has an invalid length. [ 461.363615][ T8982] Cannot find set identified by id 0 to match [ 462.749995][ T8991] netlink: 104 bytes leftover after parsing attributes in process `syz.1.703'. [ 462.873589][ T8992] netlink: 'syz.6.706': attribute type 4 has an invalid length. [ 463.485522][ T1564] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 463.645469][ T1564] usb 4-1: Using ep0 maxpacket: 16 [ 468.187942][ T1564] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.196793][ T1564] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 468.207691][ T1564] usb 4-1: no configurations [ 468.212662][ T1564] usb 4-1: can't read configurations, error -22 [ 468.940289][ T9054] hub 8-0:1.0: USB hub found [ 468.946099][ T9054] hub 8-0:1.0: 1 port detected [ 470.049616][ T9057] IPv6: sit1: Disabled Multicast RS [ 470.063898][ T9057] sit1: entered allmulticast mode [ 471.512893][ T9074] syzkaller0: entered promiscuous mode [ 471.512943][ T9074] syzkaller0: entered allmulticast mode [ 471.529882][ T9077] netlink: 'syz.1.732': attribute type 1 has an invalid length. [ 471.570237][ T9074] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 471.900539][ T9078] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 471.900569][ T9078] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.928090][ T9078] vhci_hcd vhci_hcd.0: Device attached [ 472.205433][ T10] usb 42-1: SetAddress Request (2) to port 0 [ 472.205540][ T10] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 472.500179][ T9081] vhci_hcd: connection reset by peer [ 472.542512][ T6016] vhci_hcd vhci_hcd.4: stop threads [ 472.556573][ T6016] vhci_hcd vhci_hcd.4: release socket [ 472.582525][ T6016] vhci_hcd vhci_hcd.4: disconnect device [ 473.008214][ T31] audit: type=1400 audit(1788372565.792:21): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9095 comm="syz.3.739" [ 473.462944][ T43] kernel write not supported for file /bus/input/handlers (pid: 43 comm: kworker/1:1) [ 474.651351][ T9113] hub 8-0:1.0: USB hub found [ 474.654237][ T9113] hub 8-0:1.0: 1 port detected [ 475.335186][ T9116] netlink: 64 bytes leftover after parsing attributes in process `syz.5.743'. [ 476.997706][ T9138] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 477.012091][ T9143] netlink: 84 bytes leftover after parsing attributes in process `syz.1.753'. [ 477.245594][ T10] usb 42-1: device descriptor read/8, error -110 [ 477.542533][ T9154] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 477.551932][ T9154] netlink: 'syz.1.756': attribute type 268 has an invalid length. [ 477.562534][ T9154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.756'. [ 477.637123][ T9154] program syz.1.756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.650602][ T10] usb usb42-port1: attempt power cycle [ 477.712005][ T9156] netlink: 64 bytes leftover after parsing attributes in process `syz.6.757'. [ 478.760677][ T10] usb usb42-port1: unable to enumerate USB device [ 479.285242][ T1564] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 479.440698][ T1564] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.445956][ T1564] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 479.445991][ T1564] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 479.446029][ T1564] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.469407][ T9186] netlink: 'syz.4.767': attribute type 10 has an invalid length. [ 479.507444][ T9171] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 479.933589][ T1564] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 481.654197][ T1564] usb 7-1: USB disconnect, device number 6 [ 483.004587][ T9224] syz.6.782 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 483.004690][ T9224] CPU: 0 UID: 0 PID: 9224 Comm: syz.6.782 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.004718][ T9224] Tainted: [L]=SOFTLOCKUP [ 483.004726][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.004736][ T9224] Call Trace: [ 483.004743][ T9224] [ 483.004752][ T9224] dump_stack_lvl+0xe8/0x150 [ 483.004789][ T9224] dump_header+0xd3/0x4b0 [ 483.004836][ T9224] oom_kill_process+0x3ab/0x9e0 [ 483.004876][ T9224] out_of_memory+0xfb1/0x13b0 [ 483.004900][ T9224] ? try_charge_memcg+0xc16/0x15c0 [ 483.004939][ T9224] ? __pfx_out_of_memory+0x10/0x10 [ 483.004962][ T9224] ? do_raw_spin_unlock+0xf5/0x200 [ 483.004999][ T9224] try_charge_memcg+0xccc/0x15c0 [ 483.005044][ T9224] ? __pfx_try_charge_memcg+0x10/0x10 [ 483.005077][ T9224] ? percpu_ref_tryget+0x15/0x180 [ 483.005113][ T9224] ? __memcg_kmem_charge_page+0x15a/0x520 [ 483.005138][ T9224] __memcg_kmem_charge_page+0x330/0x520 [ 483.005159][ T9224] ? __memcg_kmem_charge_page+0x15a/0x520 [ 483.005184][ T9224] __alloc_frozen_pages_noprof+0x24a/0x5a0 [ 483.005212][ T9224] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 483.005242][ T9224] ? policy_nodemask+0x2cc/0x8e0 [ 483.005273][ T9224] alloc_pages_mpol+0x21e/0x390 [ 483.005303][ T9224] alloc_pages_noprof+0xb1/0x2b0 [ 483.005614][ T9224] __vmalloc_node_range_noprof+0xd4a/0x1690 [ 483.005710][ T9224] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 483.005740][ T9224] ? bpf_check+0xb9/0x2e40 [ 483.005769][ T9224] ? rcu_is_watching+0x16/0xb0 [ 483.005794][ T9224] ? bpf_check+0xb9/0x2e40 [ 483.005952][ T9224] ? rcu_is_watching+0x16/0xb0 [ 483.005990][ T9224] ? bpf_check+0xb9/0x2e40 [ 483.006012][ T9224] __kvmalloc_node_noprof+0x5a1/0x820 [ 483.006037][ T9224] ? bpf_check+0xb9/0x2e40 [ 483.006058][ T9224] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 483.006081][ T9224] ? bpf_check+0xb9/0x2e40 [ 483.006108][ T9224] bpf_check+0xb9/0x2e40 [ 483.006131][ T9224] ? lock_acquire+0x115/0x350 [ 483.006159][ T9224] ? ktime_get_with_offset+0x93/0x2d0 [ 483.006183][ T9224] ? __pfx_bpf_check+0x10/0x10 [ 483.006204][ T9224] ? __asan_memset+0x22/0x50 [ 483.006224][ T9224] ? bpf_obj_name_cpy+0x194/0x1e0 [ 483.006255][ T9224] bpf_prog_load+0x14d1/0x1c20 [ 483.006290][ T9224] ? __pfx_bpf_prog_load+0x10/0x10 [ 483.006329][ T9224] ? __might_fault+0xaf/0x130 [ 483.006362][ T9224] __sys_bpf+0xd0d/0xd90 [ 483.006459][ T9224] ? __pfx___sys_bpf+0x10/0x10 [ 483.006485][ T9224] ? do_futex+0x3e7/0x4e0 [ 483.006542][ T9224] ? rcu_is_watching+0x16/0xb0 [ 483.006571][ T9224] __x64_sys_bpf+0xba/0xd0 [ 483.006595][ T9224] do_syscall_64+0x166/0x520 [ 483.006622][ T9224] ? trace_irq_disable+0x3b/0x140 [ 483.006641][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.006661][ T9224] ? clear_bhb_loop+0x70/0xc0 [ 483.006686][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.006706][ T9224] RIP: 0033:0x7f030899e159 [ 483.006727][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.006744][ T9224] RSP: 002b:00007f0309910028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.006766][ T9224] RAX: ffffffffffffffda RBX: 00007f0308c26090 RCX: 00007f030899e159 [ 483.006782][ T9224] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 483.006795][ T9224] RBP: 00007f0308a35024 R08: 0000000000000000 R09: 0000000000000000 [ 483.006808][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.006820][ T9224] R13: 00007f0308c26128 R14: 00007f0308c26090 R15: 00007ffc0738cad8 [ 483.006854][ T9224] [ 483.068473][ T9224] memory: usage 96kB, limit 96kB, failcnt 70 [ 483.068493][ T9224] memory+swap: usage 104kB, limit 9007199254740988kB, failcnt 0 [ 483.068508][ T9224] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 483.068520][ T9224] Memory cgroup stats for /syz6/test: [ 483.068696][ T9224] cache 0 [ 483.068705][ T9224] rss 0 [ 483.068712][ T9224] rss_huge 0 [ 483.068717][ T9224] shmem 0 [ 483.068724][ T9224] mapped_file 0 [ 483.068730][ T9224] dirty 0 [ 483.068737][ T9224] writeback 0 [ 483.068743][ T9224] workingset_refault_anon 0 [ 483.068751][ T9224] workingset_refault_file 0 [ 483.068758][ T9224] swap 0 [ 483.068765][ T9224] swapcached 0 [ 483.068772][ T9224] pgpgin 0 [ 483.068778][ T9224] pgpgout 0 [ 483.068785][ T9224] pgfault 0 [ 483.068791][ T9224] pgmajfault 0 [ 483.068798][ T9224] inactive_anon 0 [ 483.068806][ T9224] active_anon 0 [ 483.068812][ T9224] inactive_file 0 [ 483.068820][ T9224] active_file 0 [ 483.068826][ T9224] unevictable 0 [ 483.068833][ T9224] hierarchical_memory_limit 98304 [ 483.068841][ T9224] hierarchical_memsw_limit 9223372036854771712 [ 483.068849][ T9224] total_cache 0 [ 483.069006][ T9224] total_rss 0 [ 483.069021][ T9224] total_rss_huge 0 [ 483.069029][ T9224] total_shmem 0 [ 483.069036][ T9224] total_mapped_file 0 [ 483.069044][ T9224] total_dirty 0 [ 483.069050][ T9224] total_writeback 0 [ 483.069058][ T9224] total_workingset_refault_anon 0 [ 483.069066][ T9224] total_workingset_refault_file 0 [ 483.069073][ T9224] total_swap 0 [ 483.069080][ T9224] total_swapcached 0 [ 483.069087][ T9224] total_pgpgin 0 [ 483.069094][ T9224] total_pgpgout 0 [ 483.069101][ T9224] total_pgfault 0 [ 483.069108][ T9224] total_pgmajfault 0 [ 483.069115][ T9224] total_inactive_anon 0 [ 483.069123][ T9224] total_active_anon 0 [ 483.069130][ T9224] total_inactive_file 0 [ 483.069137][ T9224] total_active_file 0 [ 483.069145][ T9224] total_unevictable 0 [ 483.069152][ T9224] anon_cost 0 [ 483.069158][ T9224] file_cost 0 [ 483.069166][ T9224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6/test,task_memcg=/syz6/test,task=syz.6.782,pid=9221,uid=0 [ 483.072904][ T9224] Memory cgroup out of memory: Killed process 9221 (syz.6.782) total-vm:102516kB, anon-rss:1444kB, file-rss:23060kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 483.204820][ T9224] syz.6.782 (9224) used greatest stack depth: 19040 bytes left [ 484.855839][ T1564] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 485.026099][ T1564] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 485.036960][ T1564] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 485.046006][ T1564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.046056][ T1564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 485.046108][ T1564] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.081216][ T1564] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 485.081321][ T1564] usb 2-1: Product: syz [ 485.081366][ T1564] usb 2-1: Manufacturer: syz [ 485.136767][ T1564] cdc_wdm 2-1:1.0: skipping garbage [ 485.142339][ T1564] cdc_wdm 2-1:1.0: skipping garbage [ 485.156244][ T1564] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 485.162816][ T1564] cdc_wdm 2-1:1.0: Unknown control protocol [ 485.339278][ T1564] usb 2-1: USB disconnect, device number 6 [ 485.865308][ T1564] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 486.027439][ T1564] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 486.043949][ T1564] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 486.044097][ T1564] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.044119][ T1564] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 486.044169][ T1564] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.108211][ T1564] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 486.118642][ T1564] usb 2-1: Product: syz [ 486.118689][ T1564] usb 2-1: Manufacturer: syz [ 486.157747][ T1564] cdc_wdm 2-1:1.0: skipping garbage [ 486.165063][ T1564] cdc_wdm 2-1:1.0: skipping garbage [ 486.202680][ T1564] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 486.214036][ T1564] cdc_wdm 2-1:1.0: Unknown control protocol [ 487.343106][ T9267] FAULT_INJECTION: forcing a failure. [ 487.343106][ T9267] name failslab, interval 1, probability 0, space 0, times 0 [ 487.343175][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.5.798 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.343203][ T9267] Tainted: [L]=SOFTLOCKUP [ 487.343210][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.343220][ T9267] Call Trace: [ 487.343227][ T9267] [ 487.343236][ T9267] dump_stack_lvl+0xe8/0x150 [ 487.343270][ T9267] should_fail_ex+0x3eb/0x540 [ 487.343299][ T9267] ? __alloc_skb+0x1db/0x7a0 [ 487.343423][ T9267] should_failslab+0xa8/0x100 [ 487.343452][ T9267] ? __alloc_skb+0x1db/0x7a0 [ 487.343474][ T9267] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 487.343507][ T9267] ? __alloc_skb+0x18d/0x7a0 [ 487.343532][ T9267] ? __alloc_skb+0x1db/0x7a0 [ 487.343561][ T9267] __alloc_skb+0x1db/0x7a0 [ 487.343601][ T9267] netlink_dump+0x1e7/0xee0 [ 487.343710][ T9267] ? __mutex_unlock_slowpath+0x731/0x900 [ 487.343742][ T9267] ? __pfx_netlink_dump+0x10/0x10 [ 487.343785][ T9267] ? genl_start+0x57e/0x6d0 [ 487.343813][ T9267] __netlink_dump_start+0x589/0x7b0 [ 487.343850][ T9267] genl_family_rcv_msg_dumpit+0x213/0x310 [ 487.343879][ T9267] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 487.343903][ T9267] ? genl_get_cmd+0x4d6/0x960 [ 487.343932][ T9267] ? __pfx_genl_start+0x10/0x10 [ 487.343954][ T9267] ? __pfx_genl_dumpit+0x10/0x10 [ 487.343976][ T9267] ? __pfx_genl_done+0x10/0x10 [ 487.344001][ T9267] ? __dev_queue_xmit+0x29b/0x3820 [ 487.344059][ T9267] genl_rcv_msg+0x5e1/0x7a0 [ 487.344091][ T9267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.344114][ T9267] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 487.344136][ T9267] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 487.344158][ T9267] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 487.344182][ T9267] ? __pfx_ref_tracker_free+0x10/0x10 [ 487.344252][ T9267] netlink_rcv_skb+0x226/0x4a0 [ 487.344284][ T9267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 487.344311][ T9267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.344358][ T9267] ? down_read+0x2be/0x330 [ 487.344389][ T9267] genl_rcv+0x28/0x40 [ 487.344411][ T9267] netlink_unicast+0x7bd/0x940 [ 487.344450][ T9267] netlink_sendmsg+0x7c3/0xae0 [ 487.344475][ T9267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.344503][ T9267] ? apparmor_socket_sendmsg+0x98/0x360 [ 487.344561][ T9267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.344586][ T9267] sock_sendmsg_nosec+0x13a/0x180 [ 487.344613][ T9267] ____sys_sendmsg+0x54e/0x850 [ 487.344648][ T9267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.344683][ T9267] ? import_iovec+0x73/0xa0 [ 487.344742][ T9267] ___sys_sendmsg+0x2a5/0x360 [ 487.344769][ T9267] ? __lock_acquire+0x6df/0x2e50 [ 487.344795][ T9267] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.344828][ T9267] ? futex_wait+0x2a2/0x390 [ 487.344885][ T9267] ? __fget_files+0x2a/0x420 [ 487.344913][ T9267] ? __fget_files+0x3a2/0x420 [ 487.344951][ T9267] __x64_sys_sendmsg+0x1b1/0x290 [ 487.344981][ T9267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.345030][ T9267] do_syscall_64+0x166/0x520 [ 487.345054][ T9267] ? trace_irq_disable+0x3b/0x140 [ 487.345072][ T9267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.345091][ T9267] ? clear_bhb_loop+0x70/0xc0 [ 487.345115][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.345135][ T9267] RIP: 0033:0x7fc9d6f9e159 [ 487.345155][ T9267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.345172][ T9267] RSP: 002b:00007fc9d7f42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.345201][ T9267] RAX: ffffffffffffffda RBX: 00007fc9d7225fa0 RCX: 00007fc9d6f9e159 [ 487.345216][ T9267] RDX: 0000000000000800 RSI: 00002000000029c0 RDI: 0000000000000005 [ 487.345229][ T9267] RBP: 00007fc9d7035024 R08: 0000000000000000 R09: 0000000000000000 [ 487.345241][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.345253][ T9267] R13: 00007fc9d7226038 R14: 00007fc9d7225fa0 R15: 00007ffc9bb506c8 [ 487.345286][ T9267] [ 487.815458][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 487.910610][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 487.910776][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 487.910788][ T6630] usb 2-1: USB disconnect, device number 7 [ 487.910797][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 489.250040][ T9294] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 491.185819][ T9281] lo speed is unknown, defaulting to 1000 [ 491.540921][ T9316] capability: warning: `syz.5.813' uses 32-bit capabilities (legacy support in use) [ 493.162038][ T9328] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 496.624940][ T9349] netlink: 'syz.1.825': attribute type 4 has an invalid length. [ 496.741284][ T9351] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 498.285690][ T9378] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 500.030490][ T6630] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 500.669500][ T6630] usb 6-1: Using ep0 maxpacket: 8 [ 500.682172][ T6630] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 500.701899][ T6630] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 500.701959][ T6630] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 500.702011][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 500.702036][ T6630] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 500.702055][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.702076][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 500.702100][ T6630] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 500.702135][ T6630] usb 6-1: config 168 interface 0 has no altsetting 0 [ 500.711033][ T6630] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 500.711069][ T6630] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 500.711104][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 500.711151][ T6630] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 500.711173][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.711198][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 500.711224][ T6630] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 500.711249][ T6630] usb 6-1: config 168 interface 0 has no altsetting 0 [ 500.712372][ T6630] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 500.712404][ T6630] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 500.712441][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 500.712466][ T6630] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 500.712489][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 500.712513][ T6630] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 500.712538][ T6630] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 500.712562][ T6630] usb 6-1: config 168 interface 0 has no altsetting 0 [ 500.731415][ T6630] usb 6-1: string descriptor 0 read error: -22 [ 500.731547][ T6630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.777120][ T6630] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 501.129291][ T9379] bridge1: entered promiscuous mode [ 501.129328][ T9379] bridge1: entered allmulticast mode [ 501.168623][ T43] usb 6-1: USB disconnect, device number 5 [ 501.702704][ T9404] netlink: 64 bytes leftover after parsing attributes in process `syz.1.844'. [ 501.727100][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.727189][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.823028][ T31] audit: type=1800 audit(1788372595.622:22): pid=9412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.847" name="addr_list" dev="configfs" ino=23576 res=0 errno=0 [ 503.572093][ T9427] file system registered [ 503.663637][ T9428] ffs_data_put(): freeing [ 504.147937][ T9435] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.277725][ T9437] ip_tables: iptables: counters copy to user failed while replacing table [ 505.517557][ T9459] netlink: 28 bytes leftover after parsing attributes in process `syz.5.862'. [ 506.728671][ T9433] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 508.469130][ T5626] Bluetooth: hci1: unexpected event for opcode 0x0419 [ 508.897577][ T9515] FAULT_INJECTION: forcing a failure. [ 508.897577][ T9515] name failslab, interval 1, probability 0, space 0, times 0 [ 508.897636][ T9515] CPU: 0 UID: 0 PID: 9515 Comm: syz.4.884 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.897664][ T9515] Tainted: [L]=SOFTLOCKUP [ 508.897670][ T9515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 508.897680][ T9515] Call Trace: [ 508.897687][ T9515] [ 508.897695][ T9515] dump_stack_lvl+0xe8/0x150 [ 508.897733][ T9515] should_fail_ex+0x3eb/0x540 [ 508.897760][ T9515] ? __alloc_skb+0x1db/0x7a0 [ 508.897787][ T9515] should_failslab+0xa8/0x100 [ 508.897824][ T9515] ? __alloc_skb+0x1db/0x7a0 [ 508.897845][ T9515] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 508.897873][ T9515] ? __alloc_skb+0x18d/0x7a0 [ 508.897897][ T9515] ? __alloc_skb+0x1db/0x7a0 [ 508.897927][ T9515] __alloc_skb+0x1db/0x7a0 [ 508.897956][ T9515] inet_netconf_notify_devconf+0x173/0x240 [ 508.898110][ T9515] inetdev_event+0x779/0x15e0 [ 508.898145][ T9515] ? __pfx_inetdev_event+0x10/0x10 [ 508.898186][ T9515] notifier_call_chain+0x1a5/0x3d0 [ 508.898227][ T9515] netif_set_mtu_ext+0x5ac/0x830 [ 508.898261][ T9515] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 508.898288][ T9515] ? __pfx___mutex_trylock_common+0x10/0x10 [ 508.898319][ T9515] ? trace_contention_end+0x3d/0x140 [ 508.898346][ T9515] ? __mutex_lock+0x30a/0x15a0 [ 508.898378][ T9515] netif_set_mtu+0xd7/0x1b0 [ 508.898407][ T9515] ? __pfx_netif_set_mtu+0x10/0x10 [ 508.898447][ T9515] ? __dev_get_by_name+0xe5/0x130 [ 508.898507][ T9515] dev_set_mtu+0x105/0x210 [ 508.898567][ T9515] dev_ioctl+0x7b4/0x1150 [ 508.898634][ T9515] sock_do_ioctl+0x23e/0x320 [ 508.898658][ T9515] ? __pfx_sock_do_ioctl+0x10/0x10 [ 508.898676][ T9515] ? hook_file_ioctl+0x1f2/0x600 [ 508.898717][ T9515] sock_ioctl+0x57a/0x7e0 [ 508.898739][ T9515] ? __pfx_sock_ioctl+0x10/0x10 [ 508.898760][ T9515] ? __fget_files+0x2a/0x420 [ 508.898786][ T9515] ? __fget_files+0x3a2/0x420 [ 508.898823][ T9515] ? __fget_files+0x2a/0x420 [ 508.898854][ T9515] ? bpf_lsm_file_ioctl+0x9/0x20 [ 508.898893][ T9515] ? __pfx_sock_ioctl+0x10/0x10 [ 508.898912][ T9515] __se_sys_ioctl+0xfc/0x170 [ 508.898937][ T9515] do_syscall_64+0x166/0x520 [ 508.898962][ T9515] ? trace_irq_disable+0x3b/0x140 [ 508.898981][ T9515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.899001][ T9515] ? clear_bhb_loop+0x70/0xc0 [ 508.899025][ T9515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.899044][ T9515] RIP: 0033:0x7f64ae19e159 [ 508.899063][ T9515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.899080][ T9515] RSP: 002b:00007f64ac3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.899102][ T9515] RAX: ffffffffffffffda RBX: 00007f64ae425fa0 RCX: 00007f64ae19e159 [ 508.899118][ T9515] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000004 [ 508.899131][ T9515] RBP: 00007f64ae235024 R08: 0000000000000000 R09: 0000000000000000 [ 508.899144][ T9515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.899157][ T9515] R13: 00007f64ae426038 R14: 00007f64ae425fa0 R15: 00007ffe9408e138 [ 508.899190][ T9515] [ 511.557887][ T9532] capability: warning: `syz.5.891' uses deprecated v2 capabilities in a way that may be insecure [ 511.978646][ T9561] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 513.190197][ T5626] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 513.190298][ T5626] Bluetooth: hci1: Injecting HCI hardware error event [ 513.194004][ T5626] Bluetooth: hci1: hardware error 0x00 [ 515.248809][ T5626] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 520.374035][ T50] IPVS: starting estimator thread 0... [ 520.466730][ T9653] IPVS: using max 26 ests per chain, 62400 per kthread [ 522.072903][ T9677] input: syz0 as /devices/virtual/input/input9 [ 527.276412][ T9734] netlink: 64 bytes leftover after parsing attributes in process `syz.6.965'. [ 530.683002][ T9775] netlink: zone id is out of range [ 530.683038][ T9775] netlink: zone id is out of range [ 530.683068][ T9775] netlink: zone id is out of range [ 530.683080][ T9775] netlink: zone id is out of range [ 530.683091][ T9775] netlink: zone id is out of range [ 530.683101][ T9775] netlink: zone id is out of range [ 530.683112][ T9775] netlink: zone id is out of range [ 530.683122][ T9775] netlink: zone id is out of range [ 530.683132][ T9775] netlink: zone id is out of range [ 530.683143][ T9775] netlink: set zone limit has 4 unknown bytes [ 531.031575][ T9780] netlink: 64 bytes leftover after parsing attributes in process `syz.6.979'. [ 532.275181][ T31] audit: type=1400 audit(1788372625.062:23): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9789 comm="syz.4.981" [ 532.665690][ T25] kernel read not supported for file /video9 (pid: 25 comm: kworker/1:0) [ 533.662930][ T5626] [ 533.665403][ T5626] ====================================================== [ 533.673482][ T5626] WARNING: possible circular locking dependency detected [ 533.680750][ T5626] syzkaller #0 Tainted: G L [ 533.687239][ T5626] ------------------------------------------------------ [ 533.695003][ T5626] kworker/u9:3/5626 is trying to acquire lock: [ 533.702735][ T5626] ffffffff903ffe40 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_security_cfm+0x90/0x820 [ 533.712472][ T5626] [ 533.712472][ T5626] but task is already holding lock: [ 533.719984][ T5626] ffffffff903db7c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80 [ 533.732262][ T5626] [ 533.732262][ T5626] which lock already depends on the new lock. [ 533.732262][ T5626] [ 533.744808][ T5626] [ 533.744808][ T5626] the existing dependency chain (in reverse order) is: [ 533.756086][ T5626] [ 533.756086][ T5626] -> #2 (hci_cb_list_lock){+.+.}-{4:4}: [ 533.764461][ T5626] __mutex_lock+0x19c/0x15a0 [ 533.771065][ T5626] hci_remote_features_evt+0x53d/0x950 [ 533.777702][ T5626] hci_event_packet+0x6cd/0xf10 [ 533.783488][ T5626] hci_rx_work+0x3ee/0x1020 [ 533.788789][ T5626] process_scheduled_works+0xc3d/0x1630 [ 533.794985][ T5626] worker_thread+0xa47/0xfb0 [ 533.800242][ T5626] kthread+0x38b/0x480 [ 533.805139][ T5626] ret_from_fork+0x514/0xb70 [ 533.810504][ T5626] ret_from_fork_asm+0x1a/0x30 [ 533.815830][ T5626] [ 533.815830][ T5626] -> #1 (&hdev->lock){+.+.}-{4:4}: [ 533.823535][ T5626] __mutex_lock+0x19c/0x15a0 [ 533.829199][ T5626] l2cap_chan_connect+0x9c/0x1110 [ 533.835759][ T5626] l2cap_sock_connect+0x5e4/0x7e0 [ 533.841536][ T5626] kernel_connect+0x141/0x1c0 [ 533.846782][ T5626] rfcomm_dlc_open+0x644/0x1080 [ 533.852513][ T5626] rfcomm_sock_connect+0x2ed/0x650 [ 533.858247][ T5626] __sys_connect+0x316/0x450 [ 533.863506][ T5626] __x64_sys_connect+0x7a/0x90 [ 533.869354][ T5626] do_syscall_64+0x166/0x520 [ 533.876597][ T5626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.884532][ T5626] [ 533.884532][ T5626] -> #0 (rfcomm_mutex){+.+.}-{4:4}: [ 533.893346][ T5626] __lock_acquire+0x15ff/0x2e50 [ 533.898743][ T5626] lock_acquire+0x115/0x350 [ 533.904231][ T5626] __mutex_lock+0x19c/0x15a0 [ 533.909951][ T5626] rfcomm_security_cfm+0x90/0x820 [ 533.915709][ T5626] hci_auth_complete_evt+0x39f/0xc80 [ 533.922018][ T5626] hci_event_packet+0x6cd/0xf10 [ 533.928011][ T5626] hci_rx_work+0x3ee/0x1020 [ 533.934216][ T5626] process_scheduled_works+0xc3d/0x1630 [ 533.942879][ T5626] worker_thread+0xa47/0xfb0 [ 533.948254][ T5626] kthread+0x38b/0x480 [ 533.952996][ T5626] ret_from_fork+0x514/0xb70 [ 533.958303][ T5626] ret_from_fork_asm+0x1a/0x30 [ 533.963610][ T5626] [ 533.963610][ T5626] other info that might help us debug this: [ 533.963610][ T5626] [ 533.973880][ T5626] Chain exists of: [ 533.973880][ T5626] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 533.973880][ T5626] [ 533.986399][ T5626] Possible unsafe locking scenario: [ 533.986399][ T5626] [ 533.994128][ T5626] CPU0 CPU1 [ 533.999494][ T5626] ---- ---- [ 534.005040][ T5626] lock(hci_cb_list_lock); [ 534.009901][ T5626] lock(&hdev->lock); [ 534.016583][ T5626] lock(hci_cb_list_lock); [ 534.023794][ T5626] lock(rfcomm_mutex); [ 534.028207][ T5626] [ 534.028207][ T5626] *** DEADLOCK *** [ 534.028207][ T5626] [ 534.037147][ T5626] locks held by kworker/u9:3/5626: 4, last CPU#0: [ 534.043996][ T5626] #0: ffff8880639fa940 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 534.055967][ T5626] #1: ffffc90003a97c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 534.068352][ T5626] #2: ffff88807cb980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x95/0xc80 [ 534.082864][ T5626] #3: ffffffff903db7c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_auth_complete_evt+0x318/0xc80 [ 534.094327][ T5626] [ 534.094327][ T5626] stack backtrace: [ 534.100968][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.113235][ T5626] Tainted: [L]=SOFTLOCKUP [ 534.118212][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.129782][ T5626] Workqueue: hci4 hci_rx_work [ 534.136765][ T5626] Call Trace: [ 534.141930][ T5626] [ 534.145456][ T5626] dump_stack_lvl+0xe8/0x150 [ 534.152798][ T5626] print_circular_bug+0x2e2/0x300 [ 534.158932][ T5626] check_noncircular+0x12f/0x150 [ 534.164995][ T5626] __lock_acquire+0x15ff/0x2e50 [ 534.171636][ T5626] ? __mutex_trylock_common+0x15f/0x270 [ 534.177662][ T5626] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.185441][ T5626] ? rcu_is_watching+0x16/0xb0 [ 534.190423][ T5626] ? trace_contention_end+0x3d/0x140 [ 534.195982][ T5626] lock_acquire+0x115/0x350 [ 534.200692][ T5626] ? rfcomm_security_cfm+0x90/0x820 [ 534.206330][ T5626] __mutex_lock+0x19c/0x15a0 [ 534.212294][ T5626] ? rfcomm_security_cfm+0x90/0x820 [ 534.218324][ T5626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.226677][ T5626] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.233842][ T5626] ? rfcomm_security_cfm+0x90/0x820 [ 534.239264][ T5626] ? __pfx___mutex_lock+0x10/0x10 [ 534.246717][ T5626] ? l2cap_security_cfm+0x10b0/0x1170 [ 534.254233][ T5626] ? __pfx_l2cap_security_cfm+0x10/0x10 [ 534.260841][ T5626] ? hci_auth_complete_evt+0x318/0xc80 [ 534.266890][ T5626] rfcomm_security_cfm+0x90/0x820 [ 534.272377][ T5626] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 534.278260][ T5626] ? hci_conn_hash_lookup_handle+0x7f/0x300 [ 534.284701][ T5626] ? hci_conn_hash_lookup_handle+0x7f/0x300 [ 534.291298][ T5626] ? hci_conn_hash_lookup_handle+0x7f/0x300 [ 534.298213][ T5626] ? hci_conn_hash_lookup_handle+0x2b7/0x300 [ 534.304597][ T5626] ? __pfx_rfcomm_security_cfm+0x10/0x10 [ 534.310466][ T5626] hci_auth_complete_evt+0x39f/0xc80 [ 534.316436][ T5626] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 534.322469][ T5626] ? skb_pull_data+0xf0/0x200 [ 534.327612][ T5626] hci_event_packet+0x6cd/0xf10 [ 534.332947][ T5626] ? __pfx_hci_auth_complete_evt+0x10/0x10 [ 534.338760][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 534.345475][ T5626] ? audit_filter_rules+0x5310/0x62e0 [ 534.351285][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 534.357129][ T5626] hci_rx_work+0x3ee/0x1020 [ 534.362277][ T5626] ? process_scheduled_works+0x97a/0x1630 [ 534.368726][ T5626] process_scheduled_works+0xc3d/0x1630 [ 534.375207][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.382299][ T5626] ? assign_work+0x3cf/0x5d0 [ 534.389963][ T5626] worker_thread+0xa47/0xfb0 [ 534.396080][ T5626] kthread+0x38b/0x480 [ 534.400426][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 534.406026][ T5626] ? __pfx_kthread+0x10/0x10 [ 534.411087][ T5626] ret_from_fork+0x514/0xb70 [ 534.416913][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 534.423318][ T5626] ? __switch_to+0xc89/0x1420 [ 534.430043][ T5626] ? __pfx_kthread+0x10/0x10 [ 534.436555][ T5626] ret_from_fork_asm+0x1a/0x30 [ 534.446051][ T5626] [ 540.607584][ T8683] Bluetooth: hci4: command 0x0405 tx timeout