last executing test programs: 4m59.320163968s ago: executing program 32 (id=34): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) 4m45.878764549s ago: executing program 33 (id=107): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 4m11.046315806s ago: executing program 34 (id=293): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20008000}, 0x4000080) 3m55.74676064s ago: executing program 35 (id=373): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0xc0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m52.903666019s ago: executing program 36 (id=385): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000300)={0x0, 0x14, 0x2, "1d85"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 2m21.384818751s ago: executing program 37 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="01000000070581024000000705", 0xd) 2m6.935248922s ago: executing program 2 (id=989): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) 2m5.983348377s ago: executing program 2 (id=994): write$tun(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0xb0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "b30c8462fc0cdaf3f8a1dc936ba190ba897dc5da2c94c43b50e8e0c9c833"}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:event_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 2m5.757865422s ago: executing program 2 (id=996): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f00000001c0)={r3, 0x2, &(0x7f0000000080)=[0x6, 0x1], 0x0, 0x0}) 2m3.917371292s ago: executing program 2 (id=1004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x80000000}) 2m3.383123526s ago: executing program 6 (id=1006): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001cc0)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) sync() r0 = open(&(0x7f0000000200)='.\x00', 0x80000, 0x18e) getdents(r0, 0x0, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m3.231553897s ago: executing program 2 (id=1008): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x92}, 0x9}, 0x80) 2m2.714379821s ago: executing program 38 (id=1006): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000440)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB="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"], 0x16, 0xc49, &(0x7f0000001cc0)="$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") mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) sync() r0 = open(&(0x7f0000000200)='.\x00', 0x80000, 0x18e) getdents(r0, 0x0, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m0.500321494s ago: executing program 2 (id=1016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a687", 0x2, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r0, 0x1) 1m59.610362308s ago: executing program 39 (id=1016): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="a687", 0x2, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r0, 0x1) 1m39.301628795s ago: executing program 8 (id=1093): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m38.904461179s ago: executing program 8 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file2\x00') 1m38.751808603s ago: executing program 8 (id=1097): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_connect(0x5, 0x64, 0x0, 0x0) 1m33.308024522s ago: executing program 8 (id=1119): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00') 1m32.544440203s ago: executing program 8 (id=1123): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=""/75, 0x4b}, 0x6}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m28.16015485s ago: executing program 8 (id=1148): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m27.138521398s ago: executing program 40 (id=1148): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 58.990684806s ago: executing program 3 (id=1301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x4000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 57.94136096s ago: executing program 3 (id=1305): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40200, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x8000, 0x10000000, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r4, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 56.844841575s ago: executing program 3 (id=1310): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r1, 0x23719000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x78) 56.533074028s ago: executing program 3 (id=1312): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 55.749278089s ago: executing program 3 (id=1319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 54.773594682s ago: executing program 3 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 53.912973774s ago: executing program 41 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) chdir(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 35.548028515s ago: executing program 4 (id=1426): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = gettid() r1 = gettid() kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 34.893066893s ago: executing program 4 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="2c00068008000100010000"], 0x78}}, 0x0) 34.105191819s ago: executing program 4 (id=1436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000030c0)=@newtfilter={0x58, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0x7}, {0xfff1, 0xffff}, {0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x180}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x730a}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}]}]}]}}]}, 0x58}}, 0x80) 33.212068121s ago: executing program 4 (id=1441): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') 32.968138535s ago: executing program 4 (id=1443): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bond_slave_0\x00', 0x10) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 31.976007334s ago: executing program 4 (id=1450): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 30.908604283s ago: executing program 42 (id=1450): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8.671958254s ago: executing program 0 (id=1592): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000000)='7', 0x1) getsockopt(r0, 0x4, 0x2, 0x0, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 8.21317621s ago: executing program 0 (id=1596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe80a336dc55b95dda550000000000bb40000000000000000200000600000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0xb8}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 7.316380926s ago: executing program 0 (id=1602): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.859104934s ago: executing program 0 (id=1606): socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r0, &(0x7f0000000c00)=ANY=[], 0xb8c) 6.034219526s ago: executing program 1 (id=1610): sched_setscheduler(0x0, 0x1, 0x0) ioctl$BLKCRYPTOIMPORTKEY(0xffffffffffffffff, 0xc0401289, &(0x7f00000006c0)={&(0x7f00000001c0)="7942c85dce516668cc118010e520d52a", 0x10, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x19, 0x2, "3f93"}, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x88, 0xfffffffffffffebe, &(0x7f0000000580)="02c0e5db37065ae2a1e12a5d97536f0ec800ce5f58753f01a2da60238fdddfe68111cabeff08a03ebc3a5746f2c258f43bff13e494f8e527d18d984bfd8bd882952a13d60c9ed5fc0ceb3f5348c5e49ff7530ef44c8149c792f8c95ff944e5b384586e29ee432d34d71cd03b127428347545ebffe973cdbdf67c31c57df2fc6fa0d55e24c36a434d399615fe1ed5c19b87a44d6b5003c93c92") socket$inet6(0xa, 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 5.823284565s ago: executing program 6 (id=1452): syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x40) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4cc2, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2b3, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 5.437422742s ago: executing program 7 (id=1613): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.185774658s ago: executing program 0 (id=1615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000100)='./cifs\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='unc=//127.0.0.1/share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.1\x00') r1 = accept(r0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000002000)="000000a0fe534d4240000100000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000000100200000102030405060708090a0b0c0d0e0f1000000000000010000000100000001000000000000000000000000000000000008000200000000000601c06062b0601050502a0123010a00e300c060a2b06010401823702020a0000", 0xa4, 0x0, 0x0, 0x0) 4.69658238s ago: executing program 7 (id=1618): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 4.622856514s ago: executing program 5 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0xf0, 0x10, 0x1, 0x70bc28, 0xfffffffd, {{@in6=@mcast2, @in6=@loopback, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}}, 0xf0}}, 0x44050) 4.282084503s ago: executing program 7 (id=1621): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000001"], 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}, 0x1}}, 0x80, 0x0}, 0x0) 4.273838571s ago: executing program 5 (id=1622): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 4.103818968s ago: executing program 6 (id=1623): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x4010, &(0x7f0000000300), 0x1, 0x9768, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KkiQiQVEQUAQk55xzzjnnnHPOme9ZdldxPaD3/e774r3nnOfZnenqqpqa/6+7anqqp3vJeRabc2Bg9IGhTTEwYrfcOedCG+805xX77LzXKVOMOf7kwyYPW2DSYRcnHTTs40gDAwMjDVvPsGljPXriSSMNjPLu9L831hhjDhpnYGC6YRdnH/ZxpqEfJnps+HzvjNCIGzrobxcH7TD037uNN+RLDPlk6ZsvPGdgYGD89yw/ZJFp/ukblbbkHPPO83erv7kNsRo87PP3/ht16MeJHhgYmOjeAb59jDDv//OGfM3xN5133W0/hK/9P64l55h3vhH8h9wXRx42baYh9/ER74PGRryd37zKrHsMG8J3b28DA0N2cf9wX/kf0ZJzzLPAwPvv5wceHnPcM955d7851rMDA2M9NzAw1vMDA2O9MDAw1osDA2O99GG71P+/5phz+jmH3N+HXx7GPvy2PD7dLvZZ/cW9BwYGRhs6z1hvDz1ejD3F8GNCVVVV/Wc3x5zTzwXH/9E/6Pi/9TZz3Nrxv6qq6n9u880x5/RDjuMjHP/H/qDj//duvHGNob/7n32moUu9/eF+E1VVVfVfap758Pg//gcd/8fb8fr9O/5XVVX9z23RBd89/o89wvF/4g86/q8x/52XDZtv+M8Nb71nle8+f2zY9DfeM33k90x//T3TB79nPe+df9T3TH/1PdNHHxgY69Fh09/8++Sxnh2yzD+vZ6yX//58nElHec/0V94zfdT3TH912DYNmT7ae6a/9Z75R//79LGH/DfFsK/72gcMdVVV1X9Mi04/z1wD73me/bDJw5/Yj88LPeaYbe76sLa3qqqqqqqqqv7rvf3U6Wf//W++Pznwnr9d/dvfsA77vcCgY8+99toPbUP/Mxr0z78P2fLD3qb/vw1xHv3wKQYG1lriw96U+hD6H/O36vV/pfzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9z7nP//29//D9z7pR2HzTrLZHfet9jfl5x0YLVhn91y55wLrfYhbPuH0P/W8/8Dqw0aGBjmO/4Qy4XmWHTxqQYGBha7787JZhz423UzD7lu1glHfvePOQcGpnr3/8GTvs+ah73Lwrtv7jDx39Zx7Lvrn++d/UYeNMJGvKfZzrn/oFWXfGWGET9+4f2/j7+9v8RSL+835fC/ZRlphJlGf5+Fh69/+PcyovOwbZ9qyLZPvcGa60y9/sabfHW1NZdfZaVVVlpruummnWH6GWeY7uuzTL3yamusNM3Q/99nzIa+dcXI/86YjT3imD01x3vHbMTvbYKTD8Ix++d39fiHVby7xvNme/jy4WM2yr85ZsO/3sgfPGZTrDbsC006MHhguXeHZtDAwKSjDB7YaMiFaUcbGJh08LB5Jx0y7zcnHGlgYKe/f6ODhr3Y6NB5Bm05ZJ7/sPctmWXYiGw2fL4RX2d9xA39V+9bcsLYu945wvuW/N/q/+j4/09eMw/620ANfwOEYfMM9fqQ32fin7Z3ilHePci93/Z+wOvivBvdvtZc9bEl/rteF4e2d+wP2N4PeB2/993eqaZ9Zs+hq/pv294R9nULDL3y39nXDXzwvm5kWn6lqyYfcV83//tv4j/cj4eP0WgjzPR++7qd5j9viyHrH/jgfd0Cqw178YC/7+tGGhiYdOTh+7ohO75RBw/sNOTCdEMujDZ44NAhF6Z/98IYA+cOufC1FdZeY8VB777MwLD1TjNkvbNPOGjoHeimg1Ydbdd33hll2La8PNY/buuw28cU7z2ezzHhsMEctuzw9Q6Zdfh6X9126HWjDlvvK/+F9Q5flrZ30rOGXjfasPW+OsJ6B3/Aeocv+0/3h6kG/cMTVWF/8199X6NR/zvf14juv6N/wPZ+wOtw4+3tXfcpl334v+F1uAe93/aO8sHb+37vG/K+2/v45U/s+9/1uuF0O7t3n6G3ldGH3c7e+i/cfocvO+J+bOgLgQzd7Y/+7+zHpvin/dhWI480wmC/p/f7OXdFmH/YPeJva1vxwFdWGz72g0dY77/6Ofc938sg2I+NP8LjuUFb7DswiMb80TVe2PDtXT54zAcP/ONji+FjPnzZDxrz0f6dMf/EB4/5iD8nv9+YT/XZodcPHmH73zvmi+w++03Dx3zUEdb7r8Z8tA8+dvzzmA8MDKYx32myoeP2QfvT9xvz4csOH/MhX2fWCUcZmHtgYGDKYWM+6r8z5pP+99zOx4T5h36+0t8mPTvjwl8ZPuYjjvG/GvNR/4tjvvm9f7udT/nudZ8ZaWDUUQc2Wn6DDdabduj/wy9ON/R/3hc9u+LQcf6gY+n7GQ1f9oPuF6P8O0bj/1tGg/6V0WSjvJ/R3+9aIx+06HP/p/uiUf6rRufyvujUeYeO2wf9XPR+Yz58WToOTvye5Ud8HPoBr5+F39O74zP/dsMf7/0nvH7W8Me7/yNfP2v47yRXG3EnX/9u/f7fXf7u8neXv7v8xb3P+f8php//f2fsAyYZ9qBz8FUz3zr7h729H3L/q8//D/P9h/P/s98681VDHloNu+4Dz88Onec/8vzsTEM/TPTY8PlGPD844ob+q/Oz++y2wVX/j87P/h81/L76bzwubv/vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/c+5/+nGf48gIcWX+j7w06EDt5s2qM2+7C390Puf/X5/2G+/3D+f7Ojpt1spIG/XfeB5/+HzuM4/3//glss8598/n/4fbXz//Uvyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3P+f/Zhz8P4IjZ5v7c8OcD3LD9fnt+2Nv7Ife/9fx/7//vrf2/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9yw8/8DI7xN4sLdLjA4//8/u/fxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yB+z+P8wf8ziv2T+mMV/qfwxi/+P8scs/j/OH7P4L50/ZvFfJn/M4r9s/pjF/yf5Yxb/5fLHLP7L549Z/H+aP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yx/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP6/yB+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/X+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/6/yxyz+W+ePWfx/nT9m8d8mf8zi/5v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/Nn/M4v+7/DGL/475Yxb/3+ePWfz/kD9m8d8pf8ziv3P+mMX/j/ljFv9d8scs/rvmj1n8d8sfs/j/KX/M4v/n/DGL/+75Yxb/v+SPWfz3yB+z+O+ZP2bx3yt/zOL/1/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwbyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyR/zOI/Sf6Yxf+j+WMW/0nzxyz+H8sfs/hPlj9m8f94/pjF/xP5Yxb/yfPHLP6fzB+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/D+bP2bxnzJ/zOL/ufwxi//n88cs/l/IH7P4T5U/ZvH/Yv6Yxf9L+WMW/y/nj1n8v5I/ZvH/av6Yxf9r+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf/r+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0b+mMV/1vwxi/8388cs/rPlj1n8v5U/ZvH/dv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+TP2bxnzt/zOI/T/6YxX/e/DGL/3fzxyz+8+WPWfy/lz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/+/nj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/kj1n8f5g/ZvFfMn/M4r9U/pjF/0f5Yxb/H+ePWfyXzh+z+C+TP2bxXzZ/zOL/k/wxi/9y+WMW/+Xzxyz+P80fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/lj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf/n+WMW/1/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/8v88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/V/ljFv+t88cs/r/OH7P4b5M/ZvH/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/H+bP2bx/13+mMV/x/wxi//v88cs/n/IH7P475Q/ZvHfOX/M4v/H/DGL/y75Yxb/XfPHLP675Y9Z/P+UP2bx/3P+mMV/9/wxi/9f8scs/nvkj1n898wfs/jvlT9m8f9r/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r839tWwz+x+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxf/fT/P85i/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyR+z+E+SP2bx/2j+mMV/0vwxi//H8scs/pPlj1n8P54/ZvH/RP6YxX/y/DGL/yfzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/z+aPWfynzB+z+H8uf8zi//n8MYv/F/LHLP5T5Y9Z/L+YP2bx/1L+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/3r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kT9m8Z81f8zi/838MYv/bPljFv9v5Y9Z/L+dP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+SPWfznzh+z+M+TP2bxnzd/zOL/3fwxi/98+WMW/+/lj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/+/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/B/ljFv8f5o9Z/JfMH7P4L5U/ZvH/Uf6Yxf/H+WMW/6Xzxyz+y+SPWfyXzR+z+P8kf8ziv1z+mMV/+fwxi/9P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/5/lj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/3n+mMX/F/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8zi/8v8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/hvlT9m8f9V/pjFf+v8MYv/r/PHLP7b5I9Z/H+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/3+aPWfx/lz9m8d8xf8zi//v8MYv/H/LHLP475Y9Z/HfOH7P4/zF/zOK/S/6YxX/X/DGL/275Yxb/P+WPWfz/nD9m8d89f8zi/5f8MYv/HvljFv8988cs/nvlj1n8/5o/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjEf+SB/DGL/6D8MYv/SPljFv+R88cs/qPkj1n8B+ePWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/h/JH7P4T5I/ZvH/aP6YxX/S/DGL/8fyxyz+k+WPWfw/nj9m8f9E/pjFf/L8MYv/J/PHLP6fyh+z+E+RP2bx/3T+mMX/M/ljFv/P5o9Z/KfMH7P4fy5/zOL/+fwxi/8X8scs/lPlj1n8v5g/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/ev6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/L+RP2bxnzV/zOL/zfwxi/9s+WMW/2/lj1n8v50/ZvGfPX/M4j9H/pjFf878MYv/XPljFv/v5I9Z/OfOH7P4z5M/ZvGfN3/M4v/d/DGL/3z5Yxb/7+WPWfznzx+z+C+QP2bxXzB/zOK/UP6Yxf/7+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6Yxf8H+WMW/x/mj1n8l8wfs/gvlT9m8f9R/pjF/8f5Yxb/pfPHLP7L5I9Z/JfNH7P4/yR/zOK/XP6YxX/5/DGL/0/zxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/n+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/ef6Yxf8X+WMW/w3zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/y/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/1X+mMV/6/wxi/+v88cs/tvkj1n8f5M/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv/f5o9Z/H+XP2bx3zF/zOL/+/wxi/8f8scs/jvlj1n8d84fs/j/MX/M4r9L/pjFf9f8MYv/bvljFv8/5Y9Z/P+cP2bx3z1/zOL/l/wxi/8e+WMW/z3zxyz+e+WPWfz/mj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w1X+74z3785p8T9C5f/vZ/E/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxi/87+WMS/1EG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8kf8ziP0n+mMX/o/ljFv9J88cs/h/LH7P4T5Y/ZvH/eP6Yxf8T+WMW/8nzxyz+n8wfs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfw/mz9m8Z8yf8zi/7n8MYv/5/PHLP5fyB+z+E+VP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/6/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9G/pjFf9b8MYv/N/PHLP6z5Y9Z/L+VP2bx/3b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/kz9m8Z87f8ziP0/+mMV/3vwxi/9388cs/vPlj1n8v5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv/v549Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5I9Z/H+YP2bxXzJ/zOK/VP6Yxf9H+WMW/x/nj1n8l84fs/gvkz9m8V82f8zi/5P8MYv/cvljFv/l88cs/j/NH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/5/ljFv9f5I9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/L/PHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjF/1f5Yxb/rfPHLP6/zh+z+G+TP2bx/03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/mz9m8f9d/pjFf8f8MYv/7/PHLP5/yB+z+O+UP2bx3zl/zOL/x/wxi/8u+WMW/13zxyz+u+WPWfz/lD9m8f9z/pjFf/f8MYv/X/LHLP575I9Z/PfMH7P475U/ZvH/a/6YxX/v/DGL/z75Yxb/ffPHLP77Sf1H+xfXW/z3l/r/qyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/8ED+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/j+SPWfwnyR+z+H80f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9l/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Kn/M4r91/pjF/9f5Yxb/bfLHLP6/yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/2/zxyz+v8sfs/jvmD9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx3yV/zOK/a/6YxX+3/DGL/5/yxyz+f84fs/jvnj9m8f9L/pjFf4/8MYv/nvljFv+98scs/n/NH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4j/qQP6YxX9Q/pjFf6T8MYv/yPljFv9R8scs/oPzxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv+P5I9Z/CfJH7P4fzR/zOI/af6Yxf9j+WMW/8nyxyz+H88fs/h/In/M4j95/pjF/5P5Yxb/T+WPWfynyB+z+H86f8zi/5n8MYv/Z/PHLP5T5o9Z/D+XP2bx/3z+mMX/C/ljFv+p8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/df6YxX+a/DGL/7T5Yxb/6fLHLP7T549Z/GfIH7P4fz1/zOI/Y/6YxX+m/DGL/8z5Yxb/WfLHLP7fyB+z+M+aP2bx/2b+mMV/tvwxi/+38scs/t/OH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/d/LHLP5z549Z/OfJH7P4z5s/ZvH/bv6YxX++/DGL//fyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOL//fwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bxXyJ/zOL/g/wxi/8P88cs/kvmj1n8l8ofs/j/KH/M4v/j/DGL/9L5Yxb/ZfLHLP7L5o9Z/H+SP2bxXy5/zOK/fP6Yxf+n+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxXyV/zOK/av6YxX+1/DGL/8/yxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4/zx/zOL/i/wxi/+G+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx/2X+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+P8qf8ziv3X+mMX/1/ljFv9t8scs/r/JH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/b/PHLP6/yx+z+O+YP2bx/33+mMX/D/ljFv+d8scs/jvnj1n8/5g/ZvHfJX/M4r9r/pjFf7f8MYv/n/LHLP5/zh+z+O+eP2bx/0v+mMV/j/wxi/+e+WMW/73yxyz+f80fs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP9pA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/kj1n8J8kfs/h/NH/M4j9p/pjF/2P5Yxb/yfLHLP4fzx+z+H8if8ziP3n+mMX/k/ljFv9P5Y9Z/KfIH7P4fzp/zOL/mfwxi/9n88cs/lPmj1n8P5c/ZvH/fP6Yxf8L+WMW/6nyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/PX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/IH7P4z5o/ZvH/Zv6YxX+2/DGL/7fyxyz+384fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi/938scs/nPnj1n858kfs/jPmz9m8f9u/pjFf778MYv/9/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/9/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+D/DGL/w/zxyz+S+aPWfyXyh+z+P8of8zi/+P8MYv/0vljFv9l8scs/svmj1n8f5I/ZvFfLn/M4r98/pjF/6f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/z/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/PH/M4v+L/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Zf6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/yp/zOK/df6Yxf/X+WMW/23yxyz+v8kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9v88cs/r/LH7P475g/ZvH/ff6Yxf8P+WMW/53yxyz+O+ePWfz/mD9m8d8lf8ziv2v+mMV/t/wxi/+f8scs/n/OH7P4754/ZvH/S/6YxX+P/DGL/575Yxb/vfLHLP5/zR+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/TOI/+kD+mMV/UP6YxX+k/DGL/8j5Yxb/UfLHLP6D88cs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/odj/nS3e/zqL/0Ri/w/K4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/mT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+v8ofs/hvnT9m8f91/pjFf5v8MYv/b/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/b/DGL/+/yxyz+O+aPWfx/nz9m8f9D/pjFf6f8MYv/zvljFv8/5o9Z/HfJH7P475o/ZvHfLX/M4v+n/DGL/5/zxyz+u+ePWfz/kj9m8d8jf8ziv2f+mMV/r/wxi/9f88cs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPMZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J8scs/h/NH7P4T5o/ZvH/WP6YxX+y/DGL/8fzxyz+n8gfs/hPnj9m8f9k/pjF/1P5Yxb/KfLHLP6fzh+z+H8mf8zi/9n8MYv/lPljFv/P5Y9Z/D+fP2bx/0L+mMV/qvwxi/8X88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/l/PH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/N/LHLP6z5o9Z/L+ZP2bxny1/zOL/rfwxi/+388cs/rPnj1n858gfs/jPmT9m8Z8rf8zi/538MYv/3PljFv958scs/vPmj1n8v5s/ZvGfL3/M4v+9/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4fz9/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4/yB/zOL/w/wxi/+S+WMW/6Xyxyz+P8ofs/j/OH/M4r90/pjFf5n8MYv/svljFv+f5I9Z/JfLH7P4L58/ZvH/af6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4v+z/DGL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/PH7P4/yJ/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/H+ZP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP6/yh+z+G+dP2bx/3X+mMV/m/wxi/9v8scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/9v8MYv/7/LHLP475o9Z/H+fP2bx/0P+mMV/p/wxi//O+WMW/z/mj1n8d8kfs/jvmj9m8d8tf8zi/6f8MYv/n/PHLP67549Z/P+SP2bx3yN/zOK/Z/6YxX+v/DGL/1/zxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I85kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf8j+WMW/0nyxyz+H80fs/hPmj9m8f9Y/pjFf7L8MYv/x/PHLP6fyB+z+E+eP2bx/2T+mMX/U/ljFv8p8scs/p/OH7P4fyZ/zOL/2fwxi/+U+WMW/8/lj1n8P58/ZvH/Qv6YxX+q/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X88fs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/838scs/rPmj1n8v5k/ZvGfLX/M4v+t/DGL/7fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/nfwxi//c+WMW/3nyxyz+8+aPWfy/mz9m8Z8vf8zi/738MYv//PljFv8F8scs/gvmj1n8F8ofs/h/P3/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/IH/M4v/D/DGL/5L5Yxb/pfLHLP4/yh+z+P84f8ziv3T+mMV/mfwxi/+y+WMW/5/kj1n8l8sfs/gvnz9m8f9p/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/7P8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/j/In/M4r9h/pjFfyOZ/2j/5nwW/41l/v9uFv9N8scs/pvmj1n8f5k/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/r/KH7P4b50/ZvH/df6YxX+b/DGL/2/yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/2/wxi//v8scs/jvmj1n8f58/ZvH/Q/6YxX+n/DGL/875Yxb/P+aPWfx3yR+z+O+aP2bx3y1/zOL/p/wxi/+f88cs/rvnj1n8/5I/ZvHfI3/M4r9n/pjFf6/8MYv/X/PHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH5P4jzWQP2bxH5Q/ZvEfKX/M4j9y/pjFf5T8MYv/4Pwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjF/yP5Yxb/SfLHLP4fzR+z+E+aP2bx/1j+mMV/svwxi//H88cs/p/IH7P4T54/ZvH/ZP6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4v/Z/DGL/5T5Yxb/z+WPWfw/nz9m8f9C/pjFf6r8MYv/F/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fzx+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/zfyxyz+s+aPWfy/mT9m8Z8tf8zi/638MYv/t/PHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v+d/DGL/9z5Yxb/efLHLP7z5o9Z/L+bP2bxny9/zOL/vfwxi//8+WMW/wXyxyz+C+aPWfwXyh+z+H8/f8ziv3D+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+P8gf8zi/8P8MYv/kvljFv+l8scs/j/KH7P4/zh/zOK/dP6YxX+Z/DGL/7L5Yxb/n+SPWfyXyx+z+C+fP2bx/2n+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOL/s/wxi//q+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+P8if8ziv2H+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/mT9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+v8ofs/hvnT9m8f91/pjFf5v8MYv/b/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/b/DGL/+/yxyz+O+aPWfx/nz9m8f9D/pjFf6f8MYv/zvljFv8/5o9Z/HfJH7P475o/ZvHfLX/M4v+n/DGL/5/zxyz+u+ePWfz/kj9m8d8jf8ziv2f+mMV/r/wxi/9f88cs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj1n838kfk/iPPZA/ZvEflD9m8R8pf8ziP3L+mMV/lPwxi//g/DGL/6j5Yxb/0fLHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMX/I/ljFv9J3tf/7Xfeeef/zab9J2bx/2j3f8ziP2n+mMX/Y/ljFv/J8scs/h/PH7P4fyJ/zOI/ef6Yxf+T+WMW/0/lj1n8p8gfs/h/On/M4v+Z/DGL/2fzxyz+U+aPWfw/lz9m8f98/pjF/wv5Yxb/qfLHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H89f8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+38gfs/jPmj9m8f9m/pjFf7b8MYv/t/LHLP7fzh+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/3fyxyz+c+ePWfznyR+z+M+bP2bx/27+mMV/vvwxi//38scs/vPnj1n8F8gfs/gvmD9m8V8of8zi//38MYv/wvljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8zi/4P8MYv/D/PHLP5L5o9Z/JfKH7P4/yh/zOL/4/wxi//S+WMW/2Xyxyz+y+aPWfx/kj9m8V8uf8ziv3z+mMX/p/ljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//P8scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P88f8zi/4v8MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8f9l/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/Kn/M4r91/pjF/9f5Yxb/bfLHLP6/yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/2/zxyz+v8sfs/jvmD9m8f99/pjF/w/5Yxb/nfLHLP47549Z/P+YP2bx3yV/zOK/a/6YxX+3/DGL/5/yxyz+f84fs/jvnj9m8f9L/pjFf4/8MYv/nvljFv+98scs/n/NH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/Kf0iDRhwDi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+4wzkj1n8B+WPWfxHyh+z+I+cP2bxHyV/zOI/OH/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bx/0j+mMV/kvwxi/9H88cs/pPmj1n8P5Y/ZvGfLH/M4v/x/DGL/yfyxyz+k+ePWfw/mT9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+H82f8ziP2X+mMX/c/ljFv/P549Z/L+QP2bxnyp/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi//X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi//X88cs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/438MYv/rPljFv9v5o9Z/GfLH7P4fyt/zOL/7fwxi//s+WMW/znyxyz+c+aPWfznyh+z+H8nf8ziP3f+mMV/nvwxi/+8+WMW/+/mj1n858sfs/h/L3/M4j9//pjFf4H8MYv/gvljFv+F8scs/t/PH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/j/IH7P4/zB/zOK/ZP6YxX+p/DGL/4/yxyz+P84fs/gvnT9m8V8mf8ziv2z+mMX/J/ljFv/l8scs/svnj1n8f5o/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/j/LH/M4r96/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/r/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv9f5o9Z/DfLH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/r/LHLP5b549Z/H+dP2bx3yZ/zOL/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+P82f8zi/7v8MYv/jvljFv/f549Z/P+QP2bx3yl/zOK/c/6Yxf+P+WMW/13yxyz+u+aPWfx3yx+z+P8pf8zi/+f8MYv/7vljFv+/5I9Z/PfIH7P475k/ZvHfK3/M4v/X/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP7jDuSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/SP6YxX+S/DGL/0fzxyz+k+aPWfw/lj9m8Z8sf8zi//H8MYv/J/LHLP6T549Z/D+ZP2bx/1T+mMV/ivwxi/+n88cs/p/JH7P4fzZ/zOI/Zf6Yxf9z+WMW/8/nj1n8v5A/ZvGfKn/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/9fzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/jfwxi/+s+WMW/2/mj1n8Z8sfs/h/K3/M4v/t/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fyd/zOI/d/6YxX+e/DGL/7z5Yxb/7+aPWfznyx+z+H8vf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+388fs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8gfs/j/MH/M4r9k/pjFf6n8MYv/j/LHLP4/zh+z+C+dP2bxXyZ/zOK/bP6Yxf8n+WMW/+Xyxyz+y+ePWfx/mj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8sf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/8/zxyz+v8gfs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/1/mj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi/+v8scs/lvnj1n8f50/ZvHfJn/M4v+b/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/zZ/zOL/u/wxi/+O+WMW/9/nj1n8/5A/ZvHfKX/M4r9z/pjF/4/5Yxb/XfLHLP675o9Z/HfLH7P4/yl/zOL/5/wxi//u+WMW/7/kj1n898gfs/jvmT9m8d8rf8zi/9f8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938sck/uMN5I9Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9I/pjFf5L8MYv/R/PH/j/26CltFAKAAuCt/szHbNu2bdu2bdu2bdu2bdvWe99ZQWdmC9PyP6r/qOV/NP9Ry//o/qOW/zH8Ry3/Y/qPWv7H8h+1/I/tP2r5H8d/1PI/rv+o5X88/1HL//j+o5b/CfxHLf8T+o9a/ifyH7X8T+w/avmfxH/U8j+p/6jlfzL/Ucv/5P6jlv8p/Ect/1P6j1r+p/IftfxP7T9q+Z/Gf9TyP63/qOV/Ov9Ry//0/qOW/xn8Ry3/M/qPWv5n8h+1/M/sP2r5n8V/1PI/q/+o5X82/1HL/+z+o5b/OfxHLf9z+o9a/ufyH7X8z+0/avmfx3/U8j+v/6jlfz7/Ucv//P6jlv8F/Ect/wv6j1r+F/Iftfwv7D9q+V/Ef9Tyv6j/qOV/Mf9Ry//i/qOW/yX8Ry3/S/qPWv6X8h+1/C/tP2r5X8Z/1PK/rP+o5X85/1HL//L+o5b/FfxHLf8r+o9a/lfyH7X8r+w/avlfxX/U8r+q/6jlfzX/Ucv/6v6jlv81/Ect/2v6j1r+1/Iftfyv7T9q+V/Hf9Tyv67/qOV/Pf9Ry//6/qOW/w38Ry3/G/qPWv438h+1/G/sP2r538R/1PK/qf+o5X8z/1HL/+b+o5b/LfxHLf9b+o9a/rfyH7X8b+0/avnfxn/U8r+t/6jlfzv/Ucv/9v6jlv8d/Ect/zv6j1r+d/Iftfzv7D9q+d/Ff9Tyv6v/qOV/N/9Ry//u/qOW/z38Ry3/e/qPWv738h+1/O/tP2r538d/1PK/r/+o5X8//1HL//7+o5b/A/xHLf8H+o9a/g/yH7X8H+w/avk/xH/U8n+o/6jl/zD/Ucv/4f6jlv8j/Ect/0f6j1r+j/Iftfwf7T9q+T/Gf9Tyf6z/qOX/OP9Ry//x/qOW/xP8Ry3/J/qPWv5P8h+1/J/sP2r5P8V/1PJ/qv+o5f80/1HL/+n+o5b/M/xHLf9n+o9a/s/yH7X8n+0/avk/x3/U8n+u/6jl/zz/Ucv/+f6jlv8L/Ect/xf6j1r+L/Iftfxf7D9q+b/Ef9Tyf6n/qOX/Mv9Ry//l/qOW/yv8Ry3/V/qPWv6v8h+1/F/tP2r5v8Z/1PJ/rf+o5f86/1HL//X+o5b/G/xHLf83+o9a/m/yH7X83+w/avm/xX/U8n+r/6jl/zb/Ucv/7f6jlv87/Ect/3f6j1r+7/Iftfzf7T9q+b/Hf9Tyf6//qOX/Pv9Ry//9/qOW/wf8Ry3/D/qPWv4f8h+1/D/sP2r5f8R/1PL/qP+o5f8x/1HL/+P+o5b/J/xHLf9P+o9a/p/yH7X8P+0/avl/xn/U8v+s/6jl/zn/Ucv/8/6jlv8X/Ect/y/6j1r+X/Iftfy/7D9q+X/Ff9Ty/6r/qOX/Nf9Ry//r/qOW/zf8Ry3/b/qPWv7f8h+1/L/tP2r5f8d/1PL/rv+o5f89/1HL//v+o5b/D/xHLf8f+o9a/j/yH7X8f+w/avn/xH/U8v+p/6jl/zP/Ucv/5/6jlv8v/P/XwKCi/y/9Ry3/X/mPWv6/9h+1/H/jP2r5/9Z/1PL/nf+o5f97/1HL/w/+o5b/H/1HLf8/+Y9a/n/2H7X8/+I/avn/1X/U8v+b/6jl/3f/Ucv/H/6jlv8//Uct/3/5j1r+//Yftfz/4z8q+R9lkP+o5X8w/1HL/+D+o5b/IfxHLf8D/qOW/yH9Ry3/Q/mPWv6H9h+1/A/jP2r5H9Z/1PI/nP+o5X94/1HL/wj+o5b/Ef1HLf8j+Y9a/kf2H/3v/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ze9uY/MqCz+On67tnv7s3805vIYMBptu4srWrkwGmw/1sWCqjsWACWQLK6NSmHsIbqBWgxKDMUxGgoi6Td0EEmPGi2ECwkqiEqeicSIa4hDURUwNExnRuNTcbe/S3mub9arXtRf7fF609znld7ot+e6csjUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICUNm+75Ya1HR1tm7zwwgsvBl6c6t+ZgNRei/5U/0gAAAAAAAAAAAAAAICR5Ph2olP9cwQAAAAAgNNNS+u7uqurhpyqHnww5+dtve+bXr3y+j3PP76y/L7/w5cPc8kJgw96enp6Xmrumtl/OKkoitJnm95/PLlyXLp+Z9fl2/uOQvHbZ5tbt21vPrjzK19/eO7U6XNqe8/WFmuua+9oWzKhKEJ1bbG1dNBQVRRhYm2xvXTQWDqYVFvcXzpY2nswpThQOrjw2g0d60onTvjUcNppaf1sUT2k2GLI7waD++/s2rSr/H6US5avVlP091/X/MO9FR8rG6H/8vVDVWX/Y/4JAiMaW/+3Lyy/H+WSJ9z/H22vWzXcx0buv3z9MEH/kM4wz/9DGu193t+zf8YIz/9zh7nkwP6nf1nZVer/pl++UN9/quZknv9Ln6/vKFRX9j9hyPN/6Tm+pvz8P6koQu04fzngtNLS+rnu0e7/ld0P7b/mrIpN1eD+j67aU13q//BdD7y//1TtSfU/cP1QM8r9v+ozB4b+WIGxaWnd3VNx/x9D/8WCYS450P/83ceuKvV/xs4j+wZ9bCz911b2v3jLjZ9YvHnbLfXtN65d37a+7abGxoampcuaGi9avrj3kaDv7Th/VeD0ML77fzG1YlNVFG0D+0UfXvZSqf+D5/7jb/2nJo+x/4mj3v+fc/+HYZ0/oZg4sdi6dsuWTQ19b8uHjX1v+/6zYfo/8ev/EfufV/7/gOWvu0tfkA/sf/POr36k1P+9k1Y90H9q4hj7nzRa/52vfV4gwjjv/+sqNkP6b3/1O+tK/f/pleOH+k+N9ev/yaP2v8v9H8ajpbXiL/z8j5X6X/2vw8P9OcFJCFP8+R+kk6P/rdN+8c24dZiqf0gnR/9LN7dF/mXb8H/6h3Ry9P+rHVVH4tbhDP1DOjn6/1r3gxvj1mGa/iGdHP3vn/3IU3Hr8P/6h3Ry9H98/fSr4tahTv+QTo7+L/vS3tVx6zBd/5BOjv6rXpn2RNw6zNA/pJOj//qqsz8Vtw6v0z+kk6P/6zoffjFuHWbqH9LJ0f/nd/468vt0wuv1D+nk6P+pP27dEbcOs/QP6eTo/4VZ7fVx63Cm/iGdHP3ff8MTj8Stwxv0D+nk6P/pb33wWNw6BP1DOjn6/8azR9bErcNs/UM6Ofrft/DYH+LW4Sz9Qzo5+v/3R6/+QNw6vFH/kE6O/sP+5d+NW4ez9Q/p5Oj/iifvaohbhzn6h3Ry9N+54rY749bhHP1DOjn6b2peODtuHc7VP6STo/8Zf/773XHrMFf/kE6O/j9233sr/93vkxTO0z+kk6P/mzesfjRuHc7XP6STo/+VM3ouiFuHefqHdHL0f/jofT+KW4f5+od0cvR/951LrohbhzfpH9LJ0f8Pbj2vO24d3qx/SCdH/y/X3nFr3Dos0D+kk6P/L/+sZlncOizUP6STo/8fP/T9XXHr8Bb9Qzo5+n/xfY+dE7cOF+gf0snR/+6LZ30xbh3eqn9IJ0f/735m4/q4dVikf0gnR/+T9/7+aNw61Osf0snR//xVBz8Utw4X6h/SydH/hkVrfhe3Dov1D+nk6P+ZA08filuHJfqHdHL0v+OxTzfHrUOD/iGdHP0/flnHf+LWoVH/kE6O/v/Z9JOPx63DUv1DOjn6P/PQt78Qtw5N+od0cvR/9YOTZ8atw0X6h3Ry9L/xmtnfi1uHZfqHdHL0f8nchy6NW4e36R/SydH/e/664ua4dbhY/5BOjv7r7rnnubh1WK5/SCdH//Ouvf2auHW4RP+QTo7+r59T/2TcOlyqf0gnR/93HG9ZELcOK/QP6eTov+u25/fFrcNK/UM6Ofrv/uTLdXHr8Hb9Qzo5+t875cp749bhHfoHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+CgAA//9kJdJC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) sendfile(r0, r0, 0x0, 0x1) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) 4.087947449s ago: executing program 0 (id=1624): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000245)=0xf9) 3.779769116s ago: executing program 7 (id=1625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000240)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 3.679451824s ago: executing program 5 (id=1626): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002080)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) 3.165583655s ago: executing program 9 (id=1627): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") syz_open_procfs$namespace(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 3.140095904s ago: executing program 7 (id=1628): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710a8064720ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.624763386s ago: executing program 5 (id=1629): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x4000, 0x8000}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, &(0x7f0000000080)=0x1) 2.450763954s ago: executing program 6 (id=1630): r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) 2.450265983s ago: executing program 1 (id=1631): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000005c0)={r2, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000003300)=""/4102, &(0x7f0000000000)=0x1006) 2.013102198s ago: executing program 9 (id=1632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000014c0)='\x00', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)='}', 0x1, 0x4001, 0x0, 0x0) 1.923749784s ago: executing program 7 (id=1633): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 1.923510335s ago: executing program 5 (id=1634): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180), 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) 1.774683294s ago: executing program 1 (id=1635): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x3, "fa00050001000000000000000000000000000100000000000000ffff00"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x10000, "ccc4a7b8c9011f4c5c7bb0464d4d3b8cd0aab3850a1afbc9e37ab2c30676744f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000280)={"6739629f274d13b691ebe45b0006f500", r1, 0xffffffffffffffff}) dup3(r4, r2, 0x0) 1.488482565s ago: executing program 9 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.24415764s ago: executing program 1 (id=1637): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private=0xa010102}, 0x2, 0x0, 0x0, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)) 1.230957296s ago: executing program 9 (id=1638): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8010) unshare(0x400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xffff, 0x3, 0x40004, 0x220, 0x6a9, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.041385907s ago: executing program 6 (id=1639): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) 724.89139ms ago: executing program 1 (id=1640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 710.433925ms ago: executing program 9 (id=1641): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) 619.768623ms ago: executing program 5 (id=1642): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8e) fchdir(r2) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20c000, &(0x7f0000000000)={[{@part={'part', 0x3d, 0x8000}}, {@file_umask={'file_umask', 0x3d, 0x40000007}}, {@codepage={'codepage', 0x3d, 'cp950'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}]}, 0x9, 0x37a, &(0x7f00000002c0)="$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") 372.725702ms ago: executing program 6 (id=1643): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 38.426703ms ago: executing program 9 (id=1644): socket$packet(0x11, 0x2, 0x300) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x40000, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffb, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 1 (id=1645): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./proc/thread-self/fail-nth\x00', &(0x7f0000000140), &(0x7f00000001c0)='./proc/file0\x00', 0xd, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb011c20"], &(0x7f0000000d40)=""/35, 0x3c, 0x23, 0x1, 0x7}, 0x28) kernel console output (not intermixed with test programs): interval 1, probability 0, space 0, times 0 [ 317.753735][T10629] CPU: 0 UID: 0 PID: 10629 Comm: syz.3.1157 Tainted: G L syzkaller #0 PREEMPT(full) [ 317.753779][T10629] Tainted: [L]=SOFTLOCKUP [ 317.753788][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 317.753804][T10629] Call Trace: [ 317.753814][T10629] [ 317.753825][T10629] dump_stack_lvl+0xe8/0x150 [ 317.753866][T10629] should_fail_ex+0x410/0x560 [ 317.753902][T10629] should_failslab+0xa8/0x100 [ 317.753937][T10629] __kmalloc_noprof+0xfe/0x720 [ 317.753964][T10629] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 317.753991][T10629] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 317.754028][T10629] __memcg_list_lru_alloc+0x1d9/0x760 [ 317.754068][T10629] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 317.754110][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.754146][T10629] __memcg_slab_post_alloc_hook+0x3bf/0xf80 [ 317.754178][T10629] ? __memcg_slab_post_alloc_hook+0x208/0xf80 [ 317.754220][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.754257][T10629] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 317.754298][T10629] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 317.754336][T10629] ? proc_alloc_inode+0x2a/0xc0 [ 317.754360][T10629] ? proc_alloc_inode+0x2a/0xc0 [ 317.754392][T10629] ? __pfx_proc_alloc_inode+0x10/0x10 [ 317.754424][T10629] proc_alloc_inode+0x2a/0xc0 [ 317.754451][T10629] alloc_inode+0x6a/0x1b0 [ 317.754487][T10629] new_inode+0x1f/0x170 [ 317.754520][T10629] ? proc_get_inode+0x1a/0x6a0 [ 317.754551][T10629] proc_get_inode+0x22/0x6a0 [ 317.754578][T10629] ? proc_fill_super+0x52a/0x760 [ 317.754612][T10629] proc_fill_super+0x543/0x760 [ 317.754643][T10629] ? __pfx_proc_fill_super+0x10/0x10 [ 317.754676][T10629] get_tree_nodev+0xbb/0x150 [ 317.754719][T10629] vfs_get_tree+0x92/0x2a0 [ 317.754756][T10629] do_new_mount+0x319/0xdc0 [ 317.754792][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.754829][T10629] ? __pfx_do_new_mount+0x10/0x10 [ 317.754866][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.754895][T10629] ? ns_capable+0x89/0xe0 [ 317.754930][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.754958][T10629] ? path_mount+0x647/0x1050 [ 317.754994][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.755023][T10629] ? user_path_at+0xd4/0x160 [ 317.755065][T10629] __se_sys_mount+0x31d/0x420 [ 317.755106][T10629] ? __pfx___se_sys_mount+0x10/0x10 [ 317.755146][T10629] ? srso_alias_return_thunk+0x5/0xfbef5 [ 317.755174][T10629] ? __x64_sys_mount+0x20/0xc0 [ 317.755210][T10629] do_syscall_64+0x166/0x520 [ 317.755240][T10629] ? trace_irq_disable+0x3b/0x140 [ 317.755267][T10629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.755300][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.755325][T10629] RIP: 0033:0x7f973599e159 [ 317.755349][T10629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.755371][T10629] RSP: 002b:00007f97367ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.755398][T10629] RAX: ffffffffffffffda RBX: 00007f9735c25fa0 RCX: 00007f973599e159 [ 317.755416][T10629] RDX: 0000200000000240 RSI: 0000200000000080 RDI: 0000000000000000 [ 317.755436][T10629] RBP: 00007f9735a3503b R08: 0000000000000000 R09: 0000000000000000 [ 317.755452][T10629] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 317.755467][T10629] R13: 00007f9735c26038 R14: 00007f9735c25fa0 R15: 00007ffc402c9958 [ 317.755505][T10629] [ 317.829810][T10629] proc_fill_super: get root inode failed [ 318.419479][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.422693][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.449550][ T3362] bond0 (unregistering): Released all slaves [ 318.598664][T10637] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 319.045881][T10651] FAULT_INJECTION: forcing a failure. [ 319.045881][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 319.045930][T10651] CPU: 1 UID: 0 PID: 10651 Comm: syz.9.1164 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.045959][T10651] Tainted: [L]=SOFTLOCKUP [ 319.045967][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 319.045981][T10651] Call Trace: [ 319.045991][T10651] [ 319.046000][T10651] dump_stack_lvl+0xe8/0x150 [ 319.046038][T10651] should_fail_ex+0x410/0x560 [ 319.046072][T10651] should_failslab+0xa8/0x100 [ 319.046112][T10651] __kmalloc_cache_noprof+0xa3/0x600 [ 319.046137][T10651] ? xa_load+0x1db/0x210 [ 319.046165][T10651] ? __io_uring_add_tctx_node+0x186/0x630 [ 319.046187][T10651] ? __io_uring_add_tctx_node+0x186/0x630 [ 319.046222][T10651] __io_uring_add_tctx_node+0x186/0x630 [ 319.046248][T10651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.046275][T10651] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 319.046302][T10651] ? __anon_inode_getfile+0x169/0x200 [ 319.046335][T10651] io_uring_create+0x596/0x990 [ 319.046380][T10651] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 319.046413][T10651] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 319.046458][T10651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.046488][T10651] ? rcu_is_watching+0x16/0xb0 [ 319.046519][T10651] ? srso_alias_return_thunk+0x5/0xfbef5 [ 319.046565][T10651] do_syscall_64+0x166/0x520 [ 319.046595][T10651] ? trace_irq_disable+0x3b/0x140 [ 319.046624][T10651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.046659][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.046687][T10651] RIP: 0033:0x7f88c8d9e159 [ 319.046710][T10651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.046733][T10651] RSP: 002b:00007f88c9d48fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 319.046762][T10651] RAX: ffffffffffffffda RBX: 0000200000000200 RCX: 00007f88c8d9e159 [ 319.046792][T10651] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000001420 [ 319.046809][T10651] RBP: 00007f88c8e3503b R08: 0000000000000000 R09: 0000000000000000 [ 319.046827][T10651] R10: 00002000000001c0 R11: 0000000000000206 R12: 0000000000000000 [ 319.046845][T10651] R13: 00002000000001c0 R14: 0000000000000000 R15: 00007ffd603d5988 [ 319.046887][T10651] [ 319.096766][ T5621] Bluetooth: hci2: command tx timeout [ 320.174164][ T3362] hsr_slave_0: left promiscuous mode [ 320.185186][ T3362] hsr_slave_1: left promiscuous mode [ 320.186177][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.186203][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.205600][ T3362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.205625][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.441627][ T3362] veth1_macvtap: left promiscuous mode [ 320.441671][ T3362] veth0_macvtap: left promiscuous mode [ 320.441779][ T3362] veth1_vlan: left promiscuous mode [ 320.441853][ T3362] veth0_vlan: left promiscuous mode [ 320.643771][T10683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 321.165905][ T5621] Bluetooth: hci2: command tx timeout [ 321.690657][ T31] audit: type=1326 audit(1789401774.612:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.692584][ T31] audit: type=1326 audit(1789401774.612:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.694633][ T31] audit: type=1326 audit(1789401774.612:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.694904][ T31] audit: type=1326 audit(1789401774.612:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.828739][ T31] audit: type=1326 audit(1789401774.612:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.829321][ T31] audit: type=1326 audit(1789401774.752:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.829374][ T31] audit: type=1326 audit(1789401774.752:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.830108][ T31] audit: type=1326 audit(1789401774.752:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.830343][ T31] audit: type=1326 audit(1789401774.752:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.830558][ T31] audit: type=1326 audit(1789401774.752:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10703 comm="syz.7.1175" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7faccdf9e159 code=0x7ffc0000 [ 321.906731][ T1966] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 322.059046][ T1966] usb 4-1: not running at top speed; connect to a high speed hub [ 322.059085][ T1966] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=ce.aa [ 322.060070][ T1966] usb 4-1: config 5 has an invalid interface number: 106 but max is 0 [ 322.060097][ T1966] usb 4-1: config 5 has no interface number 0 [ 322.060126][ T1966] usb 4-1: config 5 interface 106 has no altsetting 0 [ 322.064639][ T1966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.064672][ T1966] usb 4-1: Product: syz [ 322.064689][ T1966] usb 4-1: Manufacturer: syz [ 322.064707][ T1966] usb 4-1: SerialNumber: syz [ 322.109189][ T1966] r8152-cfgselector 4-1: Unknown version 0x0000 [ 322.417916][ T1966] r8152-cfgselector 4-1: Unknown version 0x0000 [ 322.418364][ T1966] r8152-cfgselector 4-1: No union descriptors [ 322.436455][ T1966] r8152-cfgselector 4-1: USB disconnect, device number 13 [ 323.061108][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 323.130118][T10738] loop7: detected capacity change from 0 to 8192 [ 323.143104][T10738] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.143281][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 323.246923][ T5621] Bluetooth: hci2: command tx timeout [ 323.738530][T10762] sctp: [Deprecated]: syz.5.1191 (pid 10762) Use of int in maxseg socket option. [ 323.738530][T10762] Use struct sctp_assoc_value instead [ 324.083325][T10725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 324.436067][T10778] FAULT_INJECTION: forcing a failure. [ 324.436067][T10778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.436118][T10778] CPU: 0 UID: 0 PID: 10778 Comm: syz.5.1197 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.436155][T10778] Tainted: [L]=SOFTLOCKUP [ 324.436167][T10778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 324.436183][T10778] Call Trace: [ 324.436193][T10778] [ 324.436203][T10778] dump_stack_lvl+0xe8/0x150 [ 324.436248][T10778] should_fail_ex+0x410/0x560 [ 324.436292][T10778] copy_folio_from_iter_atomic+0x67d/0x1a30 [ 324.436354][T10778] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 324.436400][T10778] ? shmem_write_begin+0x1d8/0x330 [ 324.436442][T10778] generic_perform_write+0x5c7/0x8f0 [ 324.436496][T10778] ? __pfx_generic_perform_write+0x10/0x10 [ 324.436535][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.436564][T10778] ? do_raw_spin_unlock+0xf5/0x200 [ 324.436602][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.436631][T10778] ? mnt_put_write_access_file+0xc3/0x100 [ 324.436661][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.436691][T10778] ? file_update_time_flags+0x3ab/0x440 [ 324.436728][T10778] shmem_file_write_iter+0xf8/0x120 [ 324.436767][T10778] do_iter_readv_writev+0x612/0x8c0 [ 324.436798][T10778] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 324.436830][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.436872][T10778] vfs_writev+0x343/0x990 [ 324.436913][T10778] ? __pfx_vfs_writev+0x10/0x10 [ 324.436955][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.436986][T10778] ? __fget_files+0x2a/0x420 [ 324.437026][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.437056][T10778] ? __fget_files+0x3a2/0x420 [ 324.437087][T10778] ? __fget_files+0x2a/0x420 [ 324.437122][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.437152][T10778] __se_sys_pwritev2+0x177/0x2a0 [ 324.437179][T10778] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 324.437209][T10778] ? srso_alias_return_thunk+0x5/0xfbef5 [ 324.437234][T10778] ? __x64_sys_pwritev2+0x20/0xc0 [ 324.437260][T10778] do_syscall_64+0x166/0x520 [ 324.437292][T10778] ? trace_irq_disable+0x3b/0x140 [ 324.437315][T10778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.437344][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.437366][T10778] RIP: 0033:0x7f364079e159 [ 324.437387][T10778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.437405][T10778] RSP: 002b:00007f364164e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 324.437429][T10778] RAX: ffffffffffffffda RBX: 00007f3640a25fa0 RCX: 00007f364079e159 [ 324.437446][T10778] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003 [ 324.437460][T10778] RBP: 00007f364083503b R08: 0000000000000000 R09: 0000000000000022 [ 324.437474][T10778] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 324.437488][T10778] R13: 00007f3640a26038 R14: 00007f3640a25fa0 R15: 00007ffdabc26138 [ 324.437522][T10778] [ 325.327101][ T5621] Bluetooth: hci2: command tx timeout [ 325.340930][T10796] loop5: detected capacity change from 0 to 131072 [ 325.349182][T10796] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 325.349216][T10796] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 325.395516][T10796] F2FS-fs (loop5): invalid crc value [ 325.567669][T10796] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 325.589425][T10799] loop3: detected capacity change from 0 to 32768 [ 325.590384][T10796] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 325.590413][T10796] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 325.655337][T10799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1203 (10799) [ 325.665516][T10796] netfs: Cache "CacheFiles" added (type cachefiles) [ 325.665552][T10796] CacheFiles: File cache on CacheFiles registered [ 325.694822][T10794] CacheFiles: File cache on CacheFiles unregistering [ 325.694844][T10794] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 325.756379][T10799] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.756418][T10799] BTRFS info (device loop3): using sha256 checksum algorithm [ 326.070088][T10799] BTRFS info (device loop3): enabling ssd optimizations [ 326.070119][T10799] BTRFS info (device loop3): turning on sync discard [ 326.070135][T10799] BTRFS info (device loop3): enabling free space tree [ 326.070154][T10799] BTRFS info (device loop3): use zlib compression, level 3 [ 326.966189][T10846] loop4: detected capacity change from 0 to 4096 [ 327.067109][T10846] NILFS (loop4): invalid segment: Checksum error in segment payload [ 327.067142][T10846] NILFS (loop4): trying rollback from an earlier position [ 327.074043][ T5616] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 327.223709][T10846] NILFS (loop4): recovery complete [ 327.302594][T10855] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.597821][T10859] loop9: detected capacity change from 0 to 128 [ 327.690808][T10607] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.690928][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.691118][T10607] bridge_slave_0: entered allmulticast mode [ 327.692985][T10846] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 327.693639][T10846] NILFS (loop4): error -2 preparing GC: cannot delete virtual blocks from DAT file [ 327.713283][T10607] bridge_slave_0: entered promiscuous mode [ 327.785047][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.785339][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.785506][T10607] bridge_slave_1: entered allmulticast mode [ 327.787723][T10607] bridge_slave_1: entered promiscuous mode [ 327.794653][T10859] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.810784][T10859] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 328.168717][ T7319] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.304225][T10607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.420136][T10607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.573772][T10878] loop9: detected capacity change from 0 to 512 [ 328.583420][T10878] EXT4-fs: Ignoring removed nobh option [ 328.665875][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1218'. [ 328.806084][T10878] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.806116][T10878] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 329.337415][T10900] loop9: detected capacity change from 0 to 1024 [ 329.464328][T10898] loop4: detected capacity change from 0 to 8192 [ 329.655902][T10903] loop3: detected capacity change from 0 to 32768 [ 329.666027][T10903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1224 (10903) [ 329.693368][T10903] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 329.693409][T10903] BTRFS info (device loop3): using sha256 checksum algorithm [ 329.827001][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 329.827025][ T31] audit: type=1800 audit(1789401782.752:158): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1220" name="bus" dev="loop4" ino=1048669 res=0 errno=0 [ 329.898200][T10903] BTRFS info (device loop3): enabling ssd optimizations [ 329.898234][T10903] BTRFS info (device loop3): turning on sync discard [ 329.898254][T10903] BTRFS info (device loop3): enabling free space tree [ 329.898275][T10903] BTRFS info (device loop3): use zlib compression, level 3 [ 329.985971][T10607] team0: Port device team_slave_0 added [ 329.992004][ T31] audit: type=1800 audit(1789401782.912:159): pid=10903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1224" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 330.099481][T10607] team0: Port device team_slave_1 added [ 330.549879][T10938] netlink: 'syz.9.1229': attribute type 1 has an invalid length. [ 330.629497][ T5616] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 330.632200][T10607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.632219][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.632245][T10607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.643751][T10607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.643773][T10607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.643804][T10607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.216166][T10955] loop5: detected capacity change from 0 to 512 [ 331.249512][T10938] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.268617][T10955] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 331.318445][T10955] EXT4-fs (loop5): 1 truncate cleaned up [ 331.442301][T10939] bond1: (slave geneve2): making interface the new active one [ 331.462141][T10955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.739938][T10939] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 332.212375][T10607] hsr_slave_0: entered promiscuous mode [ 332.229198][ T9482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.230435][T10607] hsr_slave_1: entered promiscuous mode [ 332.249415][T10607] debugfs: 'hsr0' already exists in 'hsr' [ 332.249443][T10607] Cannot create hsr debugfs directory [ 332.295000][T10975] loop4: detected capacity change from 0 to 32768 [ 332.898484][T10994] loop7: detected capacity change from 0 to 128 [ 332.918848][T10997] misc userio: Can't change port proto on an already running userio instance [ 333.170864][T10994] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 333.170904][T10994] hpfs: filesystem error: improperly stopped [ 333.170926][T10994] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 333.170943][T10994] hpfs: You really don't want any checks? You are crazy... [ 333.170964][T10994] hpfs: Code page index out of array [ 333.170973][T10994] hpfs: code page support is disabled [ 333.171097][T10994] hpfs: hpfs_map_4sectors(): unaligned read [ 333.171165][T10994] hpfs: hpfs_map_4sectors(): unaligned read [ 333.171177][T10994] hpfs: filesystem error: unable to find root dir [ 333.514192][T10999] loop4: detected capacity change from 0 to 32768 [ 333.560020][T10999] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 333.642797][T11007] fuse: root generation should be zero [ 333.684250][T10999] XFS (loop4): Ending clean mount [ 334.011163][ T9871] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 334.198686][T11038] FAULT_INJECTION: forcing a failure. [ 334.198686][T11038] name failslab, interval 1, probability 0, space 0, times 0 [ 334.198730][T11038] CPU: 1 UID: 0 PID: 11038 Comm: syz.5.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 334.198764][T11038] Tainted: [L]=SOFTLOCKUP [ 334.198774][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 334.198797][T11038] Call Trace: [ 334.198807][T11038] [ 334.198818][T11038] dump_stack_lvl+0xe8/0x150 [ 334.198861][T11038] should_fail_ex+0x410/0x560 [ 334.198896][T11038] should_failslab+0xa8/0x100 [ 334.198932][T11038] __kvmalloc_node_noprof+0x176/0x820 [ 334.198963][T11038] ? __kvmalloc_node_noprof+0x345/0x820 [ 334.198992][T11038] ? bpf_compute_postorder+0x131/0x970 [ 334.199017][T11038] ? bpf_compute_postorder+0x131/0x970 [ 334.199051][T11038] bpf_compute_postorder+0x131/0x970 [ 334.199080][T11038] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 334.199114][T11038] ? add_kfuncs+0x251/0x2e0 [ 334.199150][T11038] bpf_check+0x24d6/0x2e10 [ 334.199198][T11038] ? ktime_get_with_offset+0x93/0x2d0 [ 334.199228][T11038] ? __pfx_bpf_check+0x10/0x10 [ 334.199253][T11038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.199284][T11038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.199314][T11038] ? bpf_obj_name_cpy+0x194/0x1e0 [ 334.199357][T11038] bpf_prog_load+0x14d6/0x1c20 [ 334.199404][T11038] ? __pfx_bpf_prog_load+0x10/0x10 [ 334.199462][T11038] __sys_bpf+0xd0d/0xd90 [ 334.199500][T11038] ? __pfx___sys_bpf+0x10/0x10 [ 334.199533][T11038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.199562][T11038] ? do_futex+0x458/0x4e0 [ 334.199630][T11038] ? rcu_is_watching+0x16/0xb0 [ 334.199661][T11038] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.199697][T11038] __x64_sys_bpf+0xba/0xd0 [ 334.199725][T11038] do_syscall_64+0x166/0x520 [ 334.199753][T11038] ? trace_irq_disable+0x3b/0x140 [ 334.199814][T11038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.199846][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.199872][T11038] RIP: 0033:0x7f364079e159 [ 334.199894][T11038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.199915][T11038] RSP: 002b:00007f364164e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.199942][T11038] RAX: ffffffffffffffda RBX: 00007f3640a25fa0 RCX: 00007f364079e159 [ 334.199960][T11038] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 334.199977][T11038] RBP: 00007f364083503b R08: 0000000000000000 R09: 0000000000000000 [ 334.199993][T11038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.200008][T11038] R13: 00007f3640a26038 R14: 00007f3640a25fa0 R15: 00007ffdabc26138 [ 334.200048][T11038] [ 335.313310][T10607] netdevsim netdevsim1 eth20 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 335.469014][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 335.773311][T10607] netdevsim netdevsim1 eth19 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 336.136496][T10607] netdevsim netdevsim1 eth18 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 336.225218][ T5779] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 336.243484][T11080] device-mapper: ioctl: Unable to rename non-existent device, to j [ 336.407490][ T5779] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 336.408804][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.497835][T10607] netdevsim netdevsim1 eth17 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 336.603302][T11083] loop3: detected capacity change from 0 to 32768 [ 336.660217][T11083] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 336.703338][ T5779] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 337.123745][ T5616] ocfs2: Unmounting device (7,3) on (node local) [ 337.614226][T11105] loop4: detected capacity change from 0 to 512 [ 337.684923][T11105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.1274: bg 0: block 393: padding at end of block bitmap is not set [ 337.684965][T11105] loop4: lost filesystem error report for type 5 error -117 [ 337.685892][ C1] EXT4-fs (loop4): initial error at time 1789401790: ext4_validate_block_bitmap:445 [ 337.685929][ C1] EXT4-fs (loop4): last error at time 1789401790: ext4_validate_block_bitmap:445 [ 337.755335][T11105] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 337.755368][T11105] loop4: lost filesystem error report for type 5 error -117 [ 337.758147][T11105] EXT4-fs (loop4): 2 truncates cleaned up [ 337.834859][T11112] loop9: detected capacity change from 0 to 512 [ 337.900056][T11105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.938410][T11105] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1341: inode #12: block 7: comm syz.4.1274: path /22/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 337.971843][T11112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.971960][T11112] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.314547][ T7319] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.323389][ T9871] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.914918][T10607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 338.952054][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 338.967122][T10607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.132094][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.139343][T10607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.193094][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 339.201408][T10607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.232355][T11135] FAULT_INJECTION: forcing a failure. [ 339.232355][T11135] name failslab, interval 1, probability 0, space 0, times 0 [ 339.232400][T11135] CPU: 1 UID: 0 PID: 11135 Comm: syz.9.1282 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.232439][T11135] Tainted: [L]=SOFTLOCKUP [ 339.232449][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 339.232464][T11135] Call Trace: [ 339.232474][T11135] [ 339.232485][T11135] dump_stack_lvl+0xe8/0x150 [ 339.232530][T11135] should_fail_ex+0x410/0x560 [ 339.232566][T11135] should_failslab+0xa8/0x100 [ 339.232601][T11135] ? vm_area_alloc+0x24/0x140 [ 339.232642][T11135] kmem_cache_alloc_noprof+0xa1/0x600 [ 339.232718][T11135] ? vm_area_alloc+0x24/0x140 [ 339.232858][T11135] vm_area_alloc+0x24/0x140 [ 339.232895][T11135] mmap_region+0x12cb/0x2240 [ 339.232937][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.232978][T11135] ? __pfx_mmap_region+0x10/0x10 [ 339.233011][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233046][T11135] ? trace_hrtimer_start+0x82/0x200 [ 339.233095][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233126][T11135] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 339.233185][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233233][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233266][T11135] ? trace_sched_exit_tp+0x3a/0x130 [ 339.233365][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233397][T11135] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 339.233468][T11135] ? shmem_get_unmapped_area+0x2cf/0x8f0 [ 339.233504][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233536][T11135] ? cap_mmap_addr+0xaf/0x100 [ 339.233566][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233600][T11135] ? security_mmap_addr+0x71/0x240 [ 339.233629][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233672][T11135] do_mmap+0xe0a/0x1300 [ 339.233725][T11135] ? __pfx_do_mmap+0x10/0x10 [ 339.233759][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233799][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233840][T11135] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 339.233867][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.233899][T11135] ? down_write_killable+0x17e/0x240 [ 339.233942][T11135] ? __pfx_down_write_killable+0x10/0x10 [ 339.233975][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.234006][T11135] ? apparmor_mmap_file+0xbe/0xe0 [ 339.234039][T11135] vm_mmap_pgoff+0x272/0x4e0 [ 339.234073][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.234113][T11135] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 339.234148][T11135] ? rcu_is_watching+0x16/0xb0 [ 339.234187][T11135] ? ksys_mmap_pgoff+0xf3/0x760 [ 339.234225][T11135] ? srso_alias_return_thunk+0x5/0xfbef5 [ 339.234257][T11135] ? __x64_sys_mmap+0x7f/0x140 [ 339.234290][T11135] do_syscall_64+0x166/0x520 [ 339.234341][T11135] ? trace_irq_disable+0x3b/0x140 [ 339.234370][T11135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.234406][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.234433][T11135] RIP: 0033:0x7f88c8d9e159 [ 339.234458][T11135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.234481][T11135] RSP: 002b:00007f88c9d49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 339.234511][T11135] RAX: ffffffffffffffda RBX: 00007f88c9025fa0 RCX: 00007f88c8d9e159 [ 339.234532][T11135] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 339.234550][T11135] RBP: 00007f88c8e3503b R08: ffffffffffffffff R09: 00000000ec776000 [ 339.234569][T11135] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000000 [ 339.234586][T11135] R13: 00007f88c9026038 R14: 00007f88c9025fa0 R15: 00007ffd603d5988 [ 339.234628][T11135] [ 339.333324][T10607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.007085][ T5761] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 340.028165][T10607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.077769][T10607] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.130995][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.131099][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.177098][ T5761] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 340.178509][ T5761] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.178586][ T5761] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 340.178617][ T5761] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 340.178646][ T5761] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 340.178672][ T5761] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 340.180571][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.180685][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.270897][ T5761] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 340.270961][ T5761] usb 10-1: Product: syz [ 340.270979][ T5761] usb 10-1: Manufacturer: syz [ 340.270996][ T5761] usb 10-1: SerialNumber: syz [ 340.275033][ T5761] usb 10-1: config 0 descriptor?? [ 340.402069][T11156] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 340.524512][ T5761] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 340.524544][ T5761] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 340.725962][ T5761] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 340.725995][ T5761] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 340.726016][ T5761] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 341.048958][T11170] loop7: detected capacity change from 0 to 40427 [ 341.051246][T11170] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 341.051272][T11170] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 341.052354][ T5761] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 341.324453][T11170] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 341.447610][T11170] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 341.447645][T11170] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 341.475073][ T5761] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 341.477136][ T5761] radio-si470x 10-1:0.0: probe with driver radio-si470x failed with error -22 [ 341.517880][ T5761] usb 10-1: USB disconnect, device number 12 [ 341.674474][T11170] syz.7.1289: attempt to access beyond end of device [ 341.674474][T11170] loop7: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 341.876989][ T59] kworker/u8:4: attempt to access beyond end of device [ 341.876989][ T59] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 342.041644][T11190] loop3: detected capacity change from 0 to 1024 [ 342.243131][T11190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.391617][ T981] usb 6-1: USB disconnect, device number 3 [ 342.440050][T10607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.717989][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 342.752010][T10607] veth0_vlan: entered promiscuous mode [ 342.851900][T10607] veth1_vlan: entered promiscuous mode [ 343.051404][T10607] veth0_macvtap: entered promiscuous mode [ 343.138747][T10607] veth1_macvtap: entered promiscuous mode [ 343.188711][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.297628][T11216] loop4: detected capacity change from 0 to 40427 [ 343.309494][T10607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.318791][T10607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.374748][T11216] F2FS-fs (loop4): invalid crc value [ 343.381116][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.381214][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.381262][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.381306][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.486518][T11216] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.500543][T11216] F2FS-fs (loop4): f2fs_disable_checkpoint starts, unusable: 0 [ 343.500575][T11216] F2FS-fs (loop4): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 343.500604][T11216] F2FS-fs (loop4): Start checkpoint disabled! [ 343.514192][T11216] F2FS-fs (loop4): f2fs_disable_checkpoint finishes, err:0 [ 343.541592][T11216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 344.013599][T11226] netlink: 'syz.3.1298': attribute type 2 has an invalid length. [ 344.058981][T11219] syz.4.1299: attempt to access beyond end of device [ 344.058981][T11219] loop4: rw=2049, sector=77824, nr_sectors = 72 limit=40427 [ 344.134928][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.134954][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.234494][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.234494][ T59] loop4: rw=1, sector=77896, nr_sectors = 2088 limit=40427 [ 344.536384][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.536410][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.554315][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.554315][ T59] loop4: rw=1, sector=79984, nr_sectors = 1936 limit=40427 [ 344.640025][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.640025][ T59] loop4: rw=1, sector=49152, nr_sectors = 2048 limit=40427 [ 344.682709][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.682709][ T59] loop4: rw=1, sector=51200, nr_sectors = 2048 limit=40427 [ 344.794115][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.794115][ T59] loop4: rw=1, sector=57344, nr_sectors = 2048 limit=40427 [ 344.820370][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.820370][ T59] loop4: rw=1, sector=59392, nr_sectors = 2048 limit=40427 [ 344.834612][ T59] kworker/u8:4: attempt to access beyond end of device [ 344.834612][ T59] loop4: rw=1, sector=61440, nr_sectors = 2048 limit=40427 [ 345.144044][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 345.144088][ T59] Tainted: [L]=SOFTLOCKUP [ 345.144098][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 345.144115][ T59] Workqueue: writeback wb_workfn (flush-7:4) [ 345.144155][ T59] Call Trace: [ 345.144166][ T59] [ 345.144176][ T59] dump_stack_lvl+0xe8/0x150 [ 345.144216][ T59] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 345.144258][ T59] f2fs_write_end_bio+0x1211/0x16e0 [ 345.144302][ T59] ? blkg_put+0x22/0x240 [ 345.144356][ T59] __submit_merged_bio+0x258/0x6a0 [ 345.144390][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.144421][ T59] ? rcu_is_watching+0x16/0xb0 [ 345.144459][ T59] __submit_merged_write_cond+0x3c9/0x4e0 [ 345.144506][ T59] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 345.144557][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.144597][ T59] f2fs_write_data_pages+0x2a27/0x36f0 [ 345.144680][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 345.144801][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.144831][ T59] ? __lock_acquire+0x747/0x2de0 [ 345.144864][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.144909][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 345.144952][ T59] do_writepages+0x338/0x560 [ 345.144979][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.145019][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145049][ T59] ? reacquire_held_locks+0x117/0x1a0 [ 345.145079][ T59] ? writeback_sb_inodes+0x450/0x1b00 [ 345.145118][ T59] __writeback_single_inode+0x136/0x1220 [ 345.145156][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145185][ T59] ? do_raw_spin_unlock+0xf5/0x200 [ 345.145227][ T59] writeback_sb_inodes+0x9de/0x1b00 [ 345.145297][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 345.145379][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145408][ T59] ? rcu_is_watching+0x16/0xb0 [ 345.145441][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145469][ T59] ? queue_io+0x2d3/0x470 [ 345.145506][ T59] wb_writeback+0x41c/0xad0 [ 345.145543][ T59] ? queue_io+0x201/0x470 [ 345.145583][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 345.145615][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.145670][ T59] wb_workfn+0x431/0x10f0 [ 345.145720][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 345.145764][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145793][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 345.145839][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145868][ T59] ? lock_acquire+0x115/0x350 [ 345.145895][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145933][ T59] ? rcu_is_watching+0x16/0xb0 [ 345.145963][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.145994][ T59] ? process_scheduled_works+0x97a/0x1630 [ 345.146029][ T59] process_scheduled_works+0xc3d/0x1630 [ 345.146063][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.146128][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 345.146170][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.146199][ T59] ? assign_work+0x3cf/0x5d0 [ 345.146239][ T59] worker_thread+0xa47/0xfb0 [ 345.146311][ T59] kthread+0x38b/0x480 [ 345.146338][ T59] ? __pfx_worker_thread+0x10/0x10 [ 345.146371][ T59] ? __pfx_kthread+0x10/0x10 [ 345.146398][ T59] ret_from_fork+0x514/0xb70 [ 345.146426][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 345.146449][ T59] ? srso_alias_return_thunk+0x5/0xfbef5 [ 345.146479][ T59] ? __switch_to+0xc89/0x1420 [ 345.146519][ T59] ? __pfx_kthread+0x10/0x10 [ 345.146546][ T59] ret_from_fork_asm+0x1a/0x30 [ 345.146602][ T59] [ 345.195232][ T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 345.528136][ T5779] loop4: lost filesystem error report for type 5 error -108 [ 346.632666][ T31] audit: type=1326 audit(1789401799.552:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11272 comm="syz.1.1150" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f936f99e159 code=0x0 [ 346.702286][T11278] loop1: detected capacity change from 0 to 2048 [ 346.845288][T11281] loop3: detected capacity change from 0 to 1024 [ 346.886956][T11281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.892055][T11278] loop1: p3 p4 < > [ 346.892278][T11278] loop1: p3 start 4284289 is beyond EOD, truncated [ 347.227510][T11281] loop3: detected capacity change from 1024 to 0 [ 347.252985][T11290] Buffer I/O error on dev loop3, logical block 9, lost sync page write [ 347.253016][T11290] EXT4-fs error (device loop3): ext4_sync_inode_metadata:5929: inode #18: block 9: comm syz.3.1312: IO error syncing inode [ 347.253127][T11290] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 347.253147][T11290] EXT4-fs (loop3): I/O error while writing superblock [ 347.588423][ T5616] EXT4-fs error (device loop3): ext4_get_inode_loc:5054: inode #2: block 5: comm syz-executor: unable to read itable block [ 347.632814][ T5616] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 347.632844][ T5616] EXT4-fs (loop3): I/O error while writing superblock [ 347.632862][ T5616] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: IO failure [ 347.632961][ T5616] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 347.632989][ T5616] EXT4-fs (loop3): I/O error while writing superblock [ 347.633006][ T5616] EXT4-fs error (device loop3): ext4_dirty_inode:6736: inode #2: comm syz-executor: mark_inode_dirty error [ 347.633088][ T5616] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 347.633115][ T5616] EXT4-fs (loop3): I/O error while writing superblock [ 347.793244][ T5739] udevd[5739]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 348.417321][ T5616] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.455805][ T5616] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 348.455835][ T5616] EXT4-fs (loop3): I/O error while writing superblock [ 348.488173][T11282] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 348.657009][ T5779] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 348.836700][ T5779] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.855385][ T5779] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.855415][ T5779] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.858138][ T5779] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.858166][ T5779] usb 6-1: SerialNumber: syz [ 349.127401][ T5779] usb 6-1: 0:2 : does not exist [ 349.261748][ T5779] usb 6-1: USB disconnect, device number 4 [ 349.361413][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.802166][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.804617][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.820298][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.821331][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.822023][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.819676][T11400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 351.819738][T11400] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 351.967633][ T5621] Bluetooth: hci0: command tx timeout [ 352.083887][T11360] syz.1.1335 (11360): drop_caches: 2 [ 352.979432][T11424] loop9: detected capacity change from 0 to 32768 [ 353.014238][T11424] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 353.039621][T11424] JBD2: Ignoring recovery information on journal [ 353.224702][T11424] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 353.249035][T11436] loop1: detected capacity change from 0 to 32768 [ 353.264175][T11436] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 353.280717][T11436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1351 (11436) [ 353.343445][T11436] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.343485][T11436] BTRFS info (device loop1): using sha256 checksum algorithm [ 353.446217][T11346] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.447432][T11346] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.447629][T11346] bridge_slave_0: entered allmulticast mode [ 353.508184][T11346] bridge_slave_0: entered promiscuous mode [ 353.533703][T11346] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.533817][T11346] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.558628][T11346] bridge_slave_1: entered allmulticast mode [ 353.711924][T11346] bridge_slave_1: entered promiscuous mode [ 353.733180][T11447] ocfs2: Unmounting device (7,9) on (node local) [ 353.858640][T11463] loop7: detected capacity change from 0 to 512 [ 353.880874][T11436] BTRFS info (device loop1): rebuilding free space tree [ 353.883765][T11463] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 353.883872][T11463] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -EBUSY [ 353.936156][T11346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.001325][T11436] BTRFS info (device loop1): disabling free space tree [ 354.001394][T11436] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 354.001420][T11436] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 354.014289][T11346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.047248][ T5621] Bluetooth: hci0: command tx timeout [ 354.085378][T11436] BTRFS info (device loop1): enabling ssd optimizations [ 354.085420][T11436] BTRFS info (device loop1): force clearing of disk cache [ 354.085443][T11436] BTRFS info (device loop1): enabling auto defrag [ 354.085464][T11436] BTRFS info (device loop1): max_inline set to 0 [ 354.358839][T11346] team0: Port device team_slave_0 added [ 354.383772][T11346] team0: Port device team_slave_1 added [ 354.434034][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1358'. [ 354.511484][T11484] tmpfs: Unexpected value for 'noswap' [ 354.670736][ T3362] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 354.699500][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 354.763841][T11346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.763864][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.763896][T11346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.773147][ T31] audit: type=1800 audit(1789401807.692:161): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1351" name="bus" dev="loop1" ino=261 res=0 errno=0 [ 354.871073][T11346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.871097][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.871130][T11346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.145087][T10607] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 355.370207][T11346] hsr_slave_0: entered promiscuous mode [ 355.376324][T11346] hsr_slave_1: entered promiscuous mode [ 355.377137][T11346] debugfs: 'hsr0' already exists in 'hsr' [ 355.377159][T11346] Cannot create hsr debugfs directory [ 355.429098][T11495] loop4: detected capacity change from 0 to 2048 [ 355.594003][T11495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.623006][T11488] loop7: detected capacity change from 0 to 32768 [ 355.800707][T11488] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 356.036107][T11488] XFS (loop7): Ending clean mount [ 356.144658][ T5621] Bluetooth: hci0: command tx timeout [ 356.854104][ T31] audit: type=1326 audit(1789401809.772:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.5.1369" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f364079e159 code=0x0 [ 356.977158][ T9924] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 357.397607][T11551] FAULT_INJECTION: forcing a failure. [ 357.397607][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 357.397646][T11551] CPU: 0 UID: 0 PID: 11551 Comm: syz.4.1372 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.397675][T11551] Tainted: [L]=SOFTLOCKUP [ 357.397683][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 357.397696][T11551] Call Trace: [ 357.397705][T11551] [ 357.397715][T11551] dump_stack_lvl+0xe8/0x150 [ 357.397754][T11551] should_fail_ex+0x410/0x560 [ 357.397784][T11551] should_failslab+0xa8/0x100 [ 357.397815][T11551] __kvmalloc_node_noprof+0x176/0x820 [ 357.397840][T11551] ? __mutex_unlock_slowpath+0x731/0x900 [ 357.397878][T11551] ? v4l2_ctrl_new+0xa5a/0x1820 [ 357.397907][T11551] ? v4l2_ctrl_new+0xa5a/0x1820 [ 357.397942][T11551] v4l2_ctrl_new+0xa5a/0x1820 [ 357.397986][T11551] v4l2_ctrl_new_custom+0x5b4/0x7f0 [ 357.398038][T11551] ? __pfx_v4l2_ctrl_new_custom+0x10/0x10 [ 357.398066][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398097][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398126][T11551] ? __kvmalloc_node_noprof+0x345/0x820 [ 357.398157][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398183][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398208][T11551] ? v4l2_ctrl_handler_init_class+0x20d/0x2e0 [ 357.398243][T11551] vicodec_open+0x2b9/0xbf0 [ 357.398284][T11551] v4l2_open+0x1bc/0x3a0 [ 357.398322][T11551] chrdev_open+0x4d9/0x600 [ 357.398351][T11551] ? __pfx_chrdev_open+0x10/0x10 [ 357.398378][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398405][T11551] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 357.398436][T11551] ? __pfx_chrdev_open+0x10/0x10 [ 357.398460][T11551] do_dentry_open+0x816/0x1380 [ 357.398502][T11551] vfs_open+0x3b/0x340 [ 357.398526][T11551] ? path_openat+0x1428/0x1d60 [ 357.398552][T11551] path_openat+0x1443/0x1d60 [ 357.398595][T11551] do_file_open+0x23e/0x4a0 [ 357.398623][T11551] ? __pfx_do_file_open+0x10/0x10 [ 357.398667][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398693][T11551] ? _raw_spin_unlock+0x28/0x50 [ 357.398713][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398736][T11551] ? alloc_fd+0x651/0x6c0 [ 357.398777][T11551] do_sys_openat2+0x115/0x200 [ 357.398809][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398833][T11551] ? __se_sys_futex+0x3a8/0x450 [ 357.398864][T11551] ? __pfx_do_sys_openat2+0x10/0x10 [ 357.398907][T11551] ? rcu_is_watching+0x16/0xb0 [ 357.398933][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 357.398963][T11551] __x64_sys_openat+0x138/0x170 [ 357.398999][T11551] do_syscall_64+0x166/0x520 [ 357.399024][T11551] ? trace_irq_disable+0x3b/0x140 [ 357.399048][T11551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.399078][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.399103][T11551] RIP: 0033:0x7fda1255e98e [ 357.399121][T11551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.399138][T11551] RSP: 002b:00007fda1338eb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.399160][T11551] RAX: ffffffffffffffda RBX: 00007fda1338f6c0 RCX: 00007fda1255e98e [ 357.399175][T11551] RDX: 0000000000000002 RSI: 00007fda1338ec00 RDI: ffffffffffffff9c [ 357.399189][T11551] RBP: 00007fda1338ec00 R08: 0000000000000000 R09: 0000000000000000 [ 357.399202][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 357.399215][T11551] R13: 00007fda12826038 R14: 00007fda12825fa0 R15: 00007ffc7fb9f668 [ 357.399248][T11551] [ 358.211159][ T5621] Bluetooth: hci0: command tx timeout [ 358.440624][T11582] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[7319] was attempted by ""[11582] [ 358.584727][T11346] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 358.832052][ T31] audit: type=1326 audit(1789401811.752:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.4.1381" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda1259e159 code=0x0 [ 359.324055][T11346] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 359.790778][T11346] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.064605][T11346] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 360.438135][T11653] loop1: detected capacity change from 0 to 256 [ 360.494700][T11653] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0x8604b368, utbl_chksum : 0xe619d30d) [ 360.495092][T11653] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 360.495765][T11653] exFAT-fs (loop1): failed to load alloc-bitmap [ 360.495779][T11653] exFAT-fs (loop1): failed to recognize exfat type [ 360.704221][T11655] loop7: detected capacity change from 0 to 32768 [ 360.717515][T11655] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1395 (11655) [ 360.723242][T11655] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.723272][T11655] BTRFS info (device loop7): using sha256 checksum algorithm [ 360.950113][T11655] BTRFS info (device loop7): enabling ssd optimizations [ 360.950144][T11655] BTRFS info (device loop7): turning on sync discard [ 360.950163][T11655] BTRFS info (device loop7): enabling free space tree [ 361.090041][ T31] audit: type=1800 audit(1789401814.012:164): pid=11655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1395" name="file1" dev="loop7" ino=260 res=0 errno=0 [ 361.158688][T11346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.185595][T11346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.186650][T11346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.214175][T11346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.227182][T11346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.246176][T11346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.253221][T11346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.272349][T11346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.790674][ T9924] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.835848][T11346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.974652][T11346] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.002819][T11693] loop1: detected capacity change from 0 to 32768 [ 362.018366][ T6405] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.018503][ T6405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.105054][ T6405] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.105270][ T6405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.152630][T11693] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 362.260641][T11693] XFS (loop1): Ending clean mount [ 362.280443][ T25] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 362.444296][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 362.450684][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 362.453543][ T25] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 362.453603][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 362.453632][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 362.453661][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 362.453686][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.453733][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.911790][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 362.911843][ T25] usbtmc 6-1:16.0: can't read capabilities [ 363.160566][T11716] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 363.343761][T11706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.348194][T11706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.755917][T11706] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 363.758185][ T25] usb 6-1: USB disconnect, device number 5 [ 363.906333][T10607] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 364.376779][ T5850] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 364.527330][ T5850] usb 8-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 364.528767][ T5850] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.531963][ T5850] usb 8-1: config 0 descriptor?? [ 364.687495][T11767] FAULT_INJECTION: forcing a failure. [ 364.687495][T11767] name failslab, interval 1, probability 0, space 0, times 0 [ 364.687540][T11767] CPU: 1 UID: 0 PID: 11767 Comm: syz.1.1408 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.687574][T11767] Tainted: [L]=SOFTLOCKUP [ 364.687588][T11767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 364.687604][T11767] Call Trace: [ 364.687614][T11767] [ 364.687626][T11767] dump_stack_lvl+0xe8/0x150 [ 364.687669][T11767] should_fail_ex+0x410/0x560 [ 364.687703][T11767] ? __alloc_skb+0x1db/0x7a0 [ 364.687734][T11767] should_failslab+0xa8/0x100 [ 364.687768][T11767] ? __alloc_skb+0x1db/0x7a0 [ 364.687796][T11767] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 364.687838][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.687870][T11767] ? __raw_spin_lock_init+0x45/0x100 [ 364.687906][T11767] ? __alloc_skb+0x1db/0x7a0 [ 364.687936][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.687973][T11767] __alloc_skb+0x1db/0x7a0 [ 364.688010][T11767] tipc_msg_build+0x15f/0xf50 [ 364.688037][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688075][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688105][T11767] ? aa_label_sk_perm+0x532/0x6e0 [ 364.688135][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688169][T11767] ? __pfx_tipc_msg_build+0x10/0x10 [ 364.688205][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688235][T11767] ? look_up_lock_class+0x57/0x110 [ 364.688263][T11767] ? tipc_sk_filtering+0x13c/0x510 [ 364.688307][T11767] __tipc_sendstream+0x8f4/0x12a0 [ 364.688376][T11767] ? __pfx___tipc_sendstream+0x10/0x10 [ 364.688410][T11767] ? __pfx_woken_wake_function+0x10/0x10 [ 364.688450][T11767] ? tipc_sendstream+0x47/0x70 [ 364.688493][T11767] ? __local_bh_enable_ip+0xd6/0x140 [ 364.688527][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688562][T11767] tipc_sendstream+0x55/0x70 [ 364.688601][T11767] ? __pfx_tipc_sendstream+0x10/0x10 [ 364.688639][T11767] sock_sendmsg_nosec+0x13a/0x180 [ 364.688669][T11767] ____sys_sendmsg+0x54e/0x850 [ 364.688711][T11767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.688749][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688784][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688813][T11767] ? import_iovec+0x73/0xa0 [ 364.688849][T11767] ___sys_sendmsg+0x2a5/0x360 [ 364.688879][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.688908][T11767] ? __lock_acquire+0x747/0x2de0 [ 364.688939][T11767] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.688979][T11767] ? futex_wait+0x2a2/0x390 [ 364.689053][T11767] ? __fget_files+0x2a/0x420 [ 364.689089][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.689117][T11767] ? __fget_files+0x3a2/0x420 [ 364.689165][T11767] __x64_sys_sendmsg+0x1b1/0x290 [ 364.689198][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.689231][T11767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.689276][T11767] ? srso_alias_return_thunk+0x5/0xfbef5 [ 364.689318][T11767] do_syscall_64+0x166/0x520 [ 364.689345][T11767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.689374][T11767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.689406][T11767] RIP: 0033:0x7f936f99e159 [ 364.689427][T11767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.689446][T11767] RSP: 002b:00007f93708c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.689474][T11767] RAX: ffffffffffffffda RBX: 00007f936fc26090 RCX: 00007f936f99e159 [ 364.689494][T11767] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 364.689511][T11767] RBP: 00007f936fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 364.689527][T11767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.689543][T11767] R13: 00007f936fc26128 R14: 00007f936fc26090 R15: 00007ffcade9e9f8 [ 364.689583][T11767] [ 365.004923][ T5850] usbhid 8-1:0.0: can't add hid device: -71 [ 365.005042][ T5850] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 365.098272][T11772] xt_hashlimit: size too large, truncated to 1048576 [ 365.104672][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1413'. [ 365.129128][ T5850] usb 8-1: USB disconnect, device number 3 [ 365.333531][T11346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.405095][T11769] loop5: detected capacity change from 0 to 32768 [ 365.413556][T11769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1411 (11769) [ 365.462098][T11769] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 365.462138][T11769] BTRFS info (device loop5): using crc32c checksum algorithm [ 365.690798][T11784] vcan0: tx drop: invalid da for name 0x0004000000400000 [ 365.722530][T11346] veth0_vlan: entered promiscuous mode [ 365.753787][T11346] veth1_vlan: entered promiscuous mode [ 365.813781][T11346] veth0_macvtap: entered promiscuous mode [ 365.869984][T11769] BTRFS info (device loop5): enabling ssd optimizations [ 365.870017][T11769] BTRFS info (device loop5): turning on flush-on-commit [ 365.870054][T11769] BTRFS info (device loop5): enabling free space tree [ 365.870074][T11769] BTRFS info (device loop5): enabling auto defrag [ 365.870094][T11769] BTRFS info (device loop5): use lzo compression, level 1 [ 365.870117][T11769] BTRFS info (device loop5): max_inline set to 4096 [ 365.892223][T11346] veth1_macvtap: entered promiscuous mode [ 366.079929][T11346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.103156][T11346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.166319][ T3352] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.166388][ T3352] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.166431][ T3352] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.166471][ T3352] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.418535][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 366.576628][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 366.585182][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.587245][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.587296][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.587327][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.587353][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.587380][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.600569][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.600602][ T10] usb 2-1: Manufacturer: syz [ 366.620178][ T10] usb 2-1: config 0 descriptor?? [ 366.629087][ T9482] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.784678][ T3339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.784731][ T3339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.125195][ T10] rc_core: IR keymap rc-hauppauge not found [ 367.125218][ T10] Registered IR keymap rc-empty [ 367.125865][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.155699][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.178628][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 367.186464][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 367.204648][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.235669][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.265744][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.295341][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.315818][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.379009][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.407452][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.436996][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.444754][T11822] : renamed from bond0 (while UP) [ 367.467695][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.507767][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 367.553859][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 367.553891][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 367.629311][ T10] usb 2-1: USB disconnect, device number 7 [ 367.902347][T11628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.902379][T11628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.651268][T11871] bridge0: port 3(veth0) entered blocking state [ 368.652395][T11871] bridge0: port 3(veth0) entered disabled state [ 368.652572][T11871] veth0: entered allmulticast mode [ 368.653515][T11869] FAULT_INJECTION: forcing a failure. [ 368.653515][T11869] name failslab, interval 1, probability 0, space 0, times 0 [ 368.653549][T11869] CPU: 1 UID: 0 PID: 11869 Comm: syz.7.1429 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.653576][T11869] Tainted: [L]=SOFTLOCKUP [ 368.653585][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 368.653598][T11869] Call Trace: [ 368.653607][T11869] [ 368.653616][T11869] dump_stack_lvl+0xe8/0x150 [ 368.653654][T11869] should_fail_ex+0x410/0x560 [ 368.653685][T11869] should_failslab+0xa8/0x100 [ 368.653715][T11869] __kmalloc_noprof+0xfe/0x720 [ 368.653737][T11869] ? __kmalloc_noprof+0x1ab/0x720 [ 368.653757][T11869] ? __vb2_queue_alloc+0x2a0/0x1660 [ 368.653790][T11869] ? __vb2_queue_alloc+0x2a0/0x1660 [ 368.653829][T11869] __vb2_queue_alloc+0x2a0/0x1660 [ 368.653888][T11869] vb2_core_reqbufs+0xc3f/0x1470 [ 368.653936][T11869] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 368.653973][T11869] ? __video_do_ioctl+0x473/0xc70 [ 368.653997][T11869] ? srso_alias_return_thunk+0x5/0xfbef5 [ 368.654024][T11869] ? vb2_verify_memory_type+0x1fc/0x570 [ 368.654059][T11869] vb2_ioctl_reqbufs+0x4bb/0x850 [ 368.654107][T11869] __video_do_ioctl+0x8af/0xc70 [ 368.654139][T11869] ? __pfx___video_do_ioctl+0x10/0x10 [ 368.654189][T11869] video_usercopy+0x860/0x1430 [ 368.654231][T11869] ? __pfx___video_do_ioctl+0x10/0x10 [ 368.654270][T11869] ? __pfx_video_usercopy+0x10/0x10 [ 368.654314][T11869] ? __fget_files+0x2a/0x420 [ 368.654368][T11869] ? __fget_files+0x2a/0x420 [ 368.654396][T11869] ? __fget_files+0x3a2/0x420 [ 368.654430][T11869] v4l2_ioctl+0x18d/0x1e0 [ 368.654464][T11869] ? __pfx_v4l2_ioctl+0x10/0x10 [ 368.654497][T11869] __se_sys_ioctl+0xfc/0x170 [ 368.654523][T11869] do_syscall_64+0x166/0x520 [ 368.654547][T11869] ? trace_irq_disable+0x3b/0x140 [ 368.654570][T11869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.654598][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.654620][T11869] RIP: 0033:0x7faccdf9e159 [ 368.654640][T11869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.654657][T11869] RSP: 002b:00007faccee4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.654680][T11869] RAX: ffffffffffffffda RBX: 00007facce225fa0 RCX: 00007faccdf9e159 [ 368.654697][T11869] RDX: 0000200000000040 RSI: 00000000c0145608 RDI: 0000000000000004 [ 368.654711][T11869] RBP: 00007facce03503b R08: 0000000000000000 R09: 0000000000000000 [ 368.654724][T11869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.654736][T11869] R13: 00007facce226038 R14: 00007facce225fa0 R15: 00007ffe64fec798 [ 368.654767][T11869] [ 368.904117][T11871] veth0: entered promiscuous mode [ 368.904945][T11871] bridge0: port 3(veth0) entered blocking state [ 368.905168][T11871] bridge0: port 3(veth0) entered forwarding state [ 369.048712][ T5761] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 369.154841][T11883] loop0: detected capacity change from 0 to 2048 [ 369.238073][T11883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.359780][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 369.406557][ T5761] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 369.472661][T11873] ceph: No mds server is up or the cluster is laggy [ 369.483028][T11876] ceph: No mds server is up or the cluster is laggy [ 369.532581][T11903] loop7: detected capacity change from 0 to 4096 [ 369.558792][ T5761] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 369.560091][ T5761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.560139][ T5761] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 369.560167][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 369.560194][ T5761] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 369.560217][ T5761] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 369.572861][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 369.572895][ T5761] usb 2-1: Product: syz [ 369.572912][ T5761] usb 2-1: Manufacturer: syz [ 369.572929][ T5761] usb 2-1: SerialNumber: syz [ 369.606595][ T5761] usb 2-1: config 0 descriptor?? [ 369.811665][T11903] ntfs3(loop7): Failed to load $Extend (-22). [ 369.811732][T11903] ntfs3(loop7): Failed to initialize $Extend. [ 369.850459][ T5761] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 369.850490][ T5761] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 369.926109][ T10] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 369.937036][T11346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.068511][ T5761] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 370.068543][ T5761] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 370.068566][ T5761] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 370.278895][ T5761] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 370.422914][T11918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1439'. [ 370.424338][T11918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1439'. [ 370.460114][T11918] netlink: 'syz.0.1439': attribute type 32 has an invalid length. [ 370.460145][T11918] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1439'. [ 370.629944][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1445'. [ 370.629975][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1445'. [ 370.671035][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1445'. [ 370.671062][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1445'. [ 371.116174][ T5761] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 371.116504][ T5761] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 371.122671][ T5761] usb 2-1: USB disconnect, device number 8 [ 371.340201][T11917] loop5: detected capacity change from 0 to 32768 [ 371.467641][T11917] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 371.724043][T11946] FAULT_INJECTION: forcing a failure. [ 371.724043][T11946] name failslab, interval 1, probability 0, space 0, times 0 [ 371.724092][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.7.1451 Tainted: G L syzkaller #0 PREEMPT(full) [ 371.724126][T11946] Tainted: [L]=SOFTLOCKUP [ 371.724136][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 371.724152][T11946] Call Trace: [ 371.724161][T11946] [ 371.724172][T11946] dump_stack_lvl+0xe8/0x150 [ 371.724215][T11946] should_fail_ex+0x410/0x560 [ 371.724251][T11946] should_failslab+0xa8/0x100 [ 371.724286][T11946] __kmalloc_cache_noprof+0xa3/0x600 [ 371.724313][T11946] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 371.724348][T11946] ? tipc_nametbl_insert_publ+0x64/0x13d0 [ 371.724390][T11946] tipc_nametbl_insert_publ+0x64/0x13d0 [ 371.724429][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.724459][T11946] ? do_raw_spin_lock+0x12b/0x2f0 [ 371.724500][T11946] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 371.724537][T11946] ? tipc_net+0x45/0x270 [ 371.724569][T11946] ? tipc_net+0x45/0x270 [ 371.724602][T11946] ? tipc_nametbl_publish+0x9f/0x270 [ 371.724641][T11946] tipc_nametbl_publish+0x121/0x270 [ 371.724684][T11946] tipc_sk_publish+0x1cd/0x430 [ 371.724725][T11946] ? __pfx_tipc_sk_publish+0x10/0x10 [ 371.724768][T11946] ? __local_bh_enable_ip+0xd6/0x140 [ 371.724803][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.724838][T11946] tipc_sk_bind+0x1ee/0x300 [ 371.724886][T11946] __sys_bind+0x2e3/0x410 [ 371.724918][T11946] ? __pfx___sys_bind+0x10/0x10 [ 371.724959][T11946] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.724989][T11946] ? rcu_is_watching+0x16/0xb0 [ 371.725032][T11946] __x64_sys_bind+0x7a/0x90 [ 371.725062][T11946] do_syscall_64+0x166/0x520 [ 371.725091][T11946] ? trace_irq_disable+0x3b/0x140 [ 371.725116][T11946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.725148][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.725173][T11946] RIP: 0033:0x7faccdf9e159 [ 371.725195][T11946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.725219][T11946] RSP: 002b:00007faccee4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 371.725245][T11946] RAX: ffffffffffffffda RBX: 00007facce225fa0 RCX: 00007faccdf9e159 [ 371.725264][T11946] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 371.725281][T11946] RBP: 00007facce03503b R08: 0000000000000000 R09: 0000000000000000 [ 371.725297][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 371.725312][T11946] R13: 00007facce226038 R14: 00007facce225fa0 R15: 00007ffe64fec798 [ 371.725352][T11946] [ 371.896671][T11917] XFS (loop5): Ending clean mount [ 372.325400][ T9482] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 372.333619][T11634] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.665332][T11957] loop7: detected capacity change from 0 to 4096 [ 372.694885][T11957] EXT4-fs: Ignoring removed bh option [ 372.727016][T11964] loop0: detected capacity change from 0 to 512 [ 372.838784][T11964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.838891][T11964] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.904026][T11957] EXT4-fs (loop7): Test dummy encryption mode enabled [ 373.048201][T11957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.077288][ T5627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 373.115013][ T5627] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 373.194331][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 373.232808][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 373.240801][T11634] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.264622][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 373.727566][ T9924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.731921][T11346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.163414][T11634] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.227797][T11993] loop0: detected capacity change from 0 to 32768 [ 374.243538][T11993] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1463 (11993) [ 374.270764][T11993] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 374.270795][T11993] BTRFS info (device loop0): using blake2b checksum algorithm [ 374.306824][T12004] loop7: detected capacity change from 0 to 64 [ 374.610783][T11993] BTRFS info (device loop0): enabling ssd optimizations [ 374.610815][T11993] BTRFS info (device loop0): turning on async discard [ 374.610833][T11993] BTRFS info (device loop0): enabling free space tree [ 374.610855][T11993] BTRFS info (device loop0): use zstd compression, level 3 [ 374.623089][T12004] BFS-fs: bfs_readdir(): Bad f_pos=0000ab07 for loop7:00000002 [ 374.697360][T11634] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.748733][T12022] input: syz0 as /devices/virtual/input/input20 [ 375.249674][T12036] loop7: detected capacity change from 0 to 16 [ 375.282504][T12036] erofs (device loop7): mounted with root inode @ nid 36. [ 375.326427][ T3339] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 375.405265][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 375.515839][ T5621] Bluetooth: hci1: command tx timeout [ 375.555261][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 375.556029][ T25] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 375.557086][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 375.557120][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 375.557150][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 375.557177][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 375.557207][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 375.562325][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.562354][ T25] usb 2-1: Product: syz [ 375.562371][ T25] usb 2-1: Manufacturer: syz [ 375.562389][ T25] usb 2-1: SerialNumber: syz [ 375.910756][ T25] usb 2-1: config 0 descriptor?? [ 375.966740][ T3352] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 376.469620][ T25] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 376.469678][ T25] input input21: Device does not respond to id packet M [ 376.569499][ T25] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 376.569555][ T25] input input21: Device does not respond to id packet P [ 376.601479][ T25] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 376.601534][ T25] input input21: Device does not respond to id packet B [ 376.620509][ T25] input input21: Limiting number of effects to 32 (device reports 85) [ 376.753186][T11346] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 376.794421][T11632] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 376.805642][T11628] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 376.836493][T12033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.837115][T12033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.924050][ T25] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 376.933483][ T25] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 376.934006][ T25] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 376.956752][ T25] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 377.114153][ T25] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 377.184823][T11634] veth0: left allmulticast mode [ 377.184853][T11634] veth0: left promiscuous mode [ 377.185161][T11634] bridge0: port 3(veth0) entered disabled state [ 377.213549][T11634] bridge_slave_1: left allmulticast mode [ 377.213581][T11634] bridge_slave_1: left promiscuous mode [ 377.213839][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.293135][T11634] bridge_slave_0: left allmulticast mode [ 377.293166][T11634] bridge_slave_0: left promiscuous mode [ 377.298618][ T25] usb 2-1: USB disconnect, device number 9 [ 377.301738][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.325026][ T4967] iforce 2-1:0.0: usb_submit_urb failed -19 [ 377.390089][ T4967] iforce 2-1:0.0: usb_submit_urb failed -19 [ 377.444279][ T4967] iforce 2-1:0.0: usb_submit_urb failed -19 [ 377.565740][ T5621] Bluetooth: hci1: command tx timeout [ 377.790750][T12070] fuse: fd is not a fuse device [ 378.055715][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.055781][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.131716][T12077] overlayfs: failed to resolve './file0': -2 [ 378.134012][T12078] FAULT_INJECTION: forcing a failure. [ 378.134012][T12078] name failslab, interval 1, probability 0, space 0, times 0 [ 378.134085][T12078] CPU: 1 UID: 0 PID: 12078 Comm: syz.5.1484 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.134119][T12078] Tainted: [L]=SOFTLOCKUP [ 378.134129][T12078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 378.134143][T12078] Call Trace: [ 378.134153][T12078] [ 378.134164][T12078] dump_stack_lvl+0xe8/0x150 [ 378.134206][T12078] should_fail_ex+0x410/0x560 [ 378.134241][T12078] should_failslab+0xa8/0x100 [ 378.134276][T12078] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 378.134305][T12078] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 378.134331][T12078] ? v9fs_init_fs_context+0x145/0x540 [ 378.134358][T12078] ? v9fs_init_fs_context+0x145/0x540 [ 378.134404][T12078] kstrdup+0x42/0x100 [ 378.134433][T12078] v9fs_init_fs_context+0x145/0x540 [ 378.134464][T12078] alloc_fs_context+0x9a3/0xd00 [ 378.134502][T12078] do_new_mount+0x17f/0xdc0 [ 378.134538][T12078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.134574][T12078] ? __pfx_do_new_mount+0x10/0x10 [ 378.134611][T12078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.134640][T12078] ? ns_capable+0x89/0xe0 [ 378.134675][T12078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.134703][T12078] ? path_mount+0x647/0x1050 [ 378.134741][T12078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.134769][T12078] ? user_path_at+0xd4/0x160 [ 378.134811][T12078] __se_sys_mount+0x31d/0x420 [ 378.134853][T12078] ? __pfx___se_sys_mount+0x10/0x10 [ 378.134894][T12078] ? srso_alias_return_thunk+0x5/0xfbef5 [ 378.134928][T12078] ? __x64_sys_mount+0x20/0xc0 [ 378.134966][T12078] do_syscall_64+0x166/0x520 [ 378.134995][T12078] ? trace_irq_disable+0x3b/0x140 [ 378.135021][T12078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.135052][T12078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.135077][T12078] RIP: 0033:0x7f364079e159 [ 378.135104][T12078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.135124][T12078] RSP: 002b:00007f364164e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 378.135151][T12078] RAX: ffffffffffffffda RBX: 00007f3640a25fa0 RCX: 00007f364079e159 [ 378.135169][T12078] RDX: 00002000000003c0 RSI: 0000200000000280 RDI: 00002000000004c0 [ 378.135187][T12078] RBP: 00007f364083503b R08: 0000200000000300 R09: 0000000000000000 [ 378.135204][T12078] R10: 0000000002208440 R11: 0000000000000246 R12: 0000000000000000 [ 378.135219][T12078] R13: 00007f3640a26038 R14: 00007f3640a25fa0 R15: 00007ffdabc26138 [ 378.135257][T12078] [ 378.237513][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 378.426025][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 378.447425][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.491415][ T25] usb 2-1: config 0 descriptor?? [ 378.498547][ T25] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 378.709004][T12090] loop0: detected capacity change from 0 to 4096 [ 378.714730][T12090] EXT4-fs: Ignoring removed nobh option [ 378.714835][T12090] EXT4-fs: Ignoring removed bh option [ 378.742920][T12090] EXT4-fs (loop0): Test dummy encryption mode enabled [ 378.771605][T12090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.891029][ T31] audit: type=1800 audit(1789401831.812:165): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1488" name="file1" dev="loop0" ino=19 res=0 errno=0 [ 378.893375][ T5621] Bluetooth: hci5: Unknown advertising packet type: 0x11 [ 378.893405][ T5621] Bluetooth: hci5: Unknown advertising packet type: 0x17 [ 379.283494][T11634]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.647355][ T5621] Bluetooth: hci1: command tx timeout [ 379.720493][T11634]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.763132][T11634]  (unregistering): Released all slaves [ 379.764577][ T25] usb 2-1: USB disconnect, device number 10 [ 379.799615][T11346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.884505][T12105] syz_tun: entered allmulticast mode [ 379.894268][T12103] syz_tun: left allmulticast mode [ 380.485561][ T5761] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 380.658279][ T5761] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 380.662027][ T5761] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.662055][ T5761] usb 8-1: Product: syz [ 380.662073][ T5761] usb 8-1: Manufacturer: syz [ 380.662090][ T5761] usb 8-1: SerialNumber: syz [ 380.696076][ T5761] usb 8-1: config 0 descriptor?? [ 380.961248][ T5761] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 004 [ 381.392289][T11634] hsr_slave_0: left promiscuous mode [ 381.394410][T11634] hsr_slave_1: left promiscuous mode [ 381.412493][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.412543][T11634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.449216][T11634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.449245][T11634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.564144][T11634] veth1_macvtap: left promiscuous mode [ 381.564190][T11634] veth0_macvtap: left promiscuous mode [ 381.564301][T11634] veth1_vlan: left promiscuous mode [ 381.564377][T11634] veth0_vlan: left promiscuous mode [ 381.683979][T12155] FAULT_INJECTION: forcing a failure. [ 381.683979][T12155] name failslab, interval 1, probability 0, space 0, times 0 [ 381.684026][T12155] CPU: 0 UID: 0 PID: 12155 Comm: syz.1.1508 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.684059][T12155] Tainted: [L]=SOFTLOCKUP [ 381.684069][T12155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 381.684085][T12155] Call Trace: [ 381.684096][T12155] [ 381.684108][T12155] dump_stack_lvl+0xe8/0x150 [ 381.684150][T12155] should_fail_ex+0x410/0x560 [ 381.684185][T12155] should_failslab+0xa8/0x100 [ 381.684220][T12155] __kmalloc_cache_noprof+0xa3/0x600 [ 381.684248][T12155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.684279][T12155] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 381.684316][T12155] ? nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 381.684354][T12155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.684399][T12155] nfc_genl_rcv_nl_event+0xa8/0x2d0 [ 381.684442][T12155] notifier_call_chain+0x1a5/0x3d0 [ 381.684494][T12155] blocking_notifier_call_chain+0x6a/0x90 [ 381.684523][T12155] netlink_release+0x11fb/0x1a80 [ 381.684576][T12155] ? netlink_release+0x106/0x1a80 [ 381.684618][T12155] ? __pfx_netlink_release+0x10/0x10 [ 381.684656][T12155] ? down_write+0x16b/0x200 [ 381.684691][T12155] ? __pfx_down_write+0x10/0x10 [ 381.684729][T12155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.684768][T12155] __sock_release+0xa0/0x1f0 [ 381.684796][T12155] ? __pfx_sock_close+0x10/0x10 [ 381.684837][T12155] sock_close+0x1c/0x30 [ 381.684876][T12155] __fput+0x418/0xa50 [ 381.684922][T12155] fput_close_sync+0x11f/0x240 [ 381.684958][T12155] ? __pfx_fput_close_sync+0x10/0x10 [ 381.684995][T12155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.685030][T12155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 381.685066][T12155] __x64_sys_close+0x7e/0x110 [ 381.685107][T12155] do_syscall_64+0x166/0x520 [ 381.685136][T12155] ? trace_irq_disable+0x3b/0x140 [ 381.685163][T12155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.685195][T12155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.685218][T12155] RIP: 0033:0x7f936f99e159 [ 381.685239][T12155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.685257][T12155] RSP: 002b:00007f93708e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 381.685279][T12155] RAX: ffffffffffffffda RBX: 00007f936fc25fa0 RCX: 00007f936f99e159 [ 381.685298][T12155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 381.685314][T12155] RBP: 00007f936fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 381.685330][T12155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.685345][T12155] R13: 00007f936fc26038 R14: 00007f936fc25fa0 R15: 00007ffcade9e9f8 [ 381.685390][T12155] [ 381.736002][ T5621] Bluetooth: hci1: command tx timeout [ 381.869106][ T5761] usb 8-1: USB disconnect, device number 4 [ 382.892485][T11634] team0 (unregistering): Port device team_slave_1 removed [ 382.959659][T11634] team0 (unregistering): Port device team_slave_0 removed [ 383.686736][ T5761] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 383.872268][ T5761] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 383.873531][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.873587][ T5761] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 383.873619][ T5761] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 383.873666][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.965062][T12204] __vm_enough_memory: pid: 12204, comm: syz.9.1524, bytes: 4503599627366400 not enough memory for the allocation [ 384.362326][T11972] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.362528][T11972] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.362710][T11972] bridge_slave_0: entered allmulticast mode [ 384.364914][T11972] bridge_slave_0: entered promiscuous mode [ 384.373349][ T5761] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 384.373383][ T5761] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 384.373400][ T5761] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 384.390824][ T5761] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 384.429371][T11972] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.429626][T11972] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.429771][T11972] bridge_slave_1: entered allmulticast mode [ 384.431762][T11972] bridge_slave_1: entered promiscuous mode [ 384.452604][ T5761] usb 1-1: USB disconnect, device number 6 [ 384.730498][T12224] FAULT_INJECTION: forcing a failure. [ 384.730498][T12224] name failslab, interval 1, probability 0, space 0, times 0 [ 384.730541][T12224] CPU: 1 UID: 0 PID: 12224 Comm: syz.1.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 384.730576][T12224] Tainted: [L]=SOFTLOCKUP [ 384.730587][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 384.730603][T12224] Call Trace: [ 384.730615][T12224] [ 384.730627][T12224] dump_stack_lvl+0xe8/0x150 [ 384.730671][T12224] should_fail_ex+0x410/0x560 [ 384.730708][T12224] should_failslab+0xa8/0x100 [ 384.730741][T12224] ? __proc_create+0x55d/0xad0 [ 384.730773][T12224] kmem_cache_alloc_noprof+0xa1/0x600 [ 384.730814][T12224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.730848][T12224] ? __proc_create+0x55d/0xad0 [ 384.730888][T12224] __proc_create+0x55d/0xad0 [ 384.730917][T12224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.730958][T12224] ? proc_register+0x5d5/0x7f0 [ 384.730991][T12224] ? __pfx___proc_create+0x10/0x10 [ 384.731023][T12224] ? _raw_write_unlock+0x28/0x50 [ 384.731050][T12224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.731090][T12224] _proc_mkdir+0x62/0x170 [ 384.731127][T12224] netfilter_net_init+0x2f6/0x360 [ 384.731161][T12224] ops_init+0x35d/0x5d0 [ 384.731192][T12224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.731235][T12224] setup_net+0x118/0x350 [ 384.731268][T12224] ? __pfx_setup_net+0x10/0x10 [ 384.731297][T12224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.731327][T12224] ? down_read_killable+0x1bb/0x3b0 [ 384.731366][T12224] ? srso_alias_return_thunk+0x5/0xfbef5 [ 384.731395][T12224] ? __ns_common_init+0x2fc/0x4a0 [ 384.731439][T12224] copy_net_ns+0x53b/0x780 [ 384.731474][T12224] create_new_namespaces+0x3f0/0x6b0 [ 384.731513][T12224] ? security_capable+0x7e/0x2c0 [ 384.731555][T12224] unshare_nsproxy_namespaces+0x149/0x190 [ 384.731594][T12224] ksys_unshare+0x5a7/0x950 [ 384.731641][T12224] ? __pfx_ksys_unshare+0x10/0x10 [ 384.731680][T12224] ? rcu_is_watching+0x16/0xb0 [ 384.731728][T12224] __x64_sys_unshare+0x38/0x50 [ 384.731767][T12224] do_syscall_64+0x166/0x520 [ 384.731797][T12224] ? trace_irq_disable+0x3b/0x140 [ 384.731824][T12224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.731858][T12224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.731885][T12224] RIP: 0033:0x7f936f99e159 [ 384.731909][T12224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.731930][T12224] RSP: 002b:00007f93708e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 384.731965][T12224] RAX: ffffffffffffffda RBX: 00007f936fc25fa0 RCX: 00007f936f99e159 [ 384.731984][T12224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 384.732001][T12224] RBP: 00007f936fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 384.732019][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.732035][T12224] R13: 00007f936fc26038 R14: 00007f936fc25fa0 R15: 00007ffcade9e9f8 [ 384.732077][T12224] [ 384.733682][T12224] cannot create netfilter proc entry [ 385.025685][T11972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.058299][T11972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.230982][T11972] team0: Port device team_slave_0 added [ 385.245196][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 385.259313][T11972] team0: Port device team_slave_1 added [ 385.366240][T11972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.366263][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.371219][ T5850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 385.371734][T11972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.377347][T11972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.377367][T11972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.377400][T11972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.575807][ T5850] usb 1-1: Using ep0 maxpacket: 16 [ 385.590755][ T5850] usb 1-1: unable to get BOS descriptor or descriptor too short [ 385.590844][ T5850] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 385.615576][ T5850] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 385.651649][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.651683][ T5850] usb 1-1: Product: syz [ 385.651701][ T5850] usb 1-1: SerialNumber: syz [ 385.687445][T11972] hsr_slave_0: entered promiscuous mode [ 385.688847][T11972] hsr_slave_1: entered promiscuous mode [ 385.689813][T11972] debugfs: 'hsr0' already exists in 'hsr' [ 385.689837][T11972] Cannot create hsr debugfs directory [ 385.911747][ T5850] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 385.912211][ T5850] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 385.929718][T12245] FAULT_INJECTION: forcing a failure. [ 385.929718][T12245] name failslab, interval 1, probability 0, space 0, times 0 [ 385.929762][T12245] CPU: 0 UID: 0 PID: 12245 Comm: syz.1.1536 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.929796][T12245] Tainted: [L]=SOFTLOCKUP [ 385.929806][T12245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 385.929822][T12245] Call Trace: [ 385.929833][T12245] [ 385.929844][T12245] dump_stack_lvl+0xe8/0x150 [ 385.929888][T12245] should_fail_ex+0x410/0x560 [ 385.929932][T12245] should_failslab+0xa8/0x100 [ 385.929969][T12245] __kmalloc_cache_noprof+0xa3/0x600 [ 385.929995][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930028][T12245] ? __vb2_init_fileio+0x1e2/0x1040 [ 385.930053][T12245] ? __vb2_init_fileio+0x1e2/0x1040 [ 385.930083][T12245] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 385.930126][T12245] __vb2_init_fileio+0x1e2/0x1040 [ 385.930150][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930191][T12245] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 385.930217][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930253][T12245] vb2_core_poll+0x4b0/0x830 [ 385.930300][T12245] vb2_fop_poll+0x196/0x310 [ 385.930341][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930376][T12245] ? __pfx_vb2_fop_poll+0x10/0x10 [ 385.930417][T12245] v4l2_poll+0x147/0x2c0 [ 385.930461][T12245] ? __pfx_v4l2_poll+0x10/0x10 [ 385.930500][T12245] do_sys_poll+0x990/0x1110 [ 385.930542][T12245] ? do_sys_poll+0x421/0x1110 [ 385.930586][T12245] ? __pfx_do_sys_poll+0x10/0x10 [ 385.930628][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930657][T12245] ? lock_acquire+0x115/0x350 [ 385.930681][T12245] ? __pfx___pollwait+0x10/0x10 [ 385.930718][T12245] ? __pfx_pollwake+0x10/0x10 [ 385.930814][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930843][T12245] ? futex_wait+0x2a2/0x390 [ 385.930886][T12245] ? __pfx_futex_wait+0x10/0x10 [ 385.930956][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.930986][T12245] ? set_user_sigmask+0xcd/0x1c0 [ 385.931023][T12245] ? __pfx_set_user_sigmask+0x10/0x10 [ 385.931072][T12245] __se_sys_ppoll+0x209/0x2b0 [ 385.931113][T12245] ? __pfx___se_sys_ppoll+0x10/0x10 [ 385.931157][T12245] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.931188][T12245] ? __x64_sys_ppoll+0x20/0xc0 [ 385.931224][T12245] do_syscall_64+0x166/0x520 [ 385.931254][T12245] ? trace_irq_disable+0x3b/0x140 [ 385.931282][T12245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.931315][T12245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.931342][T12245] RIP: 0033:0x7f936f99e159 [ 385.931366][T12245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.931387][T12245] RSP: 002b:00007f93708e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 385.931415][T12245] RAX: ffffffffffffffda RBX: 00007f936fc25fa0 RCX: 00007f936f99e159 [ 385.931434][T12245] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000280 [ 385.931455][T12245] RBP: 00007f936fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 385.931472][T12245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.931488][T12245] R13: 00007f936fc26038 R14: 00007f936fc25fa0 R15: 00007ffcade9e9f8 [ 385.931528][T12245] [ 386.354838][T12250] loop5: detected capacity change from 0 to 1024 [ 386.358808][T12250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 386.422799][T12250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.488080][ T5850] usb 1-1: 2:1 : bogus bTerminalLink 6 [ 386.883067][ T5850] usb 1-1: USB disconnect, device number 7 [ 386.959393][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.301821][ T9482] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.681432][T11972] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.835810][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 387.996664][ T10] usb 8-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 387.999079][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.999107][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 387.999144][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.070869][T12295] jffs2: notice: (12295) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 388.098316][ T10] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 388.713743][T11972] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.353144][T11972] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.703117][T12340] loop5: detected capacity change from 0 to 128 [ 389.850062][T11972] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.034765][T12346] loop5: detected capacity change from 0 to 2048 [ 390.052932][ T10] usb 8-1: USB disconnect, device number 5 [ 390.086882][ T10] idmouse 8-1:1.0: disconnected [ 390.121838][T12346] EXT4-fs (loop5): failed to initialize system zone (-117) [ 390.121981][T12346] EXT4-fs (loop5): mount failed [ 390.657419][T12364] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 390.893335][T12364] bond1: entered promiscuous mode [ 390.909028][T12364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.069959][T12369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.070411][T12369] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 391.070435][T12369] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 391.115354][T12369] bond1: (slave gre1): making interface the new active one [ 391.115383][T12369] gre1: entered promiscuous mode [ 391.117131][T12369] bond1: (slave gre1): Enslaving as an active interface with an up link [ 391.256808][ T5761] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 391.299430][T11972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 391.352121][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.354946][T11972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 391.387213][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 391.388186][T11972] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 391.416090][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 391.425705][ T5761] usb 8-1: Using ep0 maxpacket: 32 [ 391.427526][ T5761] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 391.435409][ T5761] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.435445][ T5761] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.435490][ T5761] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.448548][ T5761] usb 8-1: config 0 descriptor?? [ 391.481284][ T5761] hub 8-1:0.0: USB hub found [ 391.498070][T11972] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 391.519945][T11972] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 391.712043][ T5761] hub 8-1:0.0: 1 port detected [ 391.753497][T11972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.783717][T12395] loop0: detected capacity change from 0 to 1024 [ 391.800835][T12395] EXT4-fs: Ignoring removed bh option [ 391.816563][T11972] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.840718][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.840824][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.884850][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.884977][T11634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.923546][T12395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 391.951332][T12395] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.093469][T12395] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.1574: lblock 3 mapped to illegal pblock 3 (length 3) [ 392.353843][ T9] hub 8-1:0.0: activate --> -90 [ 392.365785][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 392.398293][T12395] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 392.398334][T12395] EXT4-fs (loop0): This should not happen!! Data will be lost [ 392.398334][T12395] [ 392.476096][T12407] EXT4-fs error (device loop0): ext4_ext_remove_space:2977: inode #15: comm syz.0.1574: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 392.510100][T12407] EXT4-fs error (device loop0) in ext4_setattr:6247: Corrupt filesystem [ 392.529875][ T25] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 392.534270][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.535649][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 392.535683][ T25] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 392.535729][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.574280][ T8971] usb 8-1: USB disconnect, device number 6 [ 392.755641][T11346] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 393.021581][ T25] cxacru 2-1:1.0: send of cm 0x91 failed (-71) [ 393.021613][ T25] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 393.021629][ T25] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 393.061321][ T25] cxacru 2-1:1.0: probe with driver cxacru failed with error -71 [ 393.121185][ T25] usb 2-1: USB disconnect, device number 11 [ 393.643669][T12443] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 393.699469][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079a2e000: rx timeout, send abort [ 394.199528][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079a2e000: abort rx timeout. Force session deactivation [ 394.199718][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032848c00: rx timeout, send abort [ 394.311687][T11972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.699766][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032848c00: abort rx timeout. Force session deactivation [ 394.780130][T12485] FAULT_INJECTION: forcing a failure. [ 394.780130][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 394.780177][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.0.1592 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.780211][T12485] Tainted: [L]=SOFTLOCKUP [ 394.780222][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 394.780238][T12485] Call Trace: [ 394.780249][T12485] [ 394.780260][T12485] dump_stack_lvl+0xe8/0x150 [ 394.780304][T12485] should_fail_ex+0x410/0x560 [ 394.780339][T12485] should_failslab+0xa8/0x100 [ 394.780379][T12485] ? prepare_creds+0x30/0x820 [ 394.780407][T12485] kmem_cache_alloc_noprof+0xa1/0x600 [ 394.780450][T12485] ? prepare_creds+0x30/0x820 [ 394.780487][T12485] prepare_creds+0x30/0x820 [ 394.780521][T12485] __se_sys_capset+0x2c6/0x440 [ 394.780562][T12485] ? __pfx___se_sys_capset+0x10/0x10 [ 394.780607][T12485] ? rcu_is_watching+0x16/0xb0 [ 394.780655][T12485] do_syscall_64+0x166/0x520 [ 394.780686][T12485] ? trace_irq_disable+0x3b/0x140 [ 394.780713][T12485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.780747][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.780774][T12485] RIP: 0033:0x7f0d7159e159 [ 394.780797][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.780820][T12485] RSP: 002b:00007f0d7251c028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 394.780850][T12485] RAX: ffffffffffffffda RBX: 00007f0d71825fa0 RCX: 00007f0d7159e159 [ 394.780870][T12485] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000a31000 [ 394.780889][T12485] RBP: 00007f0d7163503b R08: 0000000000000000 R09: 0000000000000000 [ 394.780906][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.780942][T12485] R13: 00007f0d71826038 R14: 00007f0d71825fa0 R15: 00007ffe3f98c068 [ 394.780983][T12485] [ 395.722208][T11972] veth0_vlan: entered promiscuous mode [ 395.758830][T11972] veth1_vlan: entered promiscuous mode [ 395.774993][T12506] loop7: detected capacity change from 0 to 512 [ 395.790193][T12506] EXT4-fs: Ignoring removed bh option [ 395.836793][T12506] EXT4-fs error (device loop7): ext4_orphan_get:1403: comm syz.7.1599: inode #13: comm syz.7.1599: iget: illegal inode # [ 395.836834][T12506] loop7: lost filesystem error report for type 5 error -117 [ 395.841649][T12506] EXT4-fs (loop7): Remounting filesystem read-only [ 395.854056][T12506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.004916][T12506] EXT4-fs (loop7): shut down requested (2) [ 396.063730][T11972] veth0_macvtap: entered promiscuous mode [ 396.098536][T12514] xt_hashlimit: size too large, truncated to 1048576 [ 396.133468][T11972] veth1_macvtap: entered promiscuous mode [ 396.258709][ T9924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.317560][T11972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.357585][T11972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.457495][T11632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.457725][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.457773][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.457816][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.875254][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 396.944199][T11578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.944226][T11578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.061639][T12535] No such timeout policy "syz1" [ 397.071337][ T25] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 397.072723][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.072778][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 397.072806][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.074387][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 397.074416][ T25] usb 1-1: Product: syz [ 397.074434][ T25] usb 1-1: Manufacturer: syz [ 397.110307][T12524] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 397.128895][ T25] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 397.182538][ T25] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 397.202461][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.202490][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.414922][ T25] usb 1-1: USB disconnect, device number 8 [ 397.475956][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 397.490027][ T25] garmin_gps 1-1:1.0: device disconnected [ 397.591783][T12538] loop7: detected capacity change from 0 to 512 [ 397.625026][T12538] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #15: comm syz.7.1608: inode has both inline data and extents flags [ 397.625068][T12538] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 397.638886][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 397.638918][ C0] EXT4-fs (loop7): initial error at time 1789401850: ext4_orphan_get:1403: inode 15 [ 397.638954][ C0] EXT4-fs (loop7): last error at time 1789401850: ext4_orphan_get:1403: inode 15 [ 397.665825][T12538] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1608: couldn't read orphan inode 15 (err -117) [ 397.665863][T12538] loop7: lost filesystem error report for type 5 error -117 [ 397.714233][T12538] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.858431][ T8971] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 397.908758][ T9924] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.059083][ T8971] usb 2-1: not running at top speed; connect to a high speed hub [ 398.059124][ T8971] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 398.062976][ T8971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.063006][ T8971] usb 2-1: Product: syz [ 398.063023][ T8971] usb 2-1: Manufacturer: syz [ 398.063041][ T8971] usb 2-1: SerialNumber: syz [ 398.240591][ T8971] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 398.281777][ T8971] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 398.326716][T12571] CIFS: Attempting to mount //127.0.0.1/share [ 398.351103][ T8971] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 398.395115][ T8971] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 398.439690][ T8971] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 398.490850][T12576] CIFS: VFS: \\127.0.0.1 No task to wake, unknown frame received! NumMids 0 [ 399.098731][T12571] CIFS: VFS: cifs_mount failed w/return code = -112 [ 399.891056][T12601] loop6: detected capacity change from 0 to 32768 [ 399.932354][T12601] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 400.046389][T12601] XFS (loop6): Ending clean mount [ 400.101804][ T31] audit: type=1800 audit(1789401853.022:166): pid=12601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1623" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 400.184438][T12601] XFS (loop6): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 400.803130][ T31] audit: type=1800 audit(1789401853.722:167): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1623" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 400.853699][ T1966] usb 2-1: USB disconnect, device number 12 [ 400.989335][T11972] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 401.052986][ T1966] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 401.130850][ T1966] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 401.238253][ T1966] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 401.291872][ T1966] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 401.293263][ T1966] keyspan 2-1:1.0: device disconnected [ 402.006225][T12641] loop7: detected capacity change from 0 to 32768 [ 402.130544][T12641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1633 (12641) [ 402.435831][T12641] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 402.435875][T12641] BTRFS info (device loop7): using crc32c checksum algorithm [ 402.707868][T12641] BTRFS info (device loop7): setting nodatasum [ 402.707901][T12641] BTRFS info (device loop7): setting nodatacow [ 402.707921][T12641] BTRFS info (device loop7): disabling tree log [ 402.707940][T12641] BTRFS info (device loop7): turning on async discard [ 402.707959][T12641] BTRFS info (device loop7): enabling free space tree [ 402.707986][T12641] BTRFS info (device loop7): max_inline set to 0 [ 402.938375][ T13] BTRFS info (device loop7): space_info DATA+METADATA (sub-group id 0) has 1781760 free, is not full [ 402.938419][ T13] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=0, reserved=4096, may_use=1437696, readonly=0 zone_unusable=0 [ 402.938493][ T13] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1437696 [ 402.938519][ T13] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0 [ 402.938543][ T13] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0 [ 402.938566][ T13] BTRFS info (device loop7): remap_block_rsv: size 0 reserved 0 [ 402.938590][ T13] BTRFS info (device loop7): delayed_block_rsv: size 0 reserved 0 [ 402.938614][ T13] BTRFS info (device loop7): delayed_refs_rsv: size 262144 reserved 0 [ 403.061065][ T13] BTRFS info (device loop7): space_info DATA+METADATA (sub-group id 0) has 1781760 free, is not full [ 403.061106][ T13] BTRFS info (device loop7): space_info total=3276800, used=53248, pinned=0, reserved=8192, may_use=1433600, readonly=0 zone_unusable=0 [ 403.061175][ T13] BTRFS info (device loop7): global_block_rsv: size 1441792 reserved 1433600 [ 403.061201][ T13] BTRFS info (device loop7): trans_block_rsv: size 0 reserved 0 [ 403.061225][ T13] BTRFS info (device loop7): chunk_block_rsv: size 0 reserved 0 [ 403.061250][ T13] BTRFS info (device loop7): remap_block_rsv: size 0 reserved 0 [ 403.061273][ T13] BTRFS info (device loop7): delayed_block_rsv: size 0 reserved 0 [ 403.061297][ T13] BTRFS info (device loop7): delayed_refs_rsv: size 524288 reserved 0 [ 403.226778][T12690] loop5: detected capacity change from 0 to 64 [ 403.271847][T12690] hfs: unable to locate alternate MDB [ 403.271869][T12690] hfs: continuing without an alternate MDB [ 403.376874][T12699] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 403.376913][T12699] CIFS: Attempting to mount //127.0.0.1/share [ 403.457951][ T31] audit: type=1804 audit(1789401856.372:168): pid=12697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1633" name="/newroot/104/file1/file1" dev="loop7" ino=260 res=1 errno=0 [ 403.562238][T12699] CIFS: VFS: \\127.0.0.1 Error -104 sending data on socket to server [ 403.632391][T12699] ------------[ cut here ]------------ [ 403.632409][T12699] server->in_flight == 0 [ 403.632446][T12699] WARNING: fs/smb/client/smb2ops.c:104 at smb2_add_credits+0x1249/0x2b70, CPU#1: syz.6.1643/12699 [ 403.657142][T12699] Modules linked in: [ 403.661167][T12699] CPU: 1 UID: 0 PID: 12699 Comm: syz.6.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.672849][T12699] Tainted: [L]=SOFTLOCKUP [ 403.677236][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 403.687215][T12710] FAULT_INJECTION: forcing a failure. [ 403.687215][T12710] name fail_usercopy, interval 1, probability 100, space 0, times -1 [ 403.687254][T12710] CPU: 0 UID: 0 PID: 12710 Comm: syz.1.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.687288][T12710] Tainted: [L]=SOFTLOCKUP [ 403.687298][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 403.687314][T12710] Call Trace: [ 403.687325][T12710] [ 403.687335][T12710] dump_stack_lvl+0xe8/0x150 [ 403.687377][T12710] should_fail_ex+0x410/0x560 [ 403.687413][T12710] _copy_to_user+0x31/0xb0 [ 403.687451][T12710] bpf_verifier_vlog+0x606/0x900 [ 403.687493][T12710] __btf_verifier_log+0xe2/0x140 [ 403.687537][T12710] ? __pfx___btf_verifier_log+0x10/0x10 [ 403.687582][T12710] ? btf_parse_hdr+0x1da/0x810 [ 403.687615][T12710] btf_parse_hdr+0x4a2/0x810 [ 403.687649][T12710] btf_new_fd+0x32f/0xbb0 [ 403.687687][T12710] __sys_bpf+0xd2e/0xd90 [ 403.687728][T12710] ? __pfx___sys_bpf+0x10/0x10 [ 403.687762][T12710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.687792][T12710] ? do_futex+0x3e7/0x4e0 [ 403.687864][T12710] ? rcu_is_watching+0x16/0xb0 [ 403.687896][T12710] ? srso_alias_return_thunk+0x5/0xfbef5 [ 403.687934][T12710] __x64_sys_bpf+0xba/0xd0 [ 403.687964][T12710] do_syscall_64+0x166/0x520 [ 403.687995][T12710] ? trace_irq_disable+0x3b/0x140 [ 403.688022][T12710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.688054][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.688081][T12710] RIP: 0033:0x7f936f99e159 [ 403.688103][T12710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.688125][T12710] RSP: 002b:00007f93708e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.688158][T12710] RAX: ffffffffffffffda RBX: 00007f936fc25fa0 RCX: 00007f936f99e159 [ 403.688177][T12710] RDX: 0000000000000028 RSI: 0000200000000180 RDI: 0000000000000012 [ 403.688195][T12710] RBP: 00007f936fa3503b R08: 0000000000000000 R09: 0000000000000000 [ 403.688211][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.688228][T12710] R13: 00007f936fc26038 R14: 00007f936fc25fa0 R15: 00007ffcade9e9f8 [ 403.688268][T12710] [ 403.918913][T12699] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 403.924752][T12699] Code: de 83 e6 01 31 ff e8 c6 c8 b8 fe f6 c3 01 75 0a e8 bc c3 b8 fe e9 22 13 00 00 0f 1f 44 00 00 e8 ad c3 b8 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d e4 b5 54 0d 01 0f 85 9e 03 00 00 e8 92 c3 b8 fe 49 [ 403.944615][T12699] RSP: 0018:ffffc90006c9f238 EFLAGS: 00010246 [ 403.950780][T12699] RAX: ffffffff830efe58 RBX: 1ffff1100787e461 RCX: ffff88802cb29f40 [ 403.958828][T12699] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.967085][T12699] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 403.975263][T12699] R10: dffffc0000000000 R11: ffffffff830f2bb0 R12: ffff88803c3f2308 [ 403.983363][T12699] R13: ffffc90006c9f450 R14: ffff88803c3f2000 R15: 0000000000000000 [ 403.991417][T12699] FS: 00007fa8761f66c0(0000) GS:ffff888124dd1000(0000) knlGS:0000000000000000 [ 404.000691][T12699] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 404.009129][T12699] CR2: 00007f7ed28c3fe8 CR3: 000000005e1ac000 CR4: 0000000000350ef0 [ 404.018520][T12699] Call Trace: [ 404.022282][T12699] [ 404.025405][T12699] ? do_raw_spin_unlock+0xf5/0x200 [ 404.030559][T12699] compound_send_recv+0x13b4/0x2b90 [ 404.035897][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.041659][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.047700][T12699] ? __pfx_compound_send_recv+0x10/0x10 [ 404.053334][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.059071][T12699] ? __mutex_unlock_slowpath+0x731/0x900 [ 404.064731][T12699] ? cifs_strtoUTF16+0x315/0x400 [ 404.069799][T12699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.076027][T12699] ? __pfx_cifs_strtoUTF16+0x10/0x10 [ 404.081511][T12699] cifs_send_recv+0x42/0x60 [ 404.086193][T12699] SMB2_negotiate+0x164d/0x4030 [ 404.091123][T12699] ? __pfx_SMB2_negotiate+0x10/0x10 [ 404.096433][T12699] ? __mutex_lock+0x30b/0x1550 [ 404.101241][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.108696][T12699] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.113767][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.120837][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.126817][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.132503][T12699] ? do_raw_spin_unlock+0xf5/0x200 [ 404.137855][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.143620][T12699] ? _raw_spin_unlock+0x28/0x50 [ 404.148705][T12699] cifs_negotiate_protocol+0x286/0x680 [ 404.154219][T12699] cifs_get_smb_ses+0x1104/0x1ff0 [ 404.159405][T12699] cifs_mount_get_session+0xf1/0x450 [ 404.164743][T12699] dfs_mount_share+0x22e/0x990 [ 404.169761][T12699] cifs_mount+0xcc/0xbf0 [ 404.174055][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.179912][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.185658][T12699] ? __pfx_cifs_mount+0x10/0x10 [ 404.190550][T12699] ? smb3_update_mnt_flags+0x2df/0x410 [ 404.196249][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.201926][T12699] ? cifs_setup_cifs_sb+0x5d8/0x900 [ 404.207805][T12699] cifs_smb3_do_mount+0x2d0/0x8a0 [ 404.214604][T12699] ? smb3_get_tree+0x2bf/0x400 [ 404.220774][T12699] ? __pfx___mutex_lock+0x10/0x10 [ 404.226173][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.231838][T12699] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 404.238186][T12699] ? vfs_parse_fs_qstr+0x163/0x1e0 [ 404.243424][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.249618][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.255330][T12699] ? smb3_handle_conflicting_options+0x40f/0xbf0 [ 404.262151][T12699] smb3_get_tree+0x2dd/0x400 [ 404.266908][T12699] vfs_get_tree+0x92/0x2a0 [ 404.271364][T12699] do_new_mount+0x319/0xdc0 [ 404.276033][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.281730][T12699] ? __pfx_do_new_mount+0x10/0x10 [ 404.288248][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.294000][T12699] ? ns_capable+0x89/0xe0 [ 404.298533][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.304208][T12699] ? path_mount+0x647/0x1050 [ 404.308998][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.316482][T12699] ? user_path_at+0xd4/0x160 [ 404.321147][T12699] __se_sys_mount+0x31d/0x420 [ 404.327191][T12699] ? __pfx___se_sys_mount+0x10/0x10 [ 404.332484][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.338239][T12699] ? __x64_sys_mount+0x20/0xc0 [ 404.343140][T12699] do_syscall_64+0x166/0x520 [ 404.347851][T12699] ? trace_irq_disable+0x3b/0x140 [ 404.352913][T12699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.359195][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.365730][T12699] RIP: 0033:0x7fa877f9e159 [ 404.370260][T12699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.391897][T12699] RSP: 002b:00007fa8761f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 404.400486][T12699] RAX: ffffffffffffffda RBX: 00007fa878225fa0 RCX: 00007fa877f9e159 [ 404.408670][T12699] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 404.420258][T12699] RBP: 00007fa87803503b R08: 0000000000000000 R09: 0000000000000000 [ 404.429600][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.437717][T12699] R13: 00007fa878226038 R14: 00007fa878225fa0 R15: 00007ffc49fa7698 [ 404.445942][T12699] [ 404.448994][T12699] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 404.456301][T12699] CPU: 1 UID: 0 PID: 12699 Comm: syz.6.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 404.467266][T12699] Tainted: [L]=SOFTLOCKUP [ 404.471617][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 404.481790][T12699] Call Trace: [ 404.485262][T12699] [ 404.488209][T12699] vpanic+0x56d/0xa60 [ 404.492281][T12699] ? __pfx__printk+0x10/0x10 [ 404.496900][T12699] ? __pfx_vpanic+0x10/0x10 [ 404.501453][T12699] ? is_bpf_text_address+0x292/0x2b0 [ 404.506796][T12699] ? is_bpf_text_address+0x26/0x2b0 [ 404.512033][T12699] panic+0xc5/0xd0 [ 404.515787][T12699] ? __pfx_panic+0x10/0x10 [ 404.520259][T12699] __warn+0x315/0x4c0 [ 404.524281][T12699] ? smb2_add_credits+0x1249/0x2b70 [ 404.529542][T12699] ? smb2_add_credits+0x1249/0x2b70 [ 404.534962][T12699] __report_bug+0x276/0x570 [ 404.539501][T12699] ? smb2_add_credits+0x1249/0x2b70 [ 404.544729][T12699] ? __pfx___report_bug+0x10/0x10 [ 404.549775][T12699] ? __lock_acquire+0x747/0x2de0 [ 404.555353][T12699] ? __pfx___schedule+0x10/0x10 [ 404.560235][T12699] ? smb2_add_credits+0x1249/0x2b70 [ 404.565537][T12699] report_bug+0x16b/0x220 [ 404.569881][T12699] ? smb2_add_credits+0x1249/0x2b70 [ 404.575183][T12699] ? smb2_add_credits+0x124b/0x2b70 [ 404.580545][T12699] handle_bug+0x9c/0x200 [ 404.584951][T12699] exc_invalid_op+0x1a/0x50 [ 404.589477][T12699] asm_exc_invalid_op+0x1a/0x20 [ 404.594346][T12699] RIP: 0010:smb2_add_credits+0x1249/0x2b70 [ 404.600174][T12699] Code: de 83 e6 01 31 ff e8 c6 c8 b8 fe f6 c3 01 75 0a e8 bc c3 b8 fe e9 22 13 00 00 0f 1f 44 00 00 e8 ad c3 b8 fe e9 13 13 00 00 90 <0f> 0b 90 80 3d e4 b5 54 0d 01 0f 85 9e 03 00 00 e8 92 c3 b8 fe 49 [ 404.619800][T12699] RSP: 0018:ffffc90006c9f238 EFLAGS: 00010246 [ 404.625974][T12699] RAX: ffffffff830efe58 RBX: 1ffff1100787e461 RCX: ffff88802cb29f40 [ 404.634060][T12699] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 404.642050][T12699] RBP: 0000000000000200 R08: 0000000000000003 R09: 0000000000000004 [ 404.650034][T12699] R10: dffffc0000000000 R11: ffffffff830f2bb0 R12: ffff88803c3f2308 [ 404.658018][T12699] R13: ffffc90006c9f450 R14: ffff88803c3f2000 R15: 0000000000000000 [ 404.666092][T12699] ? __pfx_smb2_get_credits_field+0x10/0x10 [ 404.672011][T12699] ? smb2_add_credits+0x3f8/0x2b70 [ 404.677202][T12699] ? smb2_add_credits+0x3f8/0x2b70 [ 404.682338][T12699] ? do_raw_spin_unlock+0xf5/0x200 [ 404.687484][T12699] compound_send_recv+0x13b4/0x2b90 [ 404.692724][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.698370][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.704024][T12699] ? __pfx_compound_send_recv+0x10/0x10 [ 404.709626][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.715270][T12699] ? __mutex_unlock_slowpath+0x731/0x900 [ 404.720922][T12699] ? cifs_strtoUTF16+0x315/0x400 [ 404.725912][T12699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 404.731937][T12699] ? __pfx_cifs_strtoUTF16+0x10/0x10 [ 404.737262][T12699] cifs_send_recv+0x42/0x60 [ 404.741800][T12699] SMB2_negotiate+0x164d/0x4030 [ 404.746687][T12699] ? __pfx_SMB2_negotiate+0x10/0x10 [ 404.751897][T12699] ? __mutex_lock+0x30b/0x1550 [ 404.756687][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.762331][T12699] ? do_raw_spin_lock+0x12b/0x2f0 [ 404.767379][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.773029][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.778718][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.784366][T12699] ? do_raw_spin_unlock+0xf5/0x200 [ 404.789508][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.795161][T12699] ? _raw_spin_unlock+0x28/0x50 [ 404.800037][T12699] cifs_negotiate_protocol+0x286/0x680 [ 404.805541][T12699] cifs_get_smb_ses+0x1104/0x1ff0 [ 404.810602][T12699] cifs_mount_get_session+0xf1/0x450 [ 404.815919][T12699] dfs_mount_share+0x22e/0x990 [ 404.820812][T12699] cifs_mount+0xcc/0xbf0 [ 404.825080][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.830750][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.836489][T12699] ? __pfx_cifs_mount+0x10/0x10 [ 404.841373][T12699] ? smb3_update_mnt_flags+0x2df/0x410 [ 404.846856][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.852508][T12699] ? cifs_setup_cifs_sb+0x5d8/0x900 [ 404.857736][T12699] cifs_smb3_do_mount+0x2d0/0x8a0 [ 404.862789][T12699] ? smb3_get_tree+0x2bf/0x400 [ 404.867577][T12699] ? __pfx___mutex_lock+0x10/0x10 [ 404.872682][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.878331][T12699] ? __pfx_cifs_smb3_do_mount+0x10/0x10 [ 404.883903][T12699] ? vfs_parse_fs_qstr+0x163/0x1e0 [ 404.889024][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.894679][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.900431][T12699] ? smb3_handle_conflicting_options+0x40f/0xbf0 [ 404.906806][T12699] smb3_get_tree+0x2dd/0x400 [ 404.911423][T12699] vfs_get_tree+0x92/0x2a0 [ 404.915857][T12699] do_new_mount+0x319/0xdc0 [ 404.920377][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.926029][T12699] ? __pfx_do_new_mount+0x10/0x10 [ 404.931090][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.936757][T12699] ? ns_capable+0x89/0xe0 [ 404.941123][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.946861][T12699] ? path_mount+0x647/0x1050 [ 404.951543][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.957198][T12699] ? user_path_at+0xd4/0x160 [ 404.961814][T12699] __se_sys_mount+0x31d/0x420 [ 404.966771][T12699] ? __pfx___se_sys_mount+0x10/0x10 [ 404.971997][T12699] ? srso_alias_return_thunk+0x5/0xfbef5 [ 404.977638][T12699] ? __x64_sys_mount+0x20/0xc0 [ 404.982436][T12699] do_syscall_64+0x166/0x520 [ 404.987132][T12699] ? trace_irq_disable+0x3b/0x140 [ 404.992249][T12699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.998333][T12699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.004330][T12699] RIP: 0033:0x7fa877f9e159 [ 405.008757][T12699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.028377][T12699] RSP: 002b:00007fa8761f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.037086][T12699] RAX: ffffffffffffffda RBX: 00007fa878225fa0 RCX: 00007fa877f9e159 [ 405.045511][T12699] RDX: 0000200000000400 RSI: 0000200000000200 RDI: 0000200000000300 [ 405.053497][T12699] RBP: 00007fa87803503b R08: 0000000000000000 R09: 0000000000000000 [ 405.061471][T12699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.069550][T12699] R13: 00007fa878226038 R14: 00007fa878225fa0 R15: 00007ffc49fa7698 [ 405.077719][T12699] [ 405.080979][T12699] Kernel Offset: disabled [ 405.085339][T12699] Rebooting in 86400 seconds..