last executing test programs: 2m52.268931998s ago: executing program 1 (id=167): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc080583d, &(0x7f000001a1c0)=ANY=[]) 2m52.265912738s ago: executing program 1 (id=168): r0 = syz_open_dev$mtd(&(0x7f0000000180), 0x0, 0x8403) ioctl$MEMWRITE(r0, 0xc0304d18, 0x0) (fail_nth: 3) 2m51.918552526s ago: executing program 1 (id=170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000300)={0x0, 0x17, 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = fsmount(0xffffffffffffffff, 0x1, 0x6) ppoll(&(0x7f0000000480)=[{r0, 0x800}, {r0, 0x18}, {r0, 0x4100}, {0xffffffffffffffff, 0x600}, {r0, 0x10}, {r2, 0x2324}], 0x6, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)={[0x1]}, 0x8) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x1, 0xb8, {0xb8, 0x13, "6421d54de05849baa97c2626e327cfd8b44e09c06d98c4d7499f537d4a6847f5c552d153d48c542453c77ec60611594b082946dff0eff171dcff79576b62ef03807bfc3cd43ab246cb47a6034d436efb734ecea06f0d8e53e9db08150f178f3e908527ed914d6fd72892a3b93febe3e64f97a87d63186a1c1fc743b1c4cd42c51005506a7c35ae792f2339024e46bd106af0a6e9f634272e9e4ffc3db370a37f4926abb802d6b3b1881060b379356bdf110de2046f2c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x0, 0x30, 0x5, "e777a989ac"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000001c0)={0x0, 0x8, 0x1}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2, 0xfffb, 0x101, 0x2, 0x3, 0xdfce, 0x8001, 0x4, 0x100, 0xfff4, 0x7832, 0x1}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x10}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) 2m51.258002372s ago: executing program 32 (id=173): r0 = syz_open_dev$mtd(&(0x7f0000000180), 0x0, 0x8403) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x27ff, 0x3ff}) ioctl$MEMWRITE(r0, 0xc0304d18, 0x0) 2m49.308892369s ago: executing program 1 (id=194): r0 = syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x98c2, &(0x7f0000000700)="$eJzs3QeYXHXBeP9NQugIAiqCBQEFUelSLTRBpEgXEKQ3pQmogFRBEVBAsSAWQKQqRaQJUkTpvffee+8l/yck0RgPEX//931RzjnPk+zOnTt373w/c+/d3Ts7s8piKyw8MDD+wIimHRizR+Y5c7OtH1xm0LGnrvnojEtOOv/IySNvMNXIi1MNGvlx8MDAwOCRyxk5baL7Tzhx8MA4r03/exNNMOGgSQYG5hh5ccGRH+cZ8WGKB0bNN2yMxlzRQX+7OGjPEf9ea9LhX2L4J3Pt//xCAwMDk412++E3me2f7qi0VRZafLG/W/3NbbjV0JGfj/5v3BH/prhrYGCK2wf48TH6vIPehLs0/GtOdsM1283yJnzt/7oWXnrZ1cbwH74tDhk5bZ7h2/iY26CxMR/nJx95zOMjh/C1x9vAwPBd3D9sK/8VrbLQYksNvP5+fuDCeV98bNhr+82JHh8YmOiJgYGJnhwYmOipgYGJnh4YmOiZN9ul/v+10MJzLjx8ex91eST7qMfyZKMeF8+P9rh4doEPnjgwMDDeiHkmenXE8WLiaUcdE6qqquo/u4UWnnMROP6PP+bxf/TvCx+8Zt+nOv5XVVX997bEQgvPOfw4Psbxf+JRvwem4//0uw1dfMTv/hecZ8StXn1z70RVVVX9Wy22BB7/Jxvbz/8b3DJkj47/VVVV/70tv/Rrx/+Jxzj+Tzm24//QaSa5c+R8o75veGW0Rb72e4OR018abfqQ0aa/ONr0oaMtZ/T5xx1t+vOjTR9/YGCi+0dOf/nvkyd6fPht/nk5Ez379+fjTDXOaNOfG236uKNNf37kOg2fPt5o018Zbf7x/z594uH/TTvy674wlqGuqqr6j2n5ORdbZGC059mPnDzqif34vNBzh6347Ju1vlVVVVVVVVX17/fqI6ee8fe/+X7fwGh/u/q3v2Ed+XuBQceddfnlb9qK/mc06J9/H7Lzm71O/38b7jz+UdMODGy20pu9KvUm9F/zt+r1v1L+7vJ3l7+7kf5D3+z1qDen//ftf9X/0fWoN6f2/+7yd5e/u/zd5e8uf3f5u8tf3Ouc///b3//vfsEqnxk563xnHz14yb/fcqqBjUd+9sg8Z2628Zuw7m9Cb9Xz/wMbDxoYGOk72XDLZRZafsWZBgYGlhx89NlzD/ztunmHX7fA5ENe+2POgYGZXvt/6FSvs+SR77Lw2ps7TPm3ZRz32vKXGHbwkEFjrMRovf2kQw/daJXn5hrz44yvfz/+9v4Sz01x6LSj/pZl8Bgzjf86Nx61/FH3ZUznkes+0/B1n3XrTbeYdattt/vYxpuuveH6G66/2ZxzzDPHvPPMNt98c866wcabrD/biP9fZ8xGvHXFkDcyZhOPOWaPLDT6mI15315vzP75XT3+YRGvLfHweaY7f9SYjfNvjtmQsY/ZtBuP/EJTDQwdWOu1oRk0MDDVOEMHthl+YfbxBgamGjpy3qmGz/uJyQcPDOz79zs6aOSLjY6YZ9DOw+f5D3vfkvlGjsgOo+Yb83XWx1zRf/W+JTctfMR0Y7xvyf9W/0/H/3/ymnfQ3wZq1BsgjJxnhNdCiy/xZr7PxD+t77TjvHaQe731Hcvr4rwWPb7GmXfeHf+nXheH1nfisazvWF7H73XXd6G1P3XciEX9j63vGPu6pUZc+Ub2dQNj39cNoduvf8l7x9zXLfn6q/gP2/GoMRpvjJleb193/XKn7Dx8+QNj39cttfHIM6l/39cNHhiYasiofd3wHd+4Qwf2HX5hjuEXxhs6cMTwC3O+dmGCgbOGX5hl3c03WW/Qay8zMHK5sw1f7oKTD3rNfeeZZ95v2H7Dho0zcl2enegf13Xk42Pa0Y/nC00+YjBH3XbUcofPOmq5s2034rpxRy73uX9juaNuS+v7/Oojrhtv5HKfH2O5Q8ey3FG3/aftYaZB//BEVdjfvKnva0Tb7/hjWd+xvA43Pt6GTztw630u+R94He5Br7e+44x9fV/vfUNed313PWD+vf6nXjecHmfXzzjisTL+yMfZK//G43fUbcfcj414VsSI3f74b2Q/Nu0/7cd2GTJ4jMEerdf7nm09mH/E51P9bWm37Hb5h0eN/ZjP3vhX37ONdl8GwX5ssjF+nhu000EDg2jM9z1g0Dqv/osxHzrwjz9bjBrzUbcd25iP90bG/D1jH/M3+n3yTNOPuH7oGOs/+pgfOjD3aaPGfNwxlvuvxny8sR87/nnMBwaG0pg/fveIcRvb/vT1xnzUbUeN+fCvs8Dk4wwM/yF/hpFjPu4bGfOp/mce5xPC/CM+X/9vkxa4/44zRo35mGP8r8Z83H9zzHe8/W+P8xleu266wQPjjjuwzdpbb73l7CP+H3VxjhH/877olPNGjPPYjqWvZzTqtmPbLsZ5I0aTvSGjQf/KaOpxXs/o75vWOQcsefr/675onH/X6CzeF21z/IhxG9v3Ra835qNuS8fBKUe7/Zg/h47l9bPwPg2ftsk0qx48apEjb/Zmvn7WqJ93/ytfP2vU7yQ3HnMnX2+0fv/vLn93+bvL313+4l7n/P+0o87/3733CmuM/KFz6P0rT3rHm72+b3Jv6fP/I33/4fz/HZOufP/wH61GXjfW87Mj5vmPPD87z4gPUzwwar4xzw+OuaL/6vzsczd9ds7/o/Oz/0+N2lbfwM/F7f/d5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+4l7n/P9so54HMP3SZyw58kTo0EW3X2m/N3t93+Te0uf/R/r+w/n//VbaftHBA3+7bqzn/0fM4zj/v+eQRQ75Tz7/P2pbHfv5f/yr2nLV8d9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3O+f8FRz0P4KpZDz5s1PMBDrt/lhXf7PV9k3urnv/v/f+9tf93l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5ixt5/n9gjLdJXLbHBQbn//+7ex3/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/wv5Yxb/VfLHLP6r5o9Z/FfLH7P4fzF/zOK/ev6YxX+N/DGL/5fyxyz+a+aPWfzXeqP+F//r9xd/K2XxX7vtH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv8N88cs/hvlj1n8N84fs/h/OX/M4v+V/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvH/av6YxX/L/DGL/1b5Yxb/rfPHLP5fyx+z+H89f8zi/438MYv/NvljFv9t88cs/tvlj1n8v5k/ZvHfPn/M4r9D/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8v5U/ZvHfNX/M4r9b/pjF/9v5Yxb/7+SPWfx3zx+z+H83f8ziv0f+mMV/z/wxi/9e+WMW/+/lj1n8v58/ZvHfO3/M4r9P/pjFf9/8MYv/D/LHLP4/zB+z+O+XP2bx/1H+mMX/x/ljFv+f5I9Z/H+aP2bx3z9/zOL/s/wxi/8B+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/wPzxyz+B+WPWfwPzh+z+P86f8zif0j+mMX/N/ljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/t/ljFv/f5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//f5Yxb/4/PHLP5/yB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/P+aPWfxPzR+z+J+WP2bx/1P+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfz/nD9m8T87f8zi/5f8MYv/X/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjBf/yBgYEL88cM/sO7KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+Z/5iNGh6F/1P5Y5bt/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+w/LHJP6DBvLHLP6D8scs/oPzxyz+Q/LHLP7j5I9Z/Ifmj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfzflj9m8Z80f8ziP1n+mMX/7fljFv/J88cs/lPkj1n8p8wfs/i/I3/M4v/O/DGL/7vyxyz+U+WPWfzfnT9m8Z86f8ziP03+mMX/PfljFv/35o9Z/N+XP2bxf3/+mMV/2vwxi/8H8scs/tPlj1n8p88fs/jPkD9m8f9g/pjF/0P5Yxb/GfPHLP4z5Y9Z/D+cP2bxnzl/zOL/kfwxi/9H88cs/h/LH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nOJ/QeP5TqL/8fF/mPL4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/In/M4v/J/DGL/6fyxyz+n84fs/gvmD9m8V8of8ziv3D+mMV/kfwxi/+i+WMW/8/kj1n8F8sfs/gvnj9m8f9s/pjFf4n8MYv/5/LHLP5L5o9Z/JfKH7P4L50/ZvFfJn/M4v/5/DGL/7L5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjF/wv5Yxb/VfLHLP6r5o9Z/FfLH7P4fzF/zOK/ev6YxX+N/DGL/5fyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4b5w/ZvH/cv6Yxf8r+WNvTf/DXvt0dP9N8sfemv4jGt1/0/wxi/9m+WMW/83zxyz+W+SPWfy/mj9m8d8yf8ziv1X+mMV/6/wxi//X8scs/l/PH7P4fyN/zOK/Tf6YxX/b/DGL/3b5Yxb/b+aPWfy3zx+z+O+QP2bx3zF/zOK/U/6YxX/n/DGL/y75Yxb/b+WPWfx3zR+z+O+WP2bx/3b+mMX/Oyb/rd/4rBb/3U3+/0YW/+/mj1n898gfs/jvmT9m8d8rf8zi/738MYv/9/PHLP57549Z/PfJH7P475s/ZvH/Qf6Yxf+H+WMW//3yxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+++ePWfx/lj9m8T8gf8zi//Mx/YeN7P949f7Tsvj/ou0fs/j/Mn/M4v+r/DGL/4H5Yxb/g/LHLP4H549Z/H+dP2bxPyR/zOL/m/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOL/2/wxi//v8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi//v8MYv/8fljFv8/5I9Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/H/PHLP6n5o9Z/E/LH7P4/yl/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5/zh+z+J+dP2bx/0v+mMX/r/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfyH5Y9J/F/71OY/7A3MY/EfJPR/I1n8B+ePWfyH5I9Z/MfJH7P4D80fs/iPmz9m8R8vf8ziP37+mMV/gvyxt7T/eH+bOnjC/LG3tP/fpw6eKH/M4j9x/pjFf5L8MYv/2/LHLP6T5o9Z/CfLH7P4vz1/zOI/ef6YxX+K/DGL/5T5Yxb/d+SPWfzfmT9m8X9X/pjFf6r8MYv/u/PHLP5T549Z/KfJH7P4vyd/zOL/3vwxi//78scs/u/PH7P4T5s/ZvH/QP6YxX+6/DGL//T5Yxb/GfLHLP4fzB+z+H8of8ziP2P+mMV/prH4T/1/sV7/oVn8P9z2j1n8Z84fs/h/JH/M4v/R/DGL/8fyxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/j+ePWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/T+SPWfw/mT9m8f9U/pjF/9P5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvFfNH/M4v+Z/DGL/2L5Yxb/xfPHLP6fzR+z+C+RP2bx/1z+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfw/nz9m8V82f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+H8hf8ziv0r+mMV/1fwxi/9q+WMW/y/mj1n8V88fs/ivkT9m8f9S/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+X84fs/h/JX/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8v5o/ZvHfMn/M4r9V/pjFf+v8MYv/1/LHLP5fzx+z+H8jf8ziv03+mMV/2/wxi/92+WMW/2/mj1n8t88fs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/8u+WMW/2/lj1n8d80fs/jvlj9m8f92/pjF/zv5Yxb/3fPHLP7fzR+z+O+RP2bx3zN/zOK/V/6Yxf97+WMW/+/nj1n8984fs/jvkz9m8d83f8zi/4P8MYv/D/PHLP775Y9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/PfPH7P4/yx/zOJ/QP6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/A/DGL/0H5Yxb/g/PHLP6/zh+z+B+SP2bx/03+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bx/23+mMX/d/ljFv+j88cs/sfkj1n8j80fs/gflz9m8f99/pjF//j8MYv/H/LHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/4/5Yxb/U/PHLP6n5Y9Z/P+UP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/P+ePWfzPzh+z+P8lf8zi/9f8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yw3/8wVfnjzn8BwZfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4j8sf0ziP2Qgf8ziPyh/zOI/OH/M4j8kf8ziP07+mMV/aP6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/235Yxb/SfPHLP6T5Y9Z/N+eP2bxnzx/zOI/Rf6YxX/K/DGL/zvyxyz+78wfs/i/K3/M4j9V/pjF/935Yxb/qfPHLP7T5I9Z/N+TP2bxf2/+mMX/ffljFv/3549Z/KfNH7P4fyB/zOI/Xf6YxX/6/DGL/wz5Yxb/D+aPWfw/lD9m8Z8xf8ziP1P+mMX/w/ljFv+Z88cs/h/JH7P4fzR/zOL/sfwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6Yxf/j+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf8T+WMW/0/mj1n8P5U/ZvH/dP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4fyZ/zOK/WP6YxX/x/DGL/2fzxyz+S+SPWfw/lz9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/8/nj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+X8gfs/ivkj9m8V81f8ziv1r+mMX/i/ljFv/V88cs/mvkj1n8v5Q/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi/+X88cs/l/JH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/FvljFv+v5o9Z/LfMH7P4b5U/ZvHfOn/M4v+1/DGL/9fzxyz+38gfs/hvkz9m8d82f8ziv13+mMX/m/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8d85f8ziv0v+mMX/W/ljFv9d88cs/rvlj1n8v50/ZvH/Tv6YxX/3/DGL/3fzxyz+e+SPWfz3zB+z+O+VP2bx/17+mMX/+/ljFv+988cs/vvkj1n8980fs/j/IH/M4v/D/DGL/375Yxb/H+WPWfx/nD9m8f9J/pjF/6f5Yxb//fPHLP4/yx+z+B+QP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bxPzB/zOJ/UP6Yxf/g/DGL/6/zxyz+h+SPWfx/kz9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfx/mz9m8f9d/pjF/+j8MYv/MfljFv9j88cs/sflj1n8f58/ZvE/Pn/M4v+H/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvH/Y/6Yxf/U/DGL/2n5Yxb/P+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/P+WMW/7Pzxyz+f8kfs/j/NX/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/7C3rP84/TB1yTf7YW9Z/jO3/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/Wf+2vfHhY/G+zAv+LLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB9T+O/y5q3Of3oK/4GBIU+1/WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4D8sfk/i/9mqw+f9zFv9B+WMW/8H5Yxb/IfljFv9x8scs/kPzxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8RG//H+9SwW/0mM/m8gi//b8scs/pPmj1n8J8sfs/i//V/5Sx8cFv/JvcRjzeI/Rf6YxX/K/DGL/zvyxyz+78wfs/i/K3/M4j9V/pjF/935Yxb/qWX+47zB+Sz+08j832gW//fkj1n835s/ZvF/X/6Yxf/9+WMW/2nzxyz+H8gfs/hPlz9m8Z8+f8ziP0P+mMX/g/ljFv8P5Y9Z/GfMH7P4z5Q/ZvH/cP6YxX/m/DGL/0fyxyz+H80fs/h/LH/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8f94/mPtre4/d/6YZfufJ3/M4j9v/pjFf778MYv//PljFv8F8scs/p/IH7P4fzJ/zOL/qfwxi/+n88cs/gvmj1n8F8ofs/gvnD9m8V8kf8ziv2j+mMX/M/ljFv/F8scs/ovnj1n8P5s/ZvFfIn/M4v+5/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fz5/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvH/Qv6YxX+V/DGL/6r5Yxb/1fLHLP5fzB+z+K+eP2bxXyN/zOL/pfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/L+cP2bx/0r+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+H81f8ziv2X+mMV/q/wxi//W+WMW/6/lj1n8v54/ZvH/Rv6YxX+b/DGL/7b5Yxb/7fLHLP7fzB+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfL/ey8NGzZs5KcW/2/lj1n8d80fs/jvlj9m8f92/pjF/zv5Yxb/3fPHLP7fzR+z+O+RP2bx3zN/zOK/V/6Yxf97+WMW/+/nj1n8984fs/jvkz9m8d83f8zi/4P8MYv/D/PHLP775Y9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/PfPH7P4/yx/zOJ/QP6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/A/DGL/0H5Yxb/g/PHLP6/zh+z+B+SP2bx/03+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bx/23+mMX/d/ljFv+j88cs/sfkj1n8j80fs/gflz9m8f99/pjF//j8MYv/H/LHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/4/5Yxb/U/PHLP6n5Y9Z/P+UP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/P+ePWfzPzh+z+P8lf8zi/9f8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+w/LHJP5DB/LHLP6D8scs/oPzxyz+Q/LHLP7j5I9Z/Ifmj1n8x80fs/iPlz9m8R8/f8ziP0H+mMV/wtf1f3HYsGH/N6v2n5jFf6K2f8ziP3H+mMV/kvwxi//b8scs/pPmj1n8J8sfs/i/PX/M4j95/pjFf4r8MYv/lPljFv935I9Z/N+ZP2bxf1f+mMV/qvwxi/+788feuv5Tjj516NT5Y29d/3/c/qfJH7P4vyd/zOL/3vwxi//78scs/u/PH7P4T5s/ZvH/QP6YxX+6/DGL//T5Yxb/GfLHLP4fzB+z+H8of8ziP2P+mMV/pvwxi/+H88cs/jPnj1n8P5I/ZvH/aP6Yxf9j+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/8fzxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvH/TP6YxX+x/DGL/+L5Yxb/z+aPWfyXyB+z+H8uf8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+n88fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfy/kD9m8V8lf8ziv2r+mMV/tfwxi/8X88cs/qvnj1n818gfs/h/KX/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/y/nj1n8v5I/ZvHfJH/M4r9p/thb23/cUVOHbpY/9tb2/1tDN88fs/hvkT9m8f9q/pjFf8v8MYv/VvljFv+t88cs/l/LH7P4fz1/zOL/jfwxi/82+WMW/23zxyz+2+WPWfy/mT9m8d8+f8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+u+SPWfy/lT9m8d81f8ziv1v+mMX/2/ljFv/v5I9Z/HfPH7P4fzd/zOK/R/6YxX/P/DGL/175Yxb/7+WPWfy/nz9m8d87f8ziv0/+mMV/3/wxi/8P8scs/j/MH7P475c/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvHfP3/M4v+z/DGL/wH5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/A/PHLP4H5Y9Z/A/OH7P4/zp/zOJ/SP6Yxf83+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf+3+WMW/9/lj1n8j84fs/gfkz9m8T82f8zif1z+mMX/9/ljFv/j88cs/n/IH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv8/5o9Z/E/NH7P4n5Y/ZvH/U/6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/P+cP2bxPzt/zOL/l/wxi/9f88cs/ueo/Ye87jUW/3PV/q+fxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/OpH/4H9jXov/9SL/fyeL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8ziPyx/TOI/7kD+mMV/UP6YxX9w/pjFf0j+mMV/nPwxi//Q/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/2/LHLP6T5o9Z/CfLH7P4vz1/zOI/ef6YxX+K/DGL/5T5Yxb/d+SPWfzfmT9m8X9X/pjFf6r8MYv/u/PHLP5T549Z/KfJH7P4vyd/zOL/3vwxi//78scs/u/PH7P4T5s/ZvH/QP6YxX+6/DGL//T5Yxb/GfLHLP4fzB+z+H8of8ziP2P+mMV/pvwxi/+H88cs/jPnj1n8P5I/ZvH/aP6Yxf9j+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/8fzxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/yfyxyz+n8wfs/h/Kn/M4v/p/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4L5o/ZvH/TP6YxX+x/DGL/+L5Yxb/z+aPWfyXyB+z+H8uf8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+n88fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfy/kD9m8V8lf8ziv2r+mMV/tfwxi/8X88cs/qvnj1n818gfs/h/KX/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/y/nj1n8v5I/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/l/NH7P4b5k/ZvHfKn/M4r91/pjF/2v5Yxb/r+ePWfy/kT9m8d8mf8ziv23+mMV/u/wxi/8388cs/tvnj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMV/l/wxi/+38scs/rvmj1n8d8sfs/h/O3/M4v+d/LG3pP+gcV77dHT/3fPH3pL+Iz8d3f+7+WMW/z3yxyz+e+aPWfz3yh+z+H8vf8zi//38MYv/3vljFv998scs/vvmj1n8f5A/ZvH/Yf6YxX+//DGL/4/yxyz+P84fs/j/JH/M4v/T/DGL//75Yxb/n+WPWfwPyB+z+P88f8zi/4v8MYv/L/PHBj3ykQGD/6/yxyzb/4H5Yxb/g/LHLP4H549Z/H+dP2bxPyR/zOL/m/wxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOL/2/wxi//v8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi//v8MYv/8fljFv8/5I9Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/H/PHLP6n5o9Z/E/LH7P4/yl/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5/zh+z+J+dP2bx/0v+mMX/r/ljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfyH5Y9J/McbyB+z+A/KH7P4D84fs/gPyR+z+I+TP2bxH5o/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8X9b/pjFf9L8MYv/ZPljFv+3549Z/CfPH7P4T5E/ZvGfMn/M4v+O/DGL/zvzxyz+78ofs/hPlT9m8X93/pjFf+r8MYv/NPljFv/35I9Z/N+bP2bxf1/+mMX//fljFv9p88cs/h/IH7P4T5c/ZvGfPn/M4j9D/pjF/4P5Yxb/D+WPWfxnzB+z+M+UP2bx/3D+mMV/5vwxi/9H8scs/h/NH7P4fyx/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvH/eP6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvH/RP6Yxf+T+WMW/0/lj1n8P50/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/p/JH7P4L5Y/ZvFfPH/M4v/Z/DGL/xL5Yxb/z+WPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf/z+WMW/2Xzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/xfyxyz+q+SPWfxXzR+z+K+WP2bx/2L+mMV/9fwxi/8a+WMW/y/lj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/5fwxi/9X8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMX/q/ljFv8t88cs/lvlj1n8t84fs/h/LX/M4v/1/DGL/zfyxyz+2+SPWfy3zR+z+G+XP2bx/2b+mMV/+/wxi/8O+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/1b+mMV/1/wxi/9u+WMW/2/nj1n8v5M/ZvHfPX/M4v/d/DGL/x75Yxb/PfPHLP575Y9Z/L+XP2bx/37+mMV/7/wxi/8++WMW/33zxyz+P8gfs/j/MH/M4r9f/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjFf//8MYv/z/LHLP4HGP0H7fyvZ5H4/9zo/way+P8if8zi/8v8MYv/r/LHLP4H5o9Z/A/KH7P4H5w/ZvH/df6Yxf+Q/DGL/2/yxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/2/zxyz+v8sfs/gfnT9m8T8mf8zif2z+mMX/uPwxi//v88cs/sfnj1n8/5A/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/n/MH7P4n5o/ZvE/LX/M4v+n/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4/zl/zOJ/dv6Yxf8v+WMW/7/mj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxH5Y/JvEffyB/zOI/KH/M4j84f8ziPyR/zOI/Tv6YxX9o/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMX/bfljFv9J88cs/pPlj1n8354/ZvGfPH/M4j9F/pjFf8r8sbeg/7jk/478sbegP27/78wfs/i/K3/M4j/VWP2HDfnfX7H/zCz+7277xyz+U+ePWfynyR+z+L8nf8zi/978MYv/+/LHLP7vzx+z+E+bP2bx/0D+mMV/uvwxi//0+WMW/xnyxyz+H8wfs/h/KH/M4j9j/pjFf6b8MYv/h/PHLP4z549Z/D+SP2bx/2j+mMX/Y/ljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//H88cs/nPnj1n858kfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/8n8scs/p/MH7P4fyp/zOL/6fwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+C+aP2bx/0z+mMV/sfwxi//i+WMW/8/mj1n8l8gfs/h/Ln/M4r9k/pjFf6n8MYv/0vljFv9l8scs/p/PH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8v5A/ZvFfJX/M4r9q/pjFf7X8MYv/F/PHLP6r549Z/NfIH7P4fyl/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/Ncz+f8bd9Tiv77J/9/I4r9B/iMb/A+XLP4b5o9Z/DfKH7P4b5w/ZvH/cv6Yxf8r+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOL/1fwxi/+W+WMW/63yxyz+W+ePWfy/lj9m8f96/pjF/xv5Yxb/bfLHLP7b5o9Z/LfLH7P4fzN/zOK/ff6YxX+H/DGL/475Yxb/nfLHLP47549Z/HfJH7P4fyt/zOK/a/6YxX+3/DGL/7fzxyz+38kfs/jvnj9m8f9u/pjFf4/8MYv/nvljFv+98scs/t/LH7P4fz9/zOK/d/6YxX+f/DGL/775Yxb/H+SPWfx/mD9m8d8vf8zi/6P8MYv/j/PHLP4/yR+z+P80f8ziv3/+mMX/Z/ljFv8D8scs/j/PH7P4/yJ/zOL/y/wxi/+v8scs/gfmj1n8D8ofs/gfnD9m8f91/pjF/5D8MYv/b/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/b/PHLP6/yx+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL/+/zxyz+x+ePWfz/kD9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+f8wfs/ifmj9m8T8tf8zi/6f8MYv/6fljFv8z8scs/mfmj1n8z8ofs/j/OX/M4n92/pjF/y/5Yxb/v+aPWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvEflj8m8Z9gIH/M4j8of8ziPzh/zOI/JH/M4j9O/pjFf2j+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9t+WMW/0nzxyz+k+WPWfzfnj9m8Z88f8ziP0X+mMV/yvwxi/878scs/u/MH7P4vyt/zOI/Vf6Yxf/d+WMW/6nzxyz+0+SPWfzfkz9m8X9v/pjF/335Yxb/9+ePWfynzR+z+H8gf8ziP13+mMV/+vwxi/8M+WMW/w/mj1n8P5Q/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP4fyR+z+H80f8zi/7H8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/4/ljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+H8mf8ziv1j+mMV/8fwxi/9n88cs/kvkj1n8P5c/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/P549Z/JfNH7P4L2f3H58nW/yXt/u/Thb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvH/Qv6YxX+V/DGL/6r5Yxb/1fLHLP5fzB+z+K+eP2bxXyN/zOL/pfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jV7ff/D/yXr9h2bx37jtH7P4fzl/zOL/lfwxi/8m+WMW/03zxyz+m+WPWfw3zx+z+G+RP2bx/2r+mMV/y/wxi/9W+WMW/63zxyz+X8sfs/h/PX/M4v+N/DGL/zb5Yxb/bfPHLP7b5Y9Z/L+ZP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/nfPHLP675I9Z/L+VP2bx3zV/zOK/W/6Yxf/b+WMW/+/kj1n8d88fs/h/N3/M4r9H/pjFf8/8MYv/XvljFv/v5Y9Z/L+fP2bx3zt/zOK/T/6YxX/f/DGL/w/yxyz+P8wfs/jvlz9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8d8/f8zi/7P8MYv/AfljFv+f549Z/H+RP2bx/2X+mMX/V/ljFv8D88cs/gflj1n8D84fs/j/On/M4n9I/pjF/zf5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/7f5Yxb/3+WPWfyPzh+z+B+TP2bxPzZ/zOJ/XP6Yxf/3+WMW/+Pzxyz+f8gfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/z/mj1n8T80fs/iflj9m8f9T/pjF//T8MYv/GfljFv8z88cs/mflj1n8/5w/ZvE/O3/M4v+X/DGL/1/zxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4D8sfk/hPOJA/ZvEflD9m8R+cP2bxH5I/ZvEfJ3/M4j80f8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOL/tvwxi/+k+WMW/8nyxyz+b88fs/hPnj9m8Z8if8ziP2X+mMX/HfljFv935o9Z/N+VP2bxnyp/zOL/7vwxi//U+WMW/2nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+0+aPWfw/kD9m8Z8uf8ziP33+mMV/hvwxi/8H88cs/h/KH7P4z5g/ZvGfKX/M4v/h/DGL/8z5Yxb/j+SPWfw/mj9m8f9Y/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8zi//H8MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8zi/4n8MYv/J/PHLP6fyh+z+H86f8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i9r9x+PJFv/P2P1fJ4v/YvljFv/F88cs/p/NH7P4L5E/ZvH/XP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/D+fP2bxXzZ/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4fyF/zOK/Sv6YxX/V/DGL/2r5Yxb/L+aPWfxXzx+z+K+RP2bx/1L+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHRvqP91b3/3L+mGX7/0r+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+H81f8ziv2X+mMV/q/wxi//W+WMW/6/lj1n8v54/ZvH/Rv6YxX+b/DGL/7b5Yxb/7fLHLP7fzB+z+G+fP2bx3yF/zOK/Y/6YxX+n/DGL/875Yxb/XfLHLP7fyh+z+O+aP2bx3y1/zOL/7fwxi/938scs/rvnj1n8v5s/ZvHfI3/M4r9n/pjFf6/8MYv/9/LHLP7fzx+z+O+dP2bx3yd/zOK/b/6Yxf8H+WMW/x/mj1n898sfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/jvnz9m8f9Z/pjF/4D8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/gfljFv+D8scs/gfnj1n8f50/ZvE/JH/M4v+b/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v/b/DGL/+/yxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/+/wxi//x+WMW/z/kj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/8f88cs/qfmj1n8T8sfs/j/KX/M4n96/pjF/4z8MYv/mfljFv+z8scs/n/OH7P4n50/ZvH/S/6Yxf+v+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8UDA0PfrFX6T87if0nbP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOI/LH9M4j/RQP6YxX9Q/pjFf3D+mMV/SP6YxX+c/DGL/9D8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi//b8scs/pPmj1n8J8sfs/i/PX/M4j95/pjFf4r8MYv/lPljFv935I9Z/N+ZP2bxf1f+mMV/qvwxi/+788cs/lPnj1n8p8kfs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmz9m8f9A/pjFf7r8MYv/9PljFv8Z8scs/h/MH7P4fyh/zOI/Y/6YxX+m/DGL/4fzxyz+M+ePWfw/kj9m8f9o/pjF/2P5Yxb/WfLHLP6z5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/x/PHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8f9M/pjFf7H8MYv/4vljFv/P5o9Z/JfIH7P4fy5/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP6fzx+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/L+QP2bxXyV/zOK/av6YxX+1/DGL/xfzxyz+q+ePWfzXyB+z+H8pf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/L+ePWfy/kj9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+X80fs/hvmT9m8d8qf8ziv3X+mMX/a/ljFv+v549Z/L+RP2bx3yZ/zOK/bf6YxX+7/DGL/zfzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/7fyxyz+u+aPWfx3yx+z+H87f8zi/538MYv/7vljFv/v5o9Z/PfIH7P475k/ZvHfK3/M4v+9/DGL//fzxyz+e+ePWfz3yR+z+O+bP2bx/0H+mMX/h/ljFv/98scs/j/KH7P4/zh/zOL/k/wxi/9P88cs/vvnj1n8f5Y/ZvE/IH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9g/pjF/6D8MYv/wfljFv9f549Z/A/JH7P4/yZ/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4/zZ/zOL/u/wxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+P8+f8zif3z+mMX/D/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zi/8f8MYv/qfljFv/T8scs/n/KH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/n/PHLP5n549Z/P+SP2bx/2v+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/YfljEv+JB/LHLP6D8scs/oPzxyz+Q/LHLP7j5I9Z/Ifmj1n8x80fs/iPlz9m8R8/f8ziP4HWf+z32uI/odZ/7Fn8J8ofs/hPnD9m8Z8kf8zi/7b8MYv/pPljFv/J8scs/m/PH7P4T54/ZvGfIn/M4j9l/pjF/x35Yxb/d+aPWfzflT9m8Z8qf8zi/+78MYv/1PljFv9p8scs/u/JH7P4vzd/zOL/vvwxi//788cs/tPmj1n8P5A/ZvGfLn/M4j99/pjFf4b8MYv/B/PHLP4fyh+z+M+YP2bxnyl/zOL/4fwxi//M+WMW/4/kj1n8P5o/ZvH/WP6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4v/x/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v+J/DGL/yfzxyz+n8ofs/h/On/M4r9g/pjFf6H8MYv/wvljFv9F8scs/ovmj1n8P5M/ZvFfLH/M4r94/pjF/7P5Yxb/JfLHLP6fyx+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/+fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/L+SPWfxXyR+z+K+aP2bxXy1/zOL/xfwxi//q+WMW/zXyxyz+X8ofs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOK/cf6Yxf/L+WMW/6/kj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/9X88cs/lvmj1n8t8ofs/hvnT9m8f9a/pjF/+v5Yxb/b+SPWfy3yR+z+G+bP2bx3y5/zOL/zfwxi//2+WMW/x3yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOL/rfwxi/+u+WMW/93yxyz+384fs/h/J3/M4r97/pjF/7v5Yxb/PfLHLP575o9Z/PfKH7P4fy9/zOL//fwxi//e+WMW/33yxyz+++aPWfx/kD9m8f9h/pjFf7/8MYv/j/LHLP4/zh+z+P8kf8zi/9P8MYv//vljFv+f5Y9Z/A/IH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4H5g/ZvE/KH/M4n9w/pjF/9f5Yxb/Q/LHLP6/yR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP6/zR+z+P8uf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+v88fs/gfnz9m8f9D/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/j/MX/M4n9q/pjF/7T8MYv/n/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4v/n/DGL/9n5Yxb/v+SPWfz/mj9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6YxX9Y/pjEf5KB/DGL/6D8MYv/4Pwxi/+Q/DGL/zj5Yxb/ofljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/7flj1n8J80fs/hPlj9m8X97/pjFf/L8MYv/FPljFv8p88cU/sN2muQd+WMK/4GBSd6ZP2bxf1f+mMV/qvwxi/+788cs/lPnj1n8p8kfs/i/J3/M4v/e/DGL//vyxyz+788fs/hPmz9m8f9A/pjFf7r8MYv/9PljFv8Z8scs/h/MH7P4fyh/zOI/Y/6YxX+m/DGL/4fzxyz+M+ePWfw/kj9m8f9o/pjF/2P5Yxb/WfLHLP6z5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/x/PHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/J/LHLP6fzB+z+H8qf8zi/+n8MYv/gvljFv+F8scs/gvnj1n8F8kfs/gvmj9m8f9M/pjFf7H8MYv/4vljFv/P5o9Z/JfIH7P4fy5/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP6fzx+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/L+QP2bxXyV/zOK/av6YxX+1/DGL/xfzxyz+q+ePWfzXyB+z+H8pf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/8b5Yxb/L+ePWfy/kj9m8d8kf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+X80fs/hvmT9m8d8qf8ziv3X+mMX/a/ljFv+v549Z/L+RP2bx3yZ/zOK/bf6YxX+7/DGL/zfzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOK/c/6YxX+X/DGL/7fyxyz+u+aPWfx3yx+z+H87f8zi/538MYv/7vljFv/v5o9Z/PfIH7P475k/ZvHfK3/M4v+9/DGL//fzxyz+e+ePWfz3yR+z+O+bP2bx/0H+mMX/h/ljFv/98scs/j/KH7P4/zh/zOL/k/wxi/9P88cs/vvnj1n8f5Y/ZvE/IH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4n9g/pjF/6D8MYv/wf/af4L/1fX6D83i/+u2f8zif0j+mMX/N/ljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/t/ljFv/f5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//f5Yxb/4/PHLP5/yB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/P+aPWfxPzR+z+J+WP2bx/1P+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfz/nD9m8T87f8zi/5f8MYv/X/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/gPyx+T+L9tIH/M4j8of8ziPzh/zOI/JH/M4j9O/pjFf2j+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf9t+WMW/0nzxyz+k+WPWfzfnj9m8Z88f8ziP0X+mMV/yvwxi/878scs/u/MH7P4vyt/zOI/Vf6Yxf/d+WMW/6nzxyz+0+SPWfzfkz9m8X9v/pjF/335Yxb/9+ePWfynzR+z+H8gf8ziP13+mMV/+vwxi/8M+WMW/w/mj1n8P5Q/ZvGfMX/M4j9T/pjF/8P5Yxb/mfPHLP4fyR+z+H80f8zi/7H8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMX/4/ljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMX/E/ljFv9P5o9Z/D+VP2bx/3T+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+H8mf8ziv1j+mMV/8fwxi/9n88cs/kvkj1n8P5c/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/P549Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/l/IH7P4r5I/ZvFfNX/M4r9a/pjF/4v5Yxb/1fPHLP5r5I9Z/L+UP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/l/PHLP5fyR+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/r+aPWfy3zB+z+G+VP2bx3zp/zOL/tfwxi//X88cs/t/IH7P4b5M/ZvHfNn/M4r9d/pjF/5v5Yxb/7fPHLP475I9Z/HfMH7P475Q/ZvHfOX/M4r9L/pjF/1v5Yxb/XfPHLP675Y9Z/L+dP2bx/07+mMV/9/wxi/9388cs/nvkj1n898wfs/jvlT9m8f9e/pjF//v5Yxb/vfPHLP775I9Z/PfNH7P4/yB/zOL/w/wxi/9++WMW/x/lj1n8f5w/ZvH/Sf6Yxf+n+WMW//3zxyz+P8sfs/gfkD9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8T8wf8zif1D+mMX/4Pwxi/+v88cs/ofkj1n8f5M/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8f5s/ZvH/Xf6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/H+fP2bxPz5/zOL/h/wxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bx/2P+mMX/1Pwxi/9p+WMW/z/lj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/z/ljFv+z88cs/n/JH7P4/zV/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/WpP/oIGBnd/orBL/60z+/0YW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/sPwxif+kA/8f+/TQA4qhRWH0XRvPtm2rtm3btm3btm3btm0bt/0De3A7aNJ0rzU+g5N82fpHLf0H6B+19B+of9TSf5D+UUv/wfpHLf2H6B+19B+qf9TSf5j+UUv/4fpHLf1H6B+19B+pf9TSf5T+UUv/0fpHLf3H6B+19B+rf9TSf5z+UUv/8fpHLf2/qH/U0v9L+kct/b+sf9TS/yv6Ry39v6p/1NL/a/pHLf2/rn/U0v8b+kct/b+pf9TS/1v6Ry39v61/1NL/O/pHLf2/q3/U0v97+kct/b+vf9TS/wf6Ry39f6h/1NL/R/pHLf1/rH/U0v8n+kct/X+qf9TS/2f6Ry39f65/1NL/F/pHLf1/qX/U0v9X+kct/X+tf9TS/zf6Ry39f6t/1NL/d/pHLf1/r3/U0v8P+kct/f+of9TS/0/6Ry39/6x/1NL/L/pHLf3/qn/U0v9v+kct/f+uf9TS/x/6Ry39/6l/1NL/X/pHLf3/rX/U0v8/+kct/f+rf9TS/3/6Ry39/69/1NJ/Ev2jlv6T6h+19J9M/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+k+tf9TSfxr9o5b+036S/hM+hb8+o1r6T2f/UUv/6fWPWvrPoH/U0n9G/aOW/jPpH7X0n1n/qKX/LPpHLf1n1T9q6T+b/lFL/9n1j1r6z6F/1NJ/Tv2jlv5z6R+19J9b/6il/zz6Ry3959U/auk/n/5RS//59Y9a+i+gf9TSf0H9o5b+C+kftfRfWP+opf8i+kct/RfVP2rpv5j+UUv/xfWPWvovoX/U0n9J/aOW/kvpH7X0X1r/qKX/MvpHLf2X1T9q6b+c/lFL/+X1j1r6r6B/1NJ/Rf2jlv4r6R+19F9Z/6il/yr6Ry39V9U/aum/mv5RS//V9Y9a+q+hf9TSf039o5b+a+kftfRfW/+opf86+kct/dfVP2rpv57+UUv/9fWPWvpvoH/U0n9D/aOW/hvpH7X031j/qKX/JvpHLf031T9q6b+Z/lFL/831j1r6b6F/1NJ/S/2jlv5b6R+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfTfWf+opf8u+kct/XfVP2rpv5v+UUv/3fWPWvrvoX/U0n9P/aOW/nvpH7X037ur//CJPWzpv09X/4nW0n9f/aOW/vvpH7X031//qKX/AfpHLf0P1D9q6X+Q/lFL/4P1j1r6H6J/1NL/UP2jlv6H6R+19D9c/6il/xH6Ry39j9Q/aul/lP5RS/+j9Y9a+h+jf9TS/1j9o5b+x+kftfQ/Xv+opf8J+kct/U/UP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/7P1j1r6n6N/1NL/XP2jlv7n6R+19D9f/6il/wX6Ry39L9Q/aul/kf5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfS/XP+opf8V+kct/a/UP2rpf5X+UUv/q/WPWvpfo3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r636J/1NL/Vv2jlv636R+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/1NL/Wf2jlv7P6R+19H9e/6il/wv6Ry39X9Q/aun/kv5RS/+X9Y9a+r+if9TS/1X9o5b+r+kftfR/Xf+opf8b+kct/d/UP2rp/5b+UUv/t/WPWvq/o3/U0v9d/aOW/u/pH7X0f1//qKX/B/pHLf0/1D9q6T9B/6il/0f6RyX9x39B/6il/wD9o5b+A/WPWvoP0j9q6T9Y/6il/xD9o5b+Q/WPWvoP0z9q6T9c/6il/wj9o5b+I/WPWvqP0j9q6T9a/6il/xj9o5b+Y/WPWvqP0z/63PUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GP27T/G67qA4/jnfiJYgEL6luJHUB5qcPwwjh8ls1bjZB0jXdO1FAYnaqAGt+KH0bFp6w82cbFmTSet3cwWa0znSKK0dDE3ppu00rJJOWM4nLaF9mNd+3Lf73H39bjxfV/vN3/wePxx9/18jtfngO3J53PjDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAlDZt2frV1evXd270wgsvvOh/ca7/ZQJSOx39uf6dAAAAAAAAAAAAAAAAZ5Ljx4nO9Z8RAAAAAADON+0d155oqBt0qmHgweTDnafeX/3ujbf19Dx5UeV9+cPLh7hk/cCD3t7e3h0H3lxWPhxVFEXps40vH19QPS5dv3v/yj/0HYXiRNuv7uw63lH3s6dueatl+bjFTafONhWrbr19feec+qIIDU3F5tLB3LqiCM1Nxa7SwbzSwaim4selg/mnDkYXT5cOZq+5a/3a0on3fWo477R3dBcNg4otBv1rMLD/7v2PvFd5P8wlK1drLMr9X/r5Z3ZVfaziDP1Xrh/qqvuv+Q8InFFt/T/eXXk/zCXfd/+f+Nft1w31sTP3X7l+qNc/pDPE8/+gRquf+6ue/6cNccn+/aHpbY+W+t/28PMPlU81ns3z/+nrh4bq/usHPf+XnuMbK8//o4oiNI3wrwPOK+0dO04Md/8fvv/GSVWbuoH9H1z+g+dK/U/tmNhYPtVUY/+Nw9z/67Y/Pfj3CtSmveOHvVX3/xr6L1qGuGR//9N6Jrxb6v+a8f9+fcDHaum/qbr/1q4Nd7du2rJ11u0bVq/rXNd55/x5bfMWts1ZtGh+66lHgr63I/xbgfPDyO7/xZiqTV1RdPbvf3n02JJS/5uOHNtcPnVBjf03D3v/f839H4Y0vb5obi42r+7q2ji3723lcF7f275fNkT/NXz9P2Nm+ZdVvu4ufUHevz+woOgp9b/zlRu2lE8119j/qOH6/9bpzwtEGOH9f23VZlD/V7x476ul/ve9/eb15VO1fv1/wbD973H/h5Fo76j6hp//s1L/J08ejPxmmzDa//9BOjn6f6X+p0/GrcMY/UM6Ofp/4J5RQ32fwFkIF+of0snR/6aH1rwQtw4f0D+kk6P/hX85dFPcOnxQ/5BOjv4nXvLy3+LWYaz+IZ0c/d9y28avxa3DOP1DOjn6P3bvs/fErcN4/UM6Ofr/0b/uOh63DhfpH9LJ0f/9Y7ffELcOF+sf0snR/7N3/+7XceswQf+QTo7+L9+1b1bcOkzUP6STo/8Nb006ELcOH9I/pJOj/2snXRj5c7rhEv1DOjn6H7N2z3fj1uFS/UM6Ofrv2jv7z3HrEPQP6Zxt/6Mjr1/qf+lL9y2LW4fL9A/p5Lj/T2jZfTJuHSbpH9LJ0f+NNy1dFbcOH9Y/pJOj/6d+/uX749bhI/qHdHL0/85v374sbh0m6x/SydH/q/OPPhq3DlP0D+nk6P97X7hubtw6TNU/pJOj/8eP7/xF3DpM0z+kk6P/93a3XBm3Dh/VP6STo/8jqxbsjluH6fqHdHL0/8iUh+vj1mGG/iGdHP1/87//PBG3Dh/TP6STo/8F3V/cFrcOH9c/pJOj/0ldn30ubh0u1z+kk6P/lWOOXR+3Di36h3Ry9N/6m1unxK3DTP1DOjn6X3vw8Hfi1uEK/UM6Ofpf1v6nBXHrcKX+IZ0c/Te0fWNP3DpcpX9IJ0f/R38/YUXcOnxC/5BOjv5/8tj+l+PWYZb+IZ0c/X/7K4+ti1uH2fqHdHL0f3hG/Ttx69Cqf0gnR/9bX3jiP3HrMEf/kE6O/ufum3pH3DrM1T+kk6P/yZ8beyRuHebpH9LJ0f+XlvR8Jm4d5usf0snR/xN/fGZv3DpcrX9IJ0f/vT13LIlbh0/qH9LJ0f9LK7fdF7cOC/QP6eTo/8HWFyfErUOb/iGdHP2/8cbNN8etw0L9Qzo5+t/74D8Oxa3DIv1DOjn637H+9a/HrcNi/UM6Ofp//uIVr8WtwxL9Qzo5+p/596vGxa3Dp/QP6eTof83O7u/HrcOn9Q/p5Oh/xeYHWuLW4Rr9Qzo5+m9sXrwvbh2W6h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgpAAD//zdxcW4=") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x10000000005) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x6) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r5, &(0x7f0000012480)=""/102392, 0x18ff8) socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f000002b480)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c8, 0xffffffff, 0xffffffff, 0x4c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0x0, 0xff000000], 'batadv0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x8, 0x1, 0x1}, 0x0, 0x298, 0x308, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x2, 0x6, 0x4, 0x3, 'syz1\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0x3, 0x5, 0x1, 0x0, "8aac9b9c52f8bf21b937e9f4ecbfb04ae945800000000000000061a813fb48aa8b18076a1d05fc716edb0a0e2057d0ac3dacfde3ce76bf1900"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYRESDEC=r1, @ANYRES8, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f00000123c0)='./file0\x00', &(0x7f0000012400)) openat(r0, &(0x7f0000000440)='./file0\x00', 0x2, 0x105) 2m45.943887999s ago: executing program 1 (id=192): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 2m42.642610048s ago: executing program 1 (id=200): r0 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, r2, 0x7fff, 0x3}, 0x10) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x1, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00", 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x4}) 2m42.484988552s ago: executing program 33 (id=200): r0 = syz_open_dev$swradio(&(0x7f0000000a80), 0x0, 0x2) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) connect$nfc_raw(r1, &(0x7f0000000040)={0x27, r2, 0x7fff, 0x3}, 0x10) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x1, "12f7f538cc9ad9f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00", 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x4}) 2m40.48588338s ago: executing program 4 (id=207): r0 = io_uring_setup(0xfa4, &(0x7f0000000000)={0x0, 0xbe4d, 0x10, 0x3, 0x16b}) close(r0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) 2m39.447201515s ago: executing program 4 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000100880001000000"], 0x14}, 0x1, 0x0, 0x0, 0xdf914cd3c10f80a}, 0x24004080) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f000000a180)={0x2020}, 0x2020) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f000000c1c0)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f000000c240)={0x9f0000, 0x6e0f475b, 0xb924, r3, 0x0, &(0x7f000000c200)={0x9a0905, 0x9, '\x00', @ptr}}) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x9c000, 0x18fab81b1e18aa41) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000800, &(0x7f0000000140)={[{@logbsize={'logbsize', 0x3d, [0x38, 0x67]}}, {@quota}, {@noalign}, {@swalloc}]}, 0x1, 0x965c, &(0x7f0000000a40)="$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") r5 = open(&(0x7f000000a0c0)='./bus\x00', 0x68042, 0x0) r6 = open(&(0x7f000000a100)='./bus\x00', 0x185102, 0x18) write$dsp(r5, &(0x7f000000a140)='n', 0x1) ftruncate(r6, 0x2007ffb) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x1000000, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x10002, 0x0, 0x40}}}}}, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) write(r4, &(0x7f0000000640)='nfs', 0x3) 2m36.517045254s ago: executing program 4 (id=226): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r0, 0x852ac000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x13, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000fa00000000000000000f0000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000001000180000000000000040000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000b00)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) 2m36.393149408s ago: executing program 4 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 2m36.351107289s ago: executing program 4 (id=219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3b}]}, @NFT_MSG_NEWSETELEM={0x184, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x230}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(&(0x7f0000019600)=@filename='none\x00', &(0x7f0000019640)='./sys\x00', &(0x7f0000019680)='sysfs\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000196c0)='./sys/devices/system/memory/block_size_bytes\x00', 0x0, 0x0) read(r1, &(0x7f0000019700)=""/100, 0x64) (async) r2 = syz_clone(0x400, 0x0, 0xffffffb4, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) r3 = syz_pidfd_open(r2, 0x0) process_mrelease(r3, 0x700000000000000) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close_range(r4, r0, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0x6, 0xc, &(0x7f0000019440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f00000194c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000019500)={r7, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000019580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x0, 0x2010, r4, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000195c0)={r7, r4}, 0xc) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r5, 0x0) pread64(r4, &(0x7f0000000280)=""/102400, 0x19000, 0xfffff7ff8) (async) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000001c0)=0x1) 2m35.409677601s ago: executing program 4 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300024000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) 2m19.507824562s ago: executing program 34 (id=230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300024000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d455200000008000240000000013400030064"], 0x104}}, 0x0) 1m57.477436109s ago: executing program 7 (id=441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x15) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x2, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x0, 0x30, 0x0, 0x9}, &(0x7f0000000080)=0x18) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') (async) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x15) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x2, @rand_addr=0x64010100}]}, &(0x7f0000000240)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0x0, 0x30, 0x0, 0x9}, &(0x7f0000000080)=0x18) (async) 1m57.205077735s ago: executing program 7 (id=445): setresuid(0x0, 0xee01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1m57.149401787s ago: executing program 7 (id=446): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001d00)={&(0x7f0000001d40)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001d80)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)="00ffffffffffff0000000000000000007a73c994728df85a87f3570d9abaee00000104000d0000000000000000000000000000000000000000fd00000000000001000000000000000000000000000000000000000000fdffffff00000000000000000000000000000000000000000000000000020000020308007078016cc36c4d64d0a13a000010000000000000d0caae8628cc4bee104dcf584ff23b000000000000000000000000000000000000000000000400000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c4e8597f4533e63f49fc8", 0x6200) 1m56.968865581s ago: executing program 7 (id=448): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40400) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x2581) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000080)) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0xa14000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r3 = open(&(0x7f0000000600)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x10, &(0x7f0000000900), 0x0, 0x0, 0x401a, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./config\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r4, &(0x7f0000000ac0)='2', 0x1) r5 = open(&(0x7f00000006c0)='.\x00', 0x301f00, 0x393) renameat2(r5, &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r5, &(0x7f0000000780)='./file0\x00', 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xa}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x398, 0x0, 0xfffffffd, 0x400}) 1m55.32340074s ago: executing program 7 (id=453): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffff", 0x58) 1m54.852942972s ago: executing program 7 (id=455): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000208}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1401, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000008500000007000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f088a84b4586dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m54.659812996s ago: executing program 35 (id=455): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000208}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1401, 0x100, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000008500000007000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000440)="b9ff03316844268cb89914f088a84b4586dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m50.912800206s ago: executing program 0 (id=472): mkdir(&(0x7f0000000040)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs/trace_options\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='raw', 0x3) syz_mount_image$hpfs(&(0x7f0000009e80), &(0x7f0000000000)='./file0\x00', 0x41, &(0x7f0000000140)={[{@uid}, {@chkdsk_always}, {@case_asis}, {@gid}, {@check_none}, {@umask={'umask', 0x3d, 0x10004}}]}, 0x0, 0x9e1a, &(0x7f0000013e00)="$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") 1m50.370756429s ago: executing program 0 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01060100000000000003020000000900010073797a300000000048000000120a01060200000000000000020000000900010073797a30000000000900020073797a30000000000800030000000008140004"], 0x90}}, 0x0) 1m50.208916143s ago: executing program 0 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) socket$tipc(0x1e, 0x2, 0x0) r5 = io_uring_setup(0x220c, &(0x7f0000000380)={0x0, 0xa893, 0x40, 0x1, 0x6f}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000440), 0x56) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0xd, 0x5, &(0x7f00000006c0)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000700)='GPL\x00'}, 0x80) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x40000, 0x7f, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x0, 0x10, &(0x7f0000001280), 0xfffffffffffffd00}, 0x48) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x36}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000005c0)}], 0x2}, 0x20048085) 1m48.140808952s ago: executing program 0 (id=488): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x40400) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x205, 0x2581) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000080)) symlinkat(&(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0xa14000, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000540)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c0) r3 = open(&(0x7f0000000600)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x0, 0x10, &(0x7f0000000900), 0x0, 0x0, 0x401a, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./config\x00', &(0x7f0000000a00)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r4, &(0x7f0000000ac0)='2', 0x1) r5 = open(&(0x7f00000006c0)='.\x00', 0x301f00, 0x393) renameat2(r5, &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r5, &(0x7f0000000780)='./file0\x00', 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000100)={0x1, 0xa}, 0x8, 0x2, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/bridge_slave_0/brport/multicast_router\x00', 0x2, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0x200000, 0x200000, 0x398, 0x0, 0xfffffffd, 0x400}) 1m46.248134207s ago: executing program 0 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1m45.167922743s ago: executing program 0 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$eJzs3M1vG0UbAPBn7aR9+5m8VfloWiBQEBEfSZOW0gMXEEgcQEKCQzmGJK1C3QY1RqJVBAGhckSVuCOOSPwFnOCCgBMSV7ijShXKpYWT0drexHbsNHGdLNS/n7TtzO44M493x57ZySaAvjWa/pNE7I+I3yJiqJZtLjBa++/2ytLMXytLM0lUKm/+mVTL3VpZmsmKZq/bl2UGIgqfJnG0Tb2LV65emC6V5i7X8xPli+9NLF65+uz8xenzc+fnLk2dOXPq5OTzp6ee60mcaVy3Rj5cOHbk1bevvz5z9vo7P32TZPG3xNEjoxsdfKJS6XF1+TrQkE4GcmwIW1KsddMYrPb/oSjG2skbilc+aShaPphLC4HtUqlUKvd3PrxcAe5hSeTdAiAf2Rd9Ov/Ntogo7NDwI3c3X6xNgNK4b9e32pGB1TdhsGV+20ujEXF2+e8v0y225z4EAECT79LxzzPrxn/VIWDjfaGD9TWU4Yj4f0QciojTEXE4Iu6LqJZ9ICIe3GL9rYsk68c/hRtdBbZJ6fjvhfraVvP4b3UIPFys5w5U4x9Mzs2X5k7U35OxGNyd5ic3qOP7l3/9vNOxxvFfuqX1Z2PBejtuDOxufs3sdHn6bmJudPPjiJGBdvEnqysBSUQciYiRLuuYf+rrY52O3Tn+DfRgnanyVcSTtfO/HC3xZ5KN1ycn/heluRMT2VWx3s+/XHujU/13FX8PpOd/b9vrfzX+4aRxvXZx63Vc+/2zjnOabq//XclbTfs+mC6XL09G7EpeqzW6cf9US7mptfJp/GPH2/f/Q7H2ThyNiPQifigiHo6IR+ptfzQiHouI4xvE/+NLj7/bffzbK41/dkvnfy2xK1r3tE8UL/zwbVOlw1uJPz3/p6qpsfqezXz+baZd3V3NAAAA8N9TiIj9kRTGV9OFwvh47Xf4D8feQmlhsfz0uYX3L83WnhEYjsFCdqdrqOF+6GR9Wp/lp1ryJ+v3jb8o7qnmx2cWSrN5Bw99bl+H/p/6o5h364Bt53kt6F/6P/Qv/R/6l/4P/atN/9+TRzuAndfu+/+jHNoB7LyW/m/ZD/qI+T/0r276f9/8hSC4x/n+h760uCfu/JC8hMS6RBT+Fc2QSBPZcLyHPznvTyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDe+CcAAP//Fmvj5w==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r3 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f00000002c0), 0x2, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/91, 0x5b}], 0x2}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m44.943615919s ago: executing program 36 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) r3 = socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) splice(r4, 0x0, r3, &(0x7f00000002c0), 0x2, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/91, 0x5b}], 0x2}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1m9.593357665s ago: executing program 9 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1m8.610738318s ago: executing program 9 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="00ffffffffffff0000000000000000007a73c994728df85a87f3570d9abaee00000104000d00000000000000fd000000000000000000000000fd0000000000000100000000000000000000fdff0000000000000000000000000000000000000000000000000000000000000000000000000000020000020308007078016cc36c4d64d0a13a000010000000000000d0caae8628cc4bee104dcf584ff23b000000000000000000000000000000000000000000000400000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c4e8597f4533e63f49fc8", 0x6200) 1m8.51271949s ago: executing program 9 (id=703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd4}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) 1m4.528629696s ago: executing program 9 (id=717): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21081e, &(0x7f0000000200)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f0000000240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d40)='./file1\x00', 0x101242, 0x21) writev(r1, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='\v', 0x1}], 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r1) (async) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x0) (async, rerun: 64) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000800)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000e40)='./debug\x00', &(0x7f0000000e80)='debugfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./debug/netdevsim/netdevsim0/take_snapshot\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='1\x00', 0x1) (async) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), 0xffffffffffffffff) (async, rerun: 32) r6 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)={0x3c, r5, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x0, r6}}]}, 0x3c}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x38, &(0x7f0000000880)=@generic={0x4, 0x2, 0x30, "824e3ac5", "dc9c848a47c5907833a03f2de3a57d768a0d949fa10aad346e7b1d7ff69d4a44233d7091b92cf8debe4605df5c006913"}) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000a80)={0x14, &(0x7f00000008c0)={0x20, 0x2, 0xe0, {0xe0, 0xb, "68a5b93cf84ab0b9afeb9b2de75e3730911b6b97ddcb84ce4c2db9013e51ca6aaa91f1e5d8276ff986ae90a654eaa3d32007e5029c84592d5815e67596d26f4a19b9cffb9ce86d99d8120f9f8f0a72001f3a121447797cb46ab5ced4c0b4e1fa0aceb2bc12b3999eea8da014d563eef32a827ab5bcc5d4bd694c7252196a9d2741dd1f11134f7a805e2ce7c34800e848a7525ed253fe415b72a3141fa4ac8b1e28d0d9df2c7c162c1f8dab68eb58ebab74ce3ebebb2698450590976ccb2e959768af485a5cf446622350c625188a599a690faf71cb81890a9f5fede9b5ac"}}, &(0x7f00000009c0)={0x0, 0x3, 0x92, @string={0x92, 0x3, "b29af2e758a750fbdda26ad36eaea517347801900ec9d4aa4c181c11997bdbedf1a22d89d6ea4b33ec3dcec6fa1af08236a7c90a31723090052de6000279a7e4f0e96d3b1c839f56a04429ebc00f5d378bbaceb3439289c70a7389897faaaf90b26f84d972c7f3050a0ec8e9e2e7cb02bb3b6e8d604d24c27dd5f21bd780dd2971a2333be41786ca3f668e30a3d9041c"}}}, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x31, 0x13, "0ee6afc2d89d3f37e980c8cceecef824b33b67"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000b80)={0x20, 0x81, 0x3, "de2997"}, &(0x7f0000000bc0)={0x20, 0x82, 0x2, 'hG'}, &(0x7f0000000c00)={0x20, 0x83, 0x2, "0bae"}, &(0x7f0000000c40)={0x20, 0x84, 0x2, "bce9"}, &(0x7f0000000c80)={0x20, 0x85, 0x3, "3ac907"}}) (async) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) (async) ioctl$VFIO_CHECK_EXTENSION(r7, 0x3b65, 0xa) 1m1.400946131s ago: executing program 9 (id=742): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1m1.062822579s ago: executing program 9 (id=743): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f800000016002102000000000000000000000000000000000000ffff0a010101ac1e000100000000000000000000000000000000000000020000808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000403e000004d633"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m0.827788015s ago: executing program 37 (id=743): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f800000016002102000000000000000000000000000000000000ffff0a010101ac1e000100000000000000000000000000000000000000020000808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000403e000004d633"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 7.569881579s ago: executing program 6 (id=1072): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x23, 0x0, 0xfffffffa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0xe0ff, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x1000, 0xfffffff9, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x401, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0x40000, 0x0, 0x20000, 0x2, 0x60, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x5, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x4ff, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0xa847, 0x2, 0x0, 0x4b7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x7, 0x0, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xb3c, 0x0, 0xfffffff6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x3, 0x0, 0xfffffffe, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x82, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x404, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffefd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 7.425168532s ago: executing program 6 (id=1073): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) syz_emit_ethernet(0x8e, &(0x7f0000000dc0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x58, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @mlv2_report={0x8f, 0x0, 0x0, 0x3, 0x1, [{0x49, 0x7, 0x2, @remote, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty], [0x9, 0x0, 0x6, 0x0, 0x8001, 0x7, 0x7]}]}}}}}}, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) unshare(0x22020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x301, 0x0) ioctl$FIBMAP(r1, 0x2275, &(0x7f0000000080)=0x3) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x47b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x6, 0x0, 0x2}) syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x22e9058, 0x0, 0x1, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x81900) r4 = open_tree(r3, &(0x7f0000000c80)='./file1\x00', 0x9801) move_mount(r4, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x24000, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x1214040, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x80782, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000001c0)=0x1) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000d40)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x6) r7 = epoll_create(0xd4c) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000d80)={0x6}) ioctl$TCXONC(r6, 0x540a, 0x3) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x2204806, &(0x7f0000000480)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303036322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f63686172736574f6ff736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f646972656374696f2c00"], 0xfa, 0x69f, &(0x7f0000000580)="$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") open_tree(r3, &(0x7f0000000c40)='\x00', 0x89901) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) ptrace(0x4208, r0) 7.196974068s ago: executing program 6 (id=1074): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001d00)={&(0x7f0000001d40)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001d80)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)="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", 0x6200) 7.088741781s ago: executing program 6 (id=1076): syz_usb_connect$uac1(0x1, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0) syz_usb_connect$uac1(0x1, 0xa2, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0) (async) 6.479843725s ago: executing program 3 (id=1080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f0000000500)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/91, 0x5b}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.354733382s ago: executing program 3 (id=1084): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f000001c300)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704014001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f000001ce40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001ce80), 0xfffffedf, 0x10, &(0x7f000001cec0), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 5.158783167s ago: executing program 3 (id=1086): syz_mount_image$ext4(&(0x7f0000000f80)='ext2\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f0000000040)={[{@auto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}]}, 0xff, 0x525, &(0x7f0000000440)="$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") r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000003c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000400), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000003c0)={0x0, 0x2, 0x9, 0x4, r1}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(0xffffffffffffffff, 0x800a6f2f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./sys\x00', &(0x7f0000000a00)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000a80)='\x00', 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x1, 0x40000121, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) 4.888980693s ago: executing program 8 (id=1089): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) 4.773905816s ago: executing program 2 (id=1090): r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0xc, 0xd21100) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x1) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) timer_create(0x0, &(0x7f0000001180)={0x0, 0x3a, 0x2, @thr={&(0x7f0000000100)="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", &(0x7f0000001100)="71e2393c75f052bfd809adcac7c7dd4debe61a358d2f2e52c9d03f46e622393ac766a67cc8ca691470b1f89bbd7b926543198f128165d5a71ca24e0b641cb19ac76523fd90b5b23078637ce71951c52f1c9b28dbb4"}}, &(0x7f00000011c0)=0x0) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000001240)={{r4, r5+10000000}, {0x0, 0x989680}}, &(0x7f0000001280)) getdents(0xffffffffffffff9c, &(0x7f00000012c0)=""/212, 0xd4) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000013c0), 0x40400, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000001400)=@usbdevfs_disconnect={0x6}) r7 = accept4$netrom(r0, 0x0, &(0x7f0000001440), 0x180000) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000001480)='veth0_to_team\x00', 0x10) r8 = openat(r6, &(0x7f00000014c0)='./file0\x00', 0x80, 0x1c6) r9 = openat$cgroup_devices(r6, &(0x7f0000001500)='devices.deny\x00', 0x2, 0x0) msgget(0x3, 0x10) renameat(r8, &(0x7f0000001540)='./file0\x00', r6, &(0x7f0000001580)='./file0\x00') socket$inet_mptcp(0x2, 0x1, 0x106) r10 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000015c0), 0x82100, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000001600)={0x1, 0x1000, "de65e3bb5037c2b80a8423735c1cc6e4fc10dd0b282c8bcb026a40e3cd2d28d2b35bf66326e29bf77f0e2ee20784c9bb6718acc52016db50d2e2167146efeab73bbcb2e4433268e5ed6a18f9022915ebce765d0b6390e66c0f1c2c600142110a85662a77f71eba5025c73feb5795befaee0bfd64ffe9a064658519c972cce5dc63925b826a81118ed72d8ac1d12fd4404769b1ebfb4ee65b2b0f3c4e8bad9aecc25b42d8222749b92cea7e039b982e78eec146365d4b74498787a831aaeff913778c5766fcc2b9cc55f46031143bc464aa2990fcbfad403467258dbda876a36026385564937d36bdf09e9a27697f132d0f016dd45558680c7e2ecadc8d9d70de46f4001ed08303ca9417d0bd75a9a27020c47f18497f651582dbc36a5a7e5601ab62b759d4f396a03bb363dba148bf8e16cceb09e48bb74313225c3a4624356483cd3ca955d6c80bc9355ffd8a97b419d3d6e48d98b2629da6f278410487bc8d256741c2631b9c41cb3f0f3ad78dceb3adf03a6fd2996d15c44bbb39c1dc03a4c27895bd5602e77752837900052a878a1020aec4d1bad543f7699a43452a18d6c5ecb7712c51f8745c3ef7a8ec8904b274165ca493ccf761bb127e8caaecc659fd0ebeb83bfa12856c2657c42ebb51b6e09df6ed156b60cf0003b01895f72cbd3c77929e4e2619c3f068d85ed0c00ad16cbf8a8f0e598490fefb80e27e1751dfdecd6905ade0f53a7efae63357ddf21395188d95d0eddeb40edb1eb276ceba611bced586212798192d7dd4f332d9f9827d896fedca11ccb2be36e8030524ca0e75b29e2ef5051a72898f9869a1cff9482a6528cf5b6093d72ebce341c3aecc937eb69234c55b6b6d21ca66d45ecb6cb89e02736aeeefe69eac0b22dc68ff60810fa45360526e90ed24f22ec3bd8b976bbd6e3db6d33153b95a68f4c0eff0e2c346c304f1f639a0c3ad10639c6c5b16e74d22f81a0113be0791899ef8eafe938a189f8e54c34e1c1d28fbfdd52269e6b564fb73bda2dc5f770b86f0c9911497b5493b1f616e26f938fd8ac4814869387327ee628eec358144d22cb7630c6aadcd2caf98adb65712b17a7dfe1b7aac8f3fa12504c65021297dc2262c902351f16a9fec7f8a578ab933a96f0c32ee3b33648aabca9534615c003fba3b7d6ad53a20bbd2ed036a01cebc51585d52831852d90fe387f4865e1298a1546c250611ad403c2b83f8525e2b27eefe7a58ea651fec57fecfdcb32b71ed48e534c153b4cc181a555c475d848f22510fe7c424278d764efaad38ec0ab1a30f812d74e7f3ef1b39f918938c9b3d1cefb9667f57a40ab59a2b519da459d646b52651682428e83b4f8ee45c369d548946a0c47686b8b1407b520f61ed3064e068e334bfb1260da92df9b8c9c08953b2fb8586f5f4189fa8d5f700f11c446af1a297ce09ac6040fd60de5f8fe0e4aadd83c9d5a3ed101d22e389542c79aeb8cec4f909a80841058d4e60dd3fc163a696a419eb5b4c7507d20896d994f5b85ab9375987a22a1af970db1d4919bb4d244c6817190b3d74a7a7e04662fb5cef91cdb7d13adb69d4f830a779e834d47c9890938788c303f9254358cac054e630123a030cb1f027a4c63aba2d85f0044c459e6b1cd8679b4c374aa18a43265829374e583a13ece9ef350329ec28a33e067c3b33a7eace44e13b1a8061c873f41f726bd9d3fa292d2337896c2c5f16f80fc7f8111bfab03491e0863dc2f9d34c1d3c0095697c2c76e63ac0e4ceb361cf7d1e89d396a7f24a4992cb176bb08bfb1342ae1bf04575e6d6dbe66bdae9f72abc07180205343a65c2488d1f58f961a29eeb3b6722c2c0a1809b35c172de177b96cce1c9c1ce2c11eff66a88c11e7f1b21dab21d94e37c6fe42b500e27f848bbeff05744fcdbd00b628d205e3eab354e3c92f779207b2576ea41d45679f419536fa10c4ab5edb588f8149956ac403956fef95bb6bf18ac15f464c52fd75517de9f64bca9103fa02b5a0951e585c2b952604c8459a699433cd56df21c8e8dae2727e688a6b68c96053bc945e6b1e1af01509f1d8fa0ccf1dff2217845035a1bd11f47616a532be58f4d108f873b09134269fd0fdd45dd4d6500a9fbdc990a5658dc408d107c2ea153035d88bb92079f6c81212e0a010b8ee53a64cbc42fff3c27392f326781709d1af08c7511bc778d510102bd3e546e59634dfd971c04b52ffef72832dc2b98497953c11688d0d4cb48df7734c5fd8180521f982463418bde086fd4d637a38ad8940e8c00480e19148c25e192ef120587314c5fedfebece8c1af91a16c14fc46836930c255daba56dc80c3d6605545ef6f78e8562f933eb029cfd959d74a11a64211cc66c5b096c4acf39599b1531b269ba24cbe46f2f9f7d0777adb59b72b1d7b7e47d4d397f89ea9eb9f49d5ae192f66bfd6c71becfe6b52b9ae032a51763cfeb05357a430558404be4594b6e1c4353895687cbbc0c2c0d608708682cb6ac789a9c4b4a8620c06380902a98c82368179089078775e43545a6e8bc55d6f4cf506f2154e42c8da2f35c9aa5090562ab9dc15179f8a270d36f9d18fa14d93804a2ea44d43b5a15d8014d3af8be9c59570e2fb313a6e53c32a44966684bcb6cf0cbc9e4eab09013cd87f14b1defc67d1970ae70f4f8db310643d0943ee498244d6b4979d97f46f81f712b06348139840f66e9d2c9ce983bc2200494ed0727d48070e5edf80e2417b3072377afb232581d8a494d6dd4945351283ac0909e97f002becb474529231b65eeb99a6f26d5169827c2f9b8d3c62d98dd5a40c53f5348971aee7f96c21dff083db425f596f2bec479c44fca6451981d37e0b0a0035badbc6fae92a76d507fc67e6ead0b610ec6f9e94d078f68d914cee78a6619d04f55ba6e535acfee395693379546064cf5a3e6af42919a99e886a87413a3fc0f5c31473bead1e10134ac8315d99a28d759b68669a39440b1d5646b31dd8dc8083acafaab128d3bce39eddc9e256a94724cd7fbd6062eafafe08f50f5c0217e8571361a33613ae605b552bf5845d3517c38077db1b84711f583fb281e69533911acd1cd88b9aae9529f6d070a007bc8b205a955d38f7d125c50b0f5bc76f74de755bc30b298d54eb6e3ad67dd4e1c5380b19d78330a2b3543e7f2a77fe7d4b13075997ecfbbcf1f157f6b9b60e998a6cb94b13e8ea974e290f60801a53a49c369380d23e6968abc256dbee3ed703a4cb6350d1777947977169deffccef61b62a7d4c09db1cdcb54c8e763ff6da17f0373b2e24b256bbfcb8dbd1f0cbed17578ab645973d1b4770bdd9f41c7f4596dee6a2ca085d191729c9d0e60b9e39de103558e062e2006eedfc6d195c8ebc10826912ca3e28b351a15b1b26f328387e2c06a671b276af85a13dc3c8383ad90652a84e81cd4dc84db33897688c25c703fe72bb43da968f58d836b0b5cfd75596111d56a04e0fd3ccc51ce8fd211507168c6941ff5741fb77a2ea2701d37e70893e714646e2cdf228dce29e7e9f138728c00eca4ff08c2ace4aa7b3c0763d2851c55eab585ff68a1849db751418c9ff5d69fcea01421237ca18207a7aa0f241ce9fbf5c256976c33035f5079bee71ead01d9e4a737cce3bfd9a39b3202ddb669654238be6de860aa859f1bf680405aad66be57bc49fd3aa50282e88dc65cc0e4c60c6b6a28d237217edb5d76bc78a8a5f9714a18e910336338e0ed1cd5df2890a943121b87f07c289557b8dba07d5252dad975e6e61135e504084e0746a6c7c98d2eb50d4ecb69fc92f4fc63e5f797508c7587b52f57bfad66dc6835f99e9bf7991741e13ba74cfc353e58d0778ddb0222694ca065b0f38b789b8abc6b7037bb05db136c1acb7a4d67290e32c113f8088619584b7ea18e1a0993837ba742370bc40838f322b0c109beda2e776425cc26be2d02bc830eb9128ad73d25584c8c1bbe89a477f5e8b1a18efed3b79d66861c6ad051b1f208304281b942fee19c353a00818a821f6ad60ef41d8b8dd981c58a1a96b8d23d3ca32fca9b1e8692e129f253325208fbd7a6ae879279f18e6b9709a73044788d0e68c2dda4491b5aa9e9e2f1b0a6583061a4addb4f7ddd19a3d543f35017d2b939be477c5e3e1cdb0d1fd1554e8b58320c7cf4b192c66e1405773d4239920f801f7fe10770943d2bda51043ff7a2273a00e8324a04ebc9efdd3b7dfbefa5480f5cad3bdbfc10ee99634ee328b396ef82f0e50da0294ef9eeeff8197b70432f9485c3d560446691b66ea35d330a0174205a26694d92090b3d04b376f3efbd769c8aa64e8c2ae58b74da7e2e389498079c804a866459660f36a9bdf5e252a89aec149f2bd0316ef1ef846e1a037e35bfded22bbd10aaa12cef190fc23aec268a8be217bab9705992f1ac07e1e0044b3dd2a5de28cd82ed5f1331d6009222d2672a1f5348318e3a2301b38880059cf29a0ff9426c212e1d08037857eabbd557de2413207d5076817fbacf0c3b862b0e84bb19e444e69855bf5c35ba8590ac0ad4556cb17f779a1f8ccbd4e93d4aada3bae1b841fdbc64e751b5d37f4b758a0f8c376e6421123821c0a8176de4c00d0a2d388c84439294d8b06cebb529bc9e997c01b7d6ea16ee31959fb6b88547317e91fafe8156ca5ca74b894dbe30d2bbc031ccdf088d46b6c702a9d9fc4c8e34d0f91de987dc8de5fb5c184fdca0988434fdb7900bc222ee15d2806d64c3d1f5bfc36667620755de642f04e78df5335bcab4616cec34509326496e2725d3cb73e0483a4cecd694e8e7beb7bed2c50ee2c0ce4b8bb869000aa745ac9f4d94893799c84fdcc1e2460446d78a87cff251564ee5a3403bc326632cfea439b2586c46577749fb22149adb035b007f5a26d13efe4bc15f49aedf041ee7a086280eb8e3b505acfb1b3811f08badf862dd906e8e2630c94a7a1fa1058041fa9fb670fb1ce23feddc1b3f718f153a647e5b6134d8e0c466f6d301a1d1b0b3be8bbd0b7747f6cc887eac877cdc5c459a17f3fabfd940ffb179df88c65e9ad226db52fe2775e2fb32b5125391317fb7e0e457f73b337ce055cb2562d89dd394bf673205542e74b7ee9d9daceb71e804c17886e033142453482a3cc24bbc701a9da844c10035d0ea0f88d53ac75a9f644d219d18c289e97cd3e09b79007a735c9836ec0a5aa7ea5d4f95111cc3661addef69952fe732d285dcef089113b4f5355cf9a1d37187152cb7cefd4b6ec8901c18b4fbec4592d0e25961b5db85f36df40708613a2b1d7cd0f1a0881630cd6432187786ba318b4ae025ff444cc64b148d6080e3e22d6029352a0bb79b4dbf0d83b95289714653fb06530d596bb5f30ed00a70b9e18d435d9bde4a3aba99f6900de879114db7811b4c3839fd24219b68281a83543da8629422b7f2779becadaf50a5a526c88937011a6a97d6248bb2f228ce4ec917054660b56dd90eb7f7b14e407f7590efa4eeaa756fc487b39a1d0687ba79fece11b1a51e51c980071ff308fa685cd8177cc1669dca17151cf08f5c483d496e2b4d938207665abc295efbd78bab74d7848f8fa4a2ed5b58340ad9399a4b532c6625a6f538ec3ef75d6f77e4fa1ceaeed52f3b3b7799a3034edf9411ff433d87c76025da0b2f45374ac46cb225b3dace701debebc75ca9098821d81210d1660c10f2ca539abce6e28a510c229e14307234397c46cd7565cfddff79bdb2bc6caaf5b89eca44027522f347b94e0f5064978b208b8f1efb27f81abfb8dd31931088c9316d87c84854720e15ad49"}, &(0x7f0000002640)=0x1008) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000002680)='./file0\x00', 0x200000, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r11, 0xc0406618, &(0x7f00000026c0)={@id={0x2, 0x0, @c}}) r12 = openat$cgroup_ro(r10, &(0x7f0000002700)='freezer.parent_freezing\x00', 0x0, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000002740)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "d7d38bbd95c6328f96f3de7a2bb20446923f8a0744a5f2ddfa13d2335f7a4afa3d622901431ae09281a261abef0aff254aff6fdecaa87ef95f20e1554a5049", 0x12}, 0x60) r13 = syz_open_dev$mouse(&(0x7f0000002980), 0x7, 0x800) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x8, 0x16, &(0x7f00000027c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x710, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x7ff}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xd8d}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @ldst={0x3, 0x1, 0x4, 0x5, 0x4, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002880)='syzkaller\x00', 0x0, 0xb5, &(0x7f00000028c0)=""/181, 0x41000, 0x40, '\x00', r2, @cgroup_skb=0x1, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f00000029c0)={0x2, 0x10, 0x8, 0x3}, 0x10, 0x0, r10, 0x5, &(0x7f0000002a00)=[r8, r8, r12, r12], &(0x7f0000002a40)=[{0x3, 0x3, 0xb, 0x7}, {0x1, 0x2, 0xa, 0xa}, {0x5, 0x5, 0x8, 0x4}, {0x1, 0x4, 0x2, 0xc}, {0x1, 0x2, 0xb, 0xc}], 0x10, 0x9}, 0x94) fstatfs(r14, &(0x7f0000002b80)=""/70) preadv(r9, &(0x7f0000002fc0)=[{&(0x7f0000002c00)=""/171, 0xab}, {&(0x7f0000002cc0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/4, 0x4}, {&(0x7f0000002d80)=""/145, 0x91}, {&(0x7f0000002e40)=""/162, 0xa2}, {&(0x7f0000002f00)=""/154, 0x9a}], 0x6, 0x0, 0x9) r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003080), r8) sendmsg$TIPC_NL_LINK_GET(r13, &(0x7f0000003300)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000032c0)={&(0x7f00000030c0)={0x1d4, r15, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x25bb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xde00000000000000}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcae8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0xe0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd2, 0x3, "18686fe17d419792fb5ea2f982603a3d2608d033a3da3d4fc370d502bf3fc80b17a353bf182a704747641051a369248bc5f56c2b6676c9bf3b2273b95255f1af43a57f114823f0f10c787be765e69211565528a90bfeb0634a5fec4980b8e426ab59a42dcda72fa6dac6c75511cf95b6ce292add7cf20baf34e413d4d9ab8de74ba450fd518cd2da5fd646a46c8eba633845736a943d073594988047a265e01c41d26e37b79706d7d9364acb98bb8f753f075529f5a013d82fbf325a55b7c195692772d00ede5f652b542064b6a8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20008000}, 0x200408c0) write$binfmt_script(r6, &(0x7f0000003340)={'#! ', './file0', [{}], 0xa, "52aebcdc41c59412bf007195178e63b3cacea97a35786a4e7753dd692c980a97c6a4ddc8fb05c34356eb05711083bf445e8ddb5b39b5d81ade78b8e82db80c1c60a87b5c29449b97ee5b8c681b7116769d05e9f1b428626925a9f7bcf7f3b7aafd5628ddce79c4f9ec046b88054bece0c2f7cd54fa691f7df1cb5c2c2714e7d2a6aa4ac518c69faed25868b4af92040549ac0ffcd72cbd353964485d33c4cd16343f93dc243c6459802944d3fcb746"}, 0xbb) 4.749203306s ago: executing program 2 (id=1091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x8, 0x2d, &(0x7f0000000400)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10007}, 0x94) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_ep_write(0xffffffffffffffff, 0x84, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x60) 4.064768843s ago: executing program 5 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f0000000500)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/91, 0x5b}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.997714254s ago: executing program 6 (id=1095): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r2, &(0x7f0000000640)="e5e257c5eb01f91e9dbb1c2a2b35c93b8eed9b5fb70da9ebac263607bd2ee917b4f847274f8d7f58d14355f69af33ddae7e26e332e3d414701aaa2787510ddaece84064682105c4b19a7c0099ecbf17e697f7d72821593a5c1303870778cbd4e6e0e9607f1c13117f3558665a5d7fb3137d9", 0xfffffffffffffe90, 0x2, &(0x7f00000006c0)={0x2, 0x0, @broadcast, 0x10000000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r3, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x30004010}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@struct={0xb, 0x4, 0x0, 0x4, 0x0, 0xffffff00, [{0x7, 0x2, 0x18}, {0x10, 0x4, 0x1}, {0x9, 0x2, 0x1}, {0x4, 0x3, 0xff2}]}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x5f, 0x2e, 0x51, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f0000000780)=""/253, 0x76, 0xfd, 0x1, 0x7fffffff, 0x10000, @value=r0}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x20000008, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f00000005c0)='GPL\x00', 0x800000, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r7}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109842, 0x184) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2.733384285s ago: executing program 5 (id=1096): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 2.484773891s ago: executing program 5 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f0000000500)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2}], 0x1, 0x40800) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)=""/81, 0x51}, {&(0x7f0000000680)=""/91, 0x5b}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.323363804s ago: executing program 6 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0xb37, 0x6]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRES32=r2, @ANYRESHEX=r4, @ANYBLOB="2c7569643d8f2184371cd4ee7546c3b0975222260710a856d920fb5ce0f3e09a6ede4e9ed2c59a903e53375a9470dc5c0795b0f59289540fd06d4dc106310653786682544bcdc46204a08e32877268bdca2afebd3df39ac79070cf94f9a52b86c44a30b7e388b40fa4cc20dc", @ANYRESOCT, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)={0x200000, 0x0, 0x3}, 0x24) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') r5 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x100) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) syz_usb_connect(0x2, 0x9a, &(0x7f0000002b40)={{0x12, 0x1, 0x110, 0x63, 0xb5, 0x2e, 0x20, 0xace, 0x1602, 0x8cd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x4, 0xa, 0x30, 0x6, "", [{{0x9, 0x4, 0xc, 0x9, 0x3, 0x6, 0xe0, 0xab, 0x6, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x1, 0x0, 0x80}, {0x6, 0x24, 0x1a, 0x3ff}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "dee0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7000000, 0x2, 0x927e, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x2f}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xb}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7, 0x10, 0xf}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0x2, 0x8, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x70, 0x4}}]}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000380)={&(0x7f00000003c0)="f6c7c5", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000580)={0x1, 0x1, &(0x7f00000005c0)=[r7], 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000008c0)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[{}, {}, {}, {}, {}], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x5, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000009c0)={&(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xdededede}) r10 = syz_open_dev$dri(&(0x7f0000000a00), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000a40)={0x13, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f0000000a80)={0x0, &(0x7f0000000ac0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000b00)={&(0x7f0000000b40)=[0x0], &(0x7f0000000b80), 0x1, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(r10, 0xc03864bc, &(0x7f0000000bc0)={0x0, 0x1, &(0x7f0000000c00)=[r12], 0x0, 0x0, 0x0, 0x0, 0x3}) r13 = syz_open_dev$dri(&(0x7f0000000c40), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r13, 0x4010640d, &(0x7f0000000c80)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r13, 0xc01064b5, &(0x7f0000000cc0)={&(0x7f0000000d00)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r13, 0xc02064b9, &(0x7f0000000d40)={&(0x7f0000000d80)=[0x0, 0x0, 0x0], &(0x7f0000000dc0), 0x3, r14}) ioctl$DRM_IOCTL_MODE_ATOMIC(r13, 0xc03864bc, &(0x7f0000000e00)={0x300, 0x1, &(0x7f0000000e40)=[r14], &(0x7f0000000e80)=[0x9, 0x80000001], &(0x7f0000000ec0)=[r15], &(0x7f0000000f00)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000fc0)={&(0x7f0000000f40)=[0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000012c0)={&(0x7f0000001000)=[0x0, 0x0, 0x0], &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001240)=[0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0], 0x7, 0x3, 0x3}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001500)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[{}, {}, {}], &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0], 0x3, 0x5, 0x8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000002b00)={0x0, 0x2, &(0x7f0000000600)=[0x0, r7], &(0x7f0000000640)=[0x7, 0x80000000, 0x2, 0x4, 0x7, 0x5, 0x12], &(0x7f0000002a80)=[r8, r9, r12, 0x0, r15, r16, r17, r18], &(0x7f0000002ac0)=[0x5], 0x0, 0xac91}) 2.254164566s ago: executing program 8 (id=1099): getpeername$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) r0 = fsopen(&(0x7f0000000180)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='::7.0%0\xdb\x10\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2241, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000340)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'bridge_slave_0\x00'}) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x8d40, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000580)=0xfffffffa) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) syz_open_pts(r3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000600)={"8ec3d30c395da4daed11bb34977774e1", 0x0, 0x0, {0x9, 0x400}, {0x7, 0x3}, 0x5, [0xacb, 0x5a51, 0x8000000000000000, 0x2, 0xb, 0x1, 0x1, 0xb0, 0x7, 0x2, 0x7ff, 0x6, 0x0, 0x8, 0xfffffffffffffff8, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000700)={{r3}, r4, 0x2, @unused=[0x7fffffff, 0x9, 0x6, 0x9], @subvolid=0x9}) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2ddbc41b37a46238) mkdir(&(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/local\x00', 0x101000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f0000001700)=[{{&(0x7f0000001780)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000001800)="14", 0x1}], 0x1}}, {{&(0x7f0000001840)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000001880)=[{&(0x7f00000018c0)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000001900), &(0x7f0000001940)=0x8) syz_open_dev$ttys(0xc, 0x2, 0x1) 2.189042738s ago: executing program 3 (id=1100): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1.870634985s ago: executing program 8 (id=1101): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0xfd, 0x515, &(0x7f0000000c40)="$eJzs3d9rm2sdAPDvmzZru/Wc9qgXxwMei+dId9Al7eq24sWcIHo1UOf9LG1aStOmNGm3liEd/gGCiApeeeWN4B8gyP4EEQZ6LyqKuM1deKORJG+2Nkvarkua0Xw+8O59nvdHv98na9+8T56HvAEMrKmIuBURQxHxSURMpNsz6RL7jaV23LOnDxZrSxLV6p1/JZGk25o/K0nXl9LTRiPiu9+KiCfVamvc8u7e2kKxWNhK6/nK+ma+vLt3ZXV9YaWwUtiYm5u9Pn9j/tr8zKnbthNJM6WYjIib3/jbT3/0q2/e/N2X7/357j8u/6C2czzdf7Ad3dRIIFt/LZqGI2KrF8H6YChtT7bfiQAAcCK1+9NPRcQX6vf/EzFUv5s7ytgZZQYAAAB0S/Vr45GN6kgVAAAAOLcy9TmwSSaXzvcdj0wml2vM4f1MXMwUS+XKl5ZL2xtLjbmyk5HNLK8WCzPpXOHJyCa1+mw6x7ZZv9pSn4uI9yLiJxNj9XpusVRc6veHHwAAADAgLrX0/59PNPr/AAAAwDkz2e8EAAAAgJ7T/wcAAIDzT/8fAAAAzrVv375dW6rN518v7exur5V2riwVymu59e3F3GJpazO3Uiqt1L+zb/24n1cslTa/Ehvb9/OVQrmSL+/u3V0vbW9U7q4eegQ2AAAAcIbe+/yjPyURsf/VsfoSScSFdF+2z7kBvZV5nYP/2rs8gLM31O8EgL4Z7ncCQN/o4wPJMfs7Tt75ffdzAQAAemP6sy3j/2H8HwbFa43/A+eK8X8YXG3G/00JgAGRdQcAA6/34//V6mslBAAAdN14fUkyuXQscDwymVwu4p36YwGyyfJqsTATEe9GxB8nsiO1+mz9zOTYPgMAAAAAAAAAAAAAAAAAAAAAAAAA0FCtJlE9heenOQkAAADoi4jM35P0+V/TEx+Pt34+cCH5z0R9HRH3fnHnZ/cXKpWt2dr2Jy+2V36ebr968Mz9Vz9s8LBxAAAAOBPNfnqzHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fTs6YPF5hLZs4v7z69HxGRL/LrhGK2vR+vpXPx3EsMHzksiYqgL8fcfRsT77eIntbRiMs2iNX4mIsb6HP9SF+LDIHtUu/7cavf3l4mp+rr9399wurypg9e/2uXgYPzm9W+ow/XvnRPG+ODxb/Id4z+M+GC4/fWnGT/pEP+jjhFHDtW+/729vU5HVn8ZMd36/vMiwstSvrK+mS/v7l1ZXV9YKawUNubmZq/P35i/Nj+TX14tFtJ/28b48ed++7+j2n+xQ/zJY9r/ccf2H/bfx/effrpRfOWdtRb/8keH40+l+97vED+Tvvd9MS3X9k83y/uN8kEf/voPH75Iuk38pQ7tP+7//3KzMnp0+z/5zg//csxLBACcofLu3tpCsVjYOmVhJ0568FT7Xc07opMH3Y83zFnhLSsMxeEtzfvULsfKnvB3fvQteVlOUHj3wJYLafO6FKIPFyMAAKCnXt70n+DgQwPuI71LCgAAAAAAAAAAAAAAAAAAAAbMWXxRWWvM/f40FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSP8PAAD//22Dxkw=") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000240)=""/229, &(0x7f0000000340)=""/56, &(0x7f0000000380)=""/114, 0x19000}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x16, &(0x7f0000000140)={[{@resuid}, {@noauto_da_alloc}, {@auto_da_alloc_val}, {@stripe={'stripe', 0x3d, 0x4}}, {@bsdgroups}, {@noblock_validity}, {@minixdf}, {@nouid32}, {@dioread_lock}, {@nolazytime}, {@oldalloc}, {@usrquota}]}, 0xfd, 0x515, &(0x7f0000000c40)="$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") (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x0, 0x1, &(0x7f0000000240)=""/229, &(0x7f0000000340)=""/56, &(0x7f0000000380)=""/114, 0x19000}) (async) 1.500086494s ago: executing program 2 (id=1102): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688"], 0x0, 0x2}, 0x94) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc098bc83b765b80a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1.465788265s ago: executing program 5 (id=1103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000f100850000009e000000b708000000000000db00000600000000b7080000009000007b8af0ff43000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.360965667s ago: executing program 3 (id=1104): r0 = memfd_create(&(0x7f0000000040)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x21011, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="180000009100000000000000010a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000040001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x1000, &(0x7f00000006c0)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c) 1.347586128s ago: executing program 2 (id=1105): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000ffffffffffffff90b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.283781169s ago: executing program 3 (id=1106): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x21c91c, &(0x7f0000000300)={[{@noauto_da_alloc}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@noload}, {@noinit_itable}, {@abort}, {@orlov}, {@init_itable}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8596}, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x7fffffff, 0x0, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000080)='.\x00', 0x1ad843d, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRES16, @ANYRES64, @ANYRES32, @ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRES8], 0xd, 0x0, &(0x7f0000000000)) 1.200609001s ago: executing program 5 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)="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", 0x6200) 1.178080092s ago: executing program 2 (id=1108): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./sys\x00', 0xa) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='udf\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x74) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x74) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000440), 0x8041, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) futex(0x0, 0xc, 0x1000001, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xb, 0x0, &(0x7f0000000480)={0x77359400}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0xffffffffffffff33) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x5, 0x0) (async) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, 0x1c) fchown(r4, 0xee01, 0x0) (async) fchown(r4, 0xee01, 0x0) socket$inet6(0xa, 0x802, 0x0) (async) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f00000001c0)="ff02180000ffffff0000000000000000000800000000441cd7b7ad42cb2b62f1ff3ee6d6cb837290f926ec2c7671a4b43745e611c7671873", 0x38) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @private1, 0xec4}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x1}, @in={0x2, 0x4e20, @loopback}], 0x48) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x8, @private1, 0xec4}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x1}, @in={0x2, 0x4e20, @loopback}], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000200)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000240)={0x2}, 0x1) sendto$inet6(r6, &(0x7f0000000280)="e2", 0x1, 0x30000840, &(0x7f00000002c0)={0xa, 0x4a24, 0xb053, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) 1.054612505s ago: executing program 5 (id=1109): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="ed56b6c5", 0x4) 694.197853ms ago: executing program 2 (id=1110): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r2, &(0x7f0000000640)="e5e257c5eb01f91e9dbb1c2a2b35c93b8eed9b5fb70da9ebac263607bd2ee917b4f847274f8d7f58d14355f69af33ddae7e26e332e3d414701aaa2787510ddaece84064682105c4b19a7c0099ecbf17e697f7d72821593a5c1303870778cbd4e6e0e9607f1c13117f3558665a5d7fb3137d9", 0xfffffffffffffe90, 0x2, &(0x7f00000006c0)={0x2, 0x0, @broadcast, 0x10000000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, r3, 0x101, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0x30004010}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@struct={0xb, 0x4, 0x0, 0x4, 0x0, 0xffffff00, [{0x7, 0x2, 0x18}, {0x10, 0x4, 0x1}, {0x9, 0x2, 0x1}, {0x4, 0x3, 0xff2}]}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x5f, 0x2e, 0x51, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f0000000780)=""/253, 0x76, 0xfd, 0x1, 0x7fffffff, 0x10000, @value=r0}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x20000008, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f00000005c0)='GPL\x00', 0x800000, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600)={r7}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109842, 0x184) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 694.080913ms ago: executing program 8 (id=1111): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000600000000000000000000000000000000a00000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002"], 0xfc}}, 0x0) 631.323575ms ago: executing program 8 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 0s ago: executing program 8 (id=1113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000380)='GPL\x00', 0x8, 0x2d, &(0x7f0000000400)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10007}, 0x94) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000004c0)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_ep_write(0xffffffffffffffff, 0x84, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x60) kernel console output (not intermixed with test programs): ng n=15 is correct [ 171.254717][ T7252] BTRFS info (device loop9): max_inline at 4096 [ 171.302225][ T7252] BTRFS info (device loop9): using free space tree [ 171.339577][ T7252] BTRFS info (device loop9): has skinny extents [ 171.607859][ T7252] BTRFS info (device loop9): enabling ssd optimizations [ 171.619867][ T7319] set_capacity_and_notify: 3 callbacks suppressed [ 171.619881][ T7319] loop5: detected capacity change from 0 to 64 [ 172.083480][ T7295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 172.117244][ T7319] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 172.133417][ T7319] MINIX-fs: bad superblock [ 172.163185][ T4228] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 172.172290][ T4228] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.173473][ T7295] EXT4-fs (loop3): 1 truncate cleaned up [ 172.186053][ T7295] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 172.284111][ T4228] usb 9-1: Product: syz [ 172.309068][ T4228] usb 9-1: Manufacturer: syz [ 172.338445][ T4228] usb 9-1: SerialNumber: syz [ 172.696851][ T7249] udc-core: couldn't find an available UDC or it's busy [ 172.773537][ T7249] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 173.068391][ T7319] loop5: detected capacity change from 0 to 8192 [ 173.081973][ T7337] loop6: detected capacity change from 0 to 512 [ 173.259884][ T4228] usb 9-1: MIDIStreaming interface descriptor not found [ 173.291857][ T7337] EXT4-fs (loop6): Test dummy encryption mode enabled [ 173.337503][ T7319] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 173.368786][ T7337] EXT4-fs (loop6): Test dummy encryption mode enabled [ 173.385590][ T4228] usb 9-1: USB disconnect, device number 2 [ 173.403481][ T7319] REISERFS (device loop5): using ordered data mode [ 173.410027][ T7319] reiserfs: using flush barriers [ 173.439163][ T7337] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:163: inode #12: comm syz.6.648: inline data xattr refers to an external xattr inode [ 173.460588][ T7319] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 173.483729][ T7337] EXT4-fs (loop6): Remounting filesystem read-only [ 173.543364][ T7337] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.648: couldn't read orphan inode 12 (err -117) [ 173.593504][ T7319] REISERFS (device loop5): checking transaction log (loop5) [ 173.633771][ T7337] EXT4-fs (loop6): Remounting filesystem read-only [ 173.693097][ T7319] REISERFS (device loop5): Using r5 hash to sort names [ 173.700190][ T7337] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,sysvgroups,lazytime,dioread_lock,jqfmt=vfsv1,errors=remount-ro,auto_da_alloc,test_dummy_encryption,dax=inode,journal_dev=0x000000000000394c,. Quota mode: none. [ 173.781889][ T7319] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 173.846409][ T7351] udevd[7351]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.922686][ T7319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.968690][ T7337] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 174.249087][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 174.283468][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 174.372399][ T7391] loop6: detected capacity change from 0 to 256 [ 174.414031][ T7391] exfat: Deprecated parameter 'utf8' [ 174.428966][ T7391] exfat: Unknown parameter 'dbsvard' [ 174.513734][ T7363] loop9: detected capacity change from 0 to 32768 [ 174.825778][ T7363] FAULT_INJECTION: forcing a failure. [ 174.825778][ T7363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.264230][ T7363] CPU: 0 PID: 7363 Comm: syz.9.653 Not tainted syzkaller #0 [ 175.271562][ T7363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 175.281630][ T7363] Call Trace: [ 175.284921][ T7363] [ 175.287875][ T7363] dump_stack_lvl+0x188/0x250 [ 175.292580][ T7363] ? show_regs_print_info+0x20/0x20 [ 175.297796][ T7363] ? load_image+0x410/0x410 [ 175.302404][ T7363] ? __lock_acquire+0x7d40/0x7d40 [ 175.307456][ T7363] should_fail+0x383/0x4b0 [ 175.311897][ T7363] _copy_from_user+0x2e/0x170 [ 175.316602][ T7363] kstrtouint_from_user+0xd3/0x220 [ 175.321734][ T7363] ? lock_acquire+0x209/0x400 [ 175.326435][ T7363] ? kstrtol_from_user+0x2a0/0x2a0 [ 175.331578][ T7363] proc_fail_nth_write+0x8b/0x200 [ 175.336624][ T7363] ? proc_fail_nth_read+0x220/0x220 [ 175.341927][ T7363] ? common_file_perm+0x171/0x1c0 [ 175.346995][ T7363] ? proc_fail_nth_read+0x220/0x220 [ 175.352216][ T7363] vfs_write+0x304/0xd70 [ 175.356485][ T7363] ? file_end_write+0x250/0x250 [ 175.361348][ T7363] ? preempt_schedule_irq+0xe6/0x160 [ 175.366665][ T7363] ? mutex_lock_nested+0x17/0x20 [ 175.371616][ T7363] ? __fdget_pos+0x2bf/0x370 [ 175.376219][ T7363] ? ksys_write+0x70/0x260 [ 175.380656][ T7363] ksys_write+0x153/0x260 [ 175.380845][ T7406] loop6: detected capacity change from 0 to 512 [ 175.384998][ T7363] ? __ia32_sys_read+0x80/0x80 [ 175.385059][ T7363] ? syscall_enter_from_user_mode+0x2a/0x70 [ 175.402116][ T7363] do_syscall_64+0x4c/0xa0 [ 175.406634][ T7363] ? clear_bhb_loop+0x30/0x80 [ 175.411321][ T7363] ? clear_bhb_loop+0x30/0x80 [ 175.416007][ T7363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.421913][ T7363] RIP: 0033:0x7fc21dedea0e [ 175.426336][ T7363] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.445947][ T7363] RSP: 002b:00007fc21c175fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.454356][ T7363] RAX: ffffffffffffffda RBX: 00007fc21c1766c0 RCX: 00007fc21dedea0e [ 175.462314][ T7363] RDX: 0000000000000001 RSI: 00007fc21c1760a0 RDI: 0000000000000003 [ 175.470358][ T7363] RBP: 00007fc21c176090 R08: 0000000000000000 R09: 0000000000000000 [ 175.478318][ T7363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.486278][ T7363] R13: 00007fc21e1a6038 R14: 00007fc21e1a5fa0 R15: 00007ffdb6ff50a8 [ 175.494255][ T7363] [ 175.565150][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 175.574175][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 175.582358][ T7] usb 6-1: can't read configurations, error -71 [ 175.602189][ T7406] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 175.723075][ T3829] Bluetooth: hci2: command 0x0406 tx timeout [ 175.823652][ T7406] EXT4-fs (loop6): 1 truncate cleaned up [ 175.829459][ T7406] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 176.388177][ T7433] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.661'. [ 176.457301][ T7418] loop8: detected capacity change from 0 to 131072 [ 176.465579][ T7433] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 176.512090][ T7418] F2FS-fs (loop8): Invalid log sectorsize (67108873) [ 176.519155][ T7418] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 176.538028][ T7418] F2FS-fs (loop8): invalid crc value [ 176.595414][ T7418] F2FS-fs (loop8): Found nat_bits in checkpoint [ 176.662377][ T7449] loop5: detected capacity change from 0 to 512 [ 176.672935][ T7418] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 176.680584][ T7418] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 176.712207][ T7449] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 176.773958][ T7449] EXT4-fs (loop5): 1 truncate cleaned up [ 176.779644][ T7449] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 177.073346][ T4232] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 177.123167][ T7] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 177.463427][ T4232] usb 9-1: Using ep0 maxpacket: 32 [ 177.583559][ T4232] usb 9-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.608426][ T7464] loop3: detected capacity change from 0 to 512 [ 177.623335][ T7] usb 10-1: unable to get BOS descriptor or descriptor too short [ 177.642126][ T4232] usb 9-1: config 1 interface 0 has no altsetting 0 [ 177.709472][ T7464] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: none. [ 177.734736][ T7] usb 10-1: config 63 has an invalid interface number: 66 but max is 0 [ 177.744984][ T7] usb 10-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config [ 177.755653][ T7] usb 10-1: config 63 has no interface number 0 [ 177.762304][ T7] usb 10-1: config 63 interface 66 has no altsetting 0 [ 177.769656][ T7464] EXT4-fs warning (device loop3): ext4_begin_enable_verity:136: inode #15: comm syz.3.671: verity is only allowed on extent-based files [ 177.797796][ T7470] EXT4-fs warning (device loop3): ext4_begin_enable_verity:136: inode #15: comm syz.3.671: verity is only allowed on extent-based files [ 177.863498][ T4232] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 177.882897][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.903352][ T4232] usb 9-1: Product: ⠁ [ 177.906624][ T7464] 9pnet: Insufficient options for proto=fd [ 177.907605][ T4232] usb 9-1: Manufacturer: э [ 177.919774][ T7473] loop5: detected capacity change from 0 to 256 [ 177.926416][ T7] usb 10-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 177.939669][ T7464] 8021q: VLANs not supported on ip_vti0 [ 177.943038][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.953664][ T4232] usb 9-1: SerialNumber: ᆇ⣉吝䃬뻩⭰蘒މ讼鄅᡺亂燼庍❮拔ꞙ엔 [ 177.973902][ T7] usb 10-1: Product: syz [ 177.978236][ T7] usb 10-1: Manufacturer: syz [ 177.991151][ T7] usb 10-1: SerialNumber: syz [ 178.003425][ T7418] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.040923][ T7473] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 178.226480][ T7418] udc-core: couldn't find an available UDC or it's busy [ 178.233642][ T7418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 178.272435][ T7492] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 178.300358][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.9.670'. [ 178.347759][ T1325] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 178.347759][ T4232] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 178.355774][ T4232] usb 9-1: USB disconnect, device number 3 [ 178.416569][ T4232] usblp0: removed [ 178.553613][ T7] usb 10-1: Found UVC 0.07 device syz (174f:8acf) [ 178.578673][ T7] usb 10-1: No valid video chain found. [ 178.615872][ T7] usb 10-1: USB disconnect, device number 3 [ 178.653428][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.675'. [ 178.803305][ T1325] usb 6-1: config 1 has an invalid interface number: 1 but max is 0 [ 178.815613][ T1325] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.836061][ T1325] usb 6-1: config 1 has no interface number 0 [ 178.986752][ T7504] loop3: detected capacity change from 0 to 32768 [ 178.993623][ T7] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 179.023334][ T1325] usb 6-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 179.057542][ T1325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 179.109652][ T1325] usb 6-1: Product: syz [ 179.133198][ T1325] usb 6-1: Manufacturer: syz [ 179.137841][ T1325] usb 6-1: SerialNumber: syz [ 179.879786][ T7525] loop3: detected capacity change from 0 to 131072 [ 179.897849][ T1325] usb 6-1: USB disconnect, device number 8 [ 179.912410][ T7525] F2FS-fs (loop3): invalid crc value [ 179.944227][ T7] usb 10-1: Using ep0 maxpacket: 32 [ 179.958004][ T7525] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.012207][ T7525] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 180.032042][ T7525] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 180.087475][ T7] usb 10-1: device descriptor read/all, error -71 [ 180.212735][ T7525] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 180.242277][ T7352] udevd[7352]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 180.461804][ T7542] loop5: detected capacity change from 0 to 512 [ 180.541076][ T7542] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.608498][ T7542] EXT4-fs (loop5): 1 truncate cleaned up [ 180.614510][ T7542] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 181.449623][ T7566] loop5: detected capacity change from 0 to 512 [ 181.466929][ T7566] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 181.500622][ T7545] loop9: detected capacity change from 0 to 32768 [ 181.511287][ T7566] EXT4-fs (loop5): 1 truncate cleaned up [ 181.518713][ T7566] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 181.897399][ T7569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.043122][ T7545] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 182.363956][ T7545] JBD2: Ignoring recovery information on journal [ 182.485592][ T7573] device bond_slave_0 entered promiscuous mode [ 182.491831][ T7573] device bond_slave_1 entered promiscuous mode [ 182.559375][ T7573] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.574689][ T7586] loop5: detected capacity change from 0 to 512 [ 182.594046][ T7545] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 182.618087][ T7573] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 182.631054][ T7586] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 182.667768][ T7586] EXT4-fs (loop5): 1 truncate cleaned up [ 182.673545][ T7586] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 182.679659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 183.424578][ T7545] syz.9.684 (7545) used greatest stack depth: 17728 bytes left [ 183.462891][ T7603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.544651][ T6681] ocfs2: Unmounting device (7,9) on (node local) [ 183.642787][ T7614] loop5: detected capacity change from 0 to 512 [ 183.696707][ T7614] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 183.735594][ T7614] EXT4-fs (loop5): 1 truncate cleaned up [ 183.741322][ T7614] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 183.912263][ T4297] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 184.119450][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.697'. [ 184.562554][ T7673] netlink: 'syz.9.703': attribute type 13 has an invalid length. [ 184.573460][ T4297] usb 7-1: unable to get BOS descriptor or descriptor too short [ 184.613623][ T4297] usb 7-1: not running at top speed; connect to a high speed hub [ 184.618655][ T7666] loop8: detected capacity change from 0 to 4096 [ 184.706834][ T4297] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.739942][ T4297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 184.780740][ T4297] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25104, setting to 64 [ 184.823765][ T7687] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.839050][ T7689] loop3: detected capacity change from 0 to 512 [ 184.878321][ T7689] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.295715][ T25] audit: type=1800 audit(1791774345.904:10): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.701" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 185.330098][ T7689] EXT4-fs (loop3): 1 truncate cleaned up [ 185.337083][ T7689] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 185.361950][ T4297] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 185.371205][ T4297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 185.379339][ T4297] usb 7-1: Product: syz [ 185.383648][ T4297] usb 7-1: Manufacturer: syz [ 185.523391][ T7610] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.548697][ T4297] usb 7-1: Found UVC 1.00 device syz (8086:0ad2) [ 185.557066][ T4297] usb 7-1: No streaming interface found for terminal 2. [ 185.867105][ T4297] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input7 [ 186.043530][ T4297] usb 7-1: USB disconnect, device number 9 [ 186.087475][ T7710] loop8: detected capacity change from 0 to 128 [ 186.104882][ T7710] hpfs: bad mount options. [ 186.139830][ T7712] loop5: detected capacity change from 0 to 512 [ 186.580792][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.589677][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.602283][ T7710] loop8: detected capacity change from 0 to 40427 [ 186.697659][ T7710] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1ffff [ 186.763533][ T7710] F2FS-fs (loop8): invalid crc value [ 186.785443][ T7731] loop6: detected capacity change from 0 to 512 [ 186.796440][ T7710] F2FS-fs (loop8): Found nat_bits in checkpoint [ 186.817821][ T7731] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 186.851921][ T7731] EXT4-fs (loop6): 1 truncate cleaned up [ 186.857739][ T7731] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 187.186428][ T7710] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 187.326136][ T7710] F2FS-fs (loop8): switch extent_cache option is not allowed [ 187.600543][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.646606][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.844208][ T7739] FAULT_INJECTION: forcing a failure. [ 187.844208][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 187.889097][ T7739] CPU: 1 PID: 7739 Comm: syz.6.715 Not tainted syzkaller #0 [ 187.896410][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.906460][ T7739] Call Trace: [ 187.909815][ T7739] [ 187.912738][ T7739] dump_stack_lvl+0x188/0x250 [ 187.917964][ T7739] ? show_regs_print_info+0x20/0x20 [ 187.923161][ T7739] ? load_image+0x410/0x410 [ 187.927665][ T7739] ? __might_sleep+0xf0/0xf0 [ 187.932328][ T7739] ? __lock_acquire+0x7d40/0x7d40 [ 187.937368][ T7739] should_fail+0x383/0x4b0 [ 187.941814][ T7739] should_failslab+0x5/0x20 [ 187.946308][ T7739] slab_pre_alloc_hook+0x51/0xc0 [ 187.951255][ T7739] kmem_cache_alloc_node+0x47/0x2c0 [ 187.956447][ T7739] ? __alloc_skb+0xf4/0x750 [ 187.961018][ T7739] __alloc_skb+0xf4/0x750 [ 187.965354][ T7739] alloc_skb_with_frags+0xa7/0x720 [ 187.970496][ T7739] ? print_unlock_imbalance_bug+0x160/0x160 [ 187.976389][ T7739] sock_alloc_send_pskb+0x87f/0x9a0 [ 187.981590][ T7739] ? lock_chain_count+0x20/0x20 [ 187.986439][ T7739] ? sock_kzfree_s+0x50/0x50 [ 187.991017][ T7739] ? __local_bh_enable_ip+0x136/0x1c0 [ 187.996377][ T7739] ? _local_bh_enable+0xa0/0xa0 [ 188.001231][ T7739] llc_ui_sendmsg+0x457/0xe20 [ 188.005913][ T7739] ? llc_ui_getsockopt+0x480/0x480 [ 188.011025][ T7739] ? apparmor_socket_sendmsg+0x88/0x230 [ 188.016649][ T7739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 188.021929][ T7739] ? security_socket_sendmsg+0x7c/0xa0 [ 188.027419][ T7739] __sys_sendto+0x46d/0x620 [ 188.031932][ T7739] ? __ia32_sys_getpeername+0x80/0x80 [ 188.037308][ T7739] ? lock_chain_count+0x20/0x20 [ 188.042152][ T7739] __x64_sys_sendto+0xda/0xf0 [ 188.046820][ T7739] do_syscall_64+0x4c/0xa0 [ 188.051241][ T7739] ? clear_bhb_loop+0x30/0x80 [ 188.055907][ T7739] ? clear_bhb_loop+0x30/0x80 [ 188.060613][ T7739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 188.066502][ T7739] RIP: 0033:0x7fd568ea01d9 [ 188.070912][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.090516][ T7739] RSP: 002b:00007fd5670f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 188.099191][ T7739] RAX: ffffffffffffffda RBX: 00007fd569127fa0 RCX: 00007fd568ea01d9 [ 188.107151][ T7739] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 188.115112][ T7739] RBP: 00007fd5670f8090 R08: 0000200000002500 R09: 0000000000000080 [ 188.123094][ T7739] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 188.131073][ T7739] R13: 00007fd569128038 R14: 00007fd569127fa0 R15: 00007ffc72a0cce8 [ 188.139038][ T7739] [ 188.308047][ T7674] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.317092][ T7674] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.326665][ T7674] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.335670][ T7674] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.490964][ T7743] loop9: detected capacity change from 0 to 512 [ 188.679564][ T7743] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 188.730104][ T7743] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.750381][ T6453] attempt to access beyond end of device [ 188.750381][ T6453] loop8: rw=2049, want=45104, limit=40427 [ 188.851724][ T7753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.094236][ T7773] loop6: detected capacity change from 0 to 512 [ 189.127663][ T7773] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 189.158749][ T7773] EXT4-fs (loop6): 1 truncate cleaned up [ 189.164752][ T7773] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 189.237755][ T7750] loop3: detected capacity change from 0 to 32768 [ 189.330440][ T4231] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 189.521072][ T7750] XFS (loop3): Mounting V5 Filesystem [ 189.672549][ T7799] loop5: detected capacity change from 0 to 256 [ 189.684459][ T7800] loop6: detected capacity change from 0 to 512 [ 189.689645][ T7750] XFS (loop3): Ending clean mount [ 189.727900][ T7800] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 189.788128][ T7800] EXT4-fs (loop6): 1 truncate cleaned up [ 189.793947][ T7800] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 189.923463][ T4231] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 189.960873][ T4231] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.002494][ T4231] usb 10-1: Product: syz [ 190.067083][ T4231] usb 10-1: Manufacturer: syz [ 190.149973][ T4231] usb 10-1: SerialNumber: syz [ 190.264906][ T4188] XFS (loop3): Unmounting Filesystem [ 190.423322][ T4598] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 190.892034][ T7829] loop8: detected capacity change from 0 to 512 [ 190.953509][ T4598] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.979606][ T4598] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.004754][ T7829] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 191.030237][ T7829] EXT4-fs (loop8): 1 truncate cleaned up [ 191.036025][ T7829] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 191.117856][ T7839] loop3: detected capacity change from 0 to 128 [ 191.127218][ T7839] hpfs: bad mount options. [ 191.201144][ T4598] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 191.211093][ T4598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.458976][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.540606][ T4297] usb 10-1: USB disconnect, device number 6 [ 191.553421][ T26] usb 10-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 191.585304][ T4297] usb 10-1: ath9k_htc: USB layer deinitialized [ 191.616216][ T6681] EXT4-fs error (device loop9): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 191.683502][ T6681] EXT4-fs error (device loop9): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 191.930551][ T7839] loop3: detected capacity change from 0 to 40427 [ 191.981574][ T7839] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 192.037984][ T7839] F2FS-fs (loop3): invalid crc value [ 192.234945][ T7839] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.242783][ T7867] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 192.245301][ T7856] loop6: detected capacity change from 0 to 32768 [ 192.863203][ T7839] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.900836][ T7839] F2FS-fs (loop3): switch extent_cache option is not allowed [ 192.961295][ T7856] XFS (loop6): Mounting V5 Filesystem [ 193.157532][ T4188] attempt to access beyond end of device [ 193.157532][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 193.186459][ T7856] XFS (loop6): Ending clean mount [ 193.225984][ T7889] loop8: detected capacity change from 0 to 512 [ 193.287405][ T7889] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 193.353241][ T4598] rtsx_usb: probe of 6-1:1.0 failed with error -110 [ 193.364771][ T7889] EXT4-fs (loop8): 1 truncate cleaned up [ 193.370508][ T7889] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 193.509078][ T5104] XFS (loop6): Unmounting Filesystem [ 193.746214][ T7882] chnl_net:caif_netlink_parms(): no params data found [ 193.958284][ T4297] usb 6-1: USB disconnect, device number 9 [ 194.079381][ T7882] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.086584][ T7882] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.095926][ T7882] device bridge_slave_0 entered promiscuous mode [ 194.139252][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.145617][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.125130][ T7882] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.199469][ T7882] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.241760][ T7882] device bridge_slave_1 entered promiscuous mode [ 194.267395][ T7925] loop6: detected capacity change from 0 to 1024 [ 194.288748][ T7926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.303183][ T7917] netlink: 14 bytes leftover after parsing attributes in process `syz.3.747'. [ 194.320918][ T7924] autofs4:pid:7924:autofs_fill_super: called with bogus options [ 194.410077][ T7882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.441670][ T7882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.540577][ T7882] team0: Port device team_slave_0 added [ 194.576941][ T7882] team0: Port device team_slave_1 added [ 194.613196][ T4232] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 194.625054][ T7942] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.653727][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.660697][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.715551][ T7882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.758496][ T7945] loop6: detected capacity change from 0 to 128 [ 194.765853][ T7882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.774376][ T7882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.800944][ T7882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.814650][ T7945] hpfs: bad mount options. [ 194.853976][ T4232] usb 9-1: Using ep0 maxpacket: 32 [ 194.891759][ T7882] device hsr_slave_0 entered promiscuous mode [ 194.910948][ T7882] device hsr_slave_1 entered promiscuous mode [ 194.973422][ T4232] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.989461][ T4232] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 189, changing to 11 [ 195.052193][ T4232] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1269, setting to 1024 [ 195.073969][ T4232] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.111764][ T7956] loop3: detected capacity change from 0 to 512 [ 195.133073][ T4232] usb 9-1: config 0 interface 0 has no altsetting 0 [ 195.153125][ T4232] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 195.168619][ T7956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.182638][ T4232] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.207295][ T4297] Bluetooth: hci1: command 0x0409 tx timeout [ 195.232776][ T7956] EXT4-fs (loop3): 1 truncate cleaned up [ 195.233200][ T4232] usb 9-1: config 0 descriptor?? [ 195.239092][ T7956] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 195.283201][ T7929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 195.297983][ T782] device hsr_slave_0 left promiscuous mode [ 195.378699][ T782] device hsr_slave_1 left promiscuous mode [ 195.385669][ T782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.423672][ T782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.482201][ T782] device bridge_slave_1 left promiscuous mode [ 195.502596][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.519146][ T7968] loop3: detected capacity change from 0 to 512 [ 195.529842][ T782] device bridge_slave_0 left promiscuous mode [ 195.553337][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.612604][ T7945] loop6: detected capacity change from 0 to 40427 [ 195.621411][ T7968] EXT4-fs (loop3): 1 truncate cleaned up [ 195.653832][ T7968] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,,errors=continue. Quota mode: none. [ 195.712397][ T7953] loop5: detected capacity change from 0 to 32768 [ 195.744548][ T7945] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x1ffff [ 195.768939][ T7945] F2FS-fs (loop6): invalid crc value [ 195.786358][ T4232] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x2 [ 195.824794][ T4232] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 195.837876][ T7945] F2FS-fs (loop6): Found nat_bits in checkpoint [ 195.852091][ T782] team0 (unregistering): Port device team_slave_1 removed [ 195.869039][ T4232] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0 [ 195.880244][ T4232] input: HID 1e7d:2c2e as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:1E7D:2C2E.0002/input/input8 [ 195.916708][ T7953] XFS (loop5): Mounting V5 Filesystem [ 195.923569][ T782] team0 (unregistering): Port device team_slave_0 removed [ 195.954194][ T7945] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 195.964370][ T782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.987424][ T7924] udc-core: couldn't find an available UDC or it's busy [ 196.013344][ T782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.041279][ T7924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.128130][ T4232] lua 0003:1E7D:2C2E.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 1e7d:2c2e] on usb-dummy_hcd.8-1/input0 [ 196.129233][ T782] bond0 (unregistering): Released all slaves [ 196.152707][ T4232] usb 9-1: USB disconnect, device number 4 [ 196.171801][ T7945] F2FS-fs (loop6): switch extent_cache option is not allowed [ 196.181242][ T7953] XFS (loop5): Ending clean mount [ 196.271865][ T7987] fido_id[7987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 196.318833][ T4956] XFS (loop5): Unmounting Filesystem [ 196.463472][ T5104] attempt to access beyond end of device [ 196.463472][ T5104] loop6: rw=2049, want=45104, limit=40427 [ 196.793238][ T8001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.934351][ T8011] FAULT_INJECTION: forcing a failure. [ 196.934351][ T8011] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.001833][ T8011] CPU: 1 PID: 8011 Comm: syz.5.765 Not tainted syzkaller #0 [ 197.009171][ T8011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.019247][ T8011] Call Trace: [ 197.022537][ T8011] [ 197.025475][ T8011] dump_stack_lvl+0x188/0x250 [ 197.030168][ T8011] ? show_regs_print_info+0x20/0x20 [ 197.035386][ T8011] ? load_image+0x410/0x410 [ 197.039905][ T8011] ? __lock_acquire+0x7d40/0x7d40 [ 197.044954][ T8011] should_fail+0x383/0x4b0 [ 197.049390][ T8011] prepare_alloc_pages+0x1e3/0x5b0 [ 197.054527][ T8011] __alloc_pages+0x11b/0x480 [ 197.059138][ T8011] ? zone_statistics+0x170/0x170 [ 197.064083][ T8011] ? aa_file_perm+0x38b/0xe80 [ 197.068791][ T8011] kmalloc_order+0x40/0x150 [ 197.073307][ T8011] ? debugfs_file_get+0x368/0x460 [ 197.073890][ T8018] loop8: detected capacity change from 0 to 512 [ 197.078343][ T8011] kmalloc_order_trace+0x14/0xf0 [ 197.089544][ T8011] memdup_user+0x22/0xb0 [ 197.093802][ T8011] edid_write+0x6e/0x280 [ 197.098059][ T8011] full_proxy_write+0x109/0x1c0 [ 197.102927][ T8011] ? full_proxy_read+0x1c0/0x1c0 [ 197.107877][ T8011] vfs_write+0x304/0xd70 [ 197.112164][ T8011] ? file_end_write+0x250/0x250 [ 197.117136][ T8011] ? mutex_lock_nested+0x17/0x20 [ 197.122098][ T8011] ? __fdget_pos+0x2bf/0x370 [ 197.126691][ T8011] ? ksys_write+0x70/0x260 [ 197.131122][ T8011] ksys_write+0x153/0x260 [ 197.135456][ T8011] ? __ia32_sys_read+0x80/0x80 [ 197.140228][ T8011] ? lockdep_hardirqs_on+0x94/0x140 [ 197.145420][ T8011] do_syscall_64+0x4c/0xa0 [ 197.149822][ T8011] ? clear_bhb_loop+0x30/0x80 [ 197.154486][ T8011] ? clear_bhb_loop+0x30/0x80 [ 197.159149][ T8011] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.165030][ T8011] RIP: 0033:0x7f2953ef31d9 [ 197.169434][ T8011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.189028][ T8011] RSP: 002b:00007f295214b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 197.197435][ T8011] RAX: ffffffffffffffda RBX: 00007f295417afa0 RCX: 00007f2953ef31d9 [ 197.205393][ T8011] RDX: 0000000000006200 RSI: 00002000000001c0 RDI: 0000000000000003 [ 197.213351][ T8011] RBP: 00007f295214b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.221307][ T8011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.229271][ T8011] R13: 00007f295417b038 R14: 00007f295417afa0 R15: 00007ffe11f623f8 [ 197.237239][ T8011] [ 197.268406][ T8018] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 197.333161][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 197.378563][ T8018] EXT4-fs (loop8): 1 truncate cleaned up [ 197.384454][ T8018] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 197.605421][ T8033] loop3: detected capacity change from 0 to 16 [ 197.618991][ T8038] netlink: 16 bytes leftover after parsing attributes in process `syz.5.777'. [ 197.646223][ T8035] FAULT_INJECTION: forcing a failure. [ 197.646223][ T8035] name failslab, interval 1, probability 0, space 0, times 0 [ 197.655374][ T8033] cramfs: Unknown parameter 'uid>18446744073709551615' [ 197.697563][ T8035] CPU: 0 PID: 8035 Comm: syz.6.776 Not tainted syzkaller #0 [ 197.704904][ T8035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.714971][ T8035] Call Trace: [ 197.718254][ T8035] [ 197.721180][ T8035] dump_stack_lvl+0x188/0x250 [ 197.725866][ T8035] ? show_regs_print_info+0x20/0x20 [ 197.731066][ T8035] ? load_image+0x410/0x410 [ 197.735570][ T8035] ? __might_sleep+0xf0/0xf0 [ 197.740167][ T8035] ? __lock_acquire+0x7d40/0x7d40 [ 197.745202][ T8035] should_fail+0x383/0x4b0 [ 197.749628][ T8035] should_failslab+0x5/0x20 [ 197.754133][ T8035] slab_pre_alloc_hook+0x51/0xc0 [ 197.759078][ T8035] __kmalloc_node_track_caller+0x68/0x3a0 [ 197.764799][ T8035] ? alloc_skb_with_frags+0xa7/0x720 [ 197.770095][ T8035] ? __alloc_skb+0xf4/0x750 [ 197.774597][ T8035] ? alloc_skb_with_frags+0xa7/0x720 [ 197.779882][ T8035] __alloc_skb+0x22c/0x750 [ 197.784302][ T8035] alloc_skb_with_frags+0xa7/0x720 [ 197.789418][ T8035] ? print_unlock_imbalance_bug+0x160/0x160 [ 197.795322][ T8035] sock_alloc_send_pskb+0x87f/0x9a0 [ 197.800527][ T8035] ? lock_chain_count+0x20/0x20 [ 197.805403][ T8035] ? sock_kzfree_s+0x50/0x50 [ 197.810011][ T8035] ? __local_bh_enable_ip+0x136/0x1c0 [ 197.815393][ T8035] ? _local_bh_enable+0xa0/0xa0 [ 197.820258][ T8035] llc_ui_sendmsg+0x457/0xe20 [ 197.824977][ T8035] ? llc_ui_getsockopt+0x480/0x480 [ 197.830105][ T8035] ? apparmor_socket_sendmsg+0x88/0x230 [ 197.835664][ T8035] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 197.840966][ T8035] ? security_socket_sendmsg+0x7c/0xa0 [ 197.846450][ T8035] __sys_sendto+0x46d/0x620 [ 197.850971][ T8035] ? __ia32_sys_getpeername+0x80/0x80 [ 197.856386][ T8035] ? lock_chain_count+0x20/0x20 [ 197.861257][ T8035] __x64_sys_sendto+0xda/0xf0 [ 197.865958][ T8035] do_syscall_64+0x4c/0xa0 [ 197.870389][ T8035] ? clear_bhb_loop+0x30/0x80 [ 197.875081][ T8035] ? clear_bhb_loop+0x30/0x80 [ 197.879779][ T8035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 197.885692][ T8035] RIP: 0033:0x7fd568ea01d9 [ 197.890122][ T8035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.909740][ T8035] RSP: 002b:00007fd5670f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 197.918168][ T8035] RAX: ffffffffffffffda RBX: 00007fd569127fa0 RCX: 00007fd568ea01d9 [ 197.926154][ T8035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 197.934130][ T8035] RBP: 00007fd5670f8090 R08: 0000200000002500 R09: 0000000000000080 [ 197.942101][ T8035] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 197.950066][ T8035] R13: 00007fd569128038 R14: 00007fd569127fa0 R15: 00007ffc72a0cce8 [ 197.959172][ T8035] [ 198.046823][ T8052] netlink: 28 bytes leftover after parsing attributes in process `syz.8.774'. [ 199.268032][ T4236] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 199.321653][ T4236] dvb_usb_az6007: probe of 1-1:0.0 failed with error -110 [ 199.399585][ T4236] usb 1-1: USB disconnect, device number 11 [ 199.413506][ T1325] Bluetooth: hci1: command 0x040f tx timeout [ 199.476827][ T7882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.501539][ T7882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.518744][ T7882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.535890][ T7882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.689617][ T7882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.722848][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.737194][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.754658][ T7882] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.771407][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 199.781584][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 199.796634][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.803814][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.826864][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.835793][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 199.845473][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.859083][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.866359][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.877503][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.894988][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.904556][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.916495][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.926986][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.936847][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.958992][ T7882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.981256][ T7882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.998024][ T8082] loop3: detected capacity change from 0 to 64 [ 200.013671][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.015307][ T8083] loop5: detected capacity change from 0 to 512 [ 200.022282][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.047663][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.057943][ T8083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 200.107413][ T8082] hfs: get root inode failed [ 200.154764][ T8083] EXT4-fs (loop5): 1 truncate cleaned up [ 200.160506][ T8083] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 200.182310][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.244246][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.264056][ T5839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.283251][ T5433] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 200.648403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 200.676499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.712289][ T7882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.719657][ T5433] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.741162][ T5433] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 200.786545][ T5433] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 200.803225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 200.820114][ T5433] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 200.821883][ T8121] loop3: detected capacity change from 0 to 512 [ 200.840440][ T5433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.861044][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 200.878558][ T8121] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.942186][ T8121] EXT4-fs (loop3): 1 truncate cleaned up [ 200.948021][ T8121] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 200.983571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 200.992749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.004310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.012410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.126851][ T7882] device veth0_vlan entered promiscuous mode [ 201.135031][ T8086] binder: 8079:8086 ioctl 54a3 0 returned -22 [ 201.143606][ T8086] binder: 8079:8086 ioctl c0046209 0 returned -22 [ 201.403361][ T5433] cxacru 9-1:1.0: receive of cm 0x90 failed (-71) [ 201.483429][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 201.655542][ T5433] usb 9-1: USB disconnect, device number 5 [ 201.674059][ T8132] cxacru 9-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 201.682947][ T8132] cxacru 9-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 201.726553][ T7882] device veth1_vlan entered promiscuous mode [ 201.808223][ T7882] device veth0_macvtap entered promiscuous mode [ 201.815595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 201.839532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 201.871527][ T7882] device veth1_macvtap entered promiscuous mode [ 201.893740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 201.929615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 201.964284][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.009810][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.053054][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.088785][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.121101][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.144334][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.159884][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.170740][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.176179][ T8118] loop6: detected capacity change from 0 to 32768 [ 202.201471][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.254720][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.314206][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.968127][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.022334][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.231917][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.266543][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.301645][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.331312][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.371045][ T7882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.430158][ T7882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.568441][ T8156] loop8: detected capacity change from 0 to 32768 [ 203.602490][ T7882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.923117][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.965713][ T5842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.976534][ T7882] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.035229][ T7882] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.047706][ T7882] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.056821][ T8156] XFS (loop8): Mounting V5 Filesystem [ 204.062923][ T7882] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.079250][ T8182] Cannot find add_set index 2 as target [ 204.189980][ T8156] XFS (loop8): Ending clean mount [ 204.272150][ T5835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.314996][ T6453] XFS (loop8): Unmounting Filesystem [ 204.322709][ T5835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.380746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 204.423146][ T4231] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 204.436935][ T5835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.467698][ T5835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.517094][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.713159][ T4231] usb 4-1: Using ep0 maxpacket: 16 [ 204.736058][ T8198] loop5: detected capacity change from 0 to 4096 [ 204.742164][ T8207] fuse: Invalid rootmode [ 204.873377][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 204.882210][ T8198] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 204.956012][ T4231] usb 4-1: config 4 has an invalid interface number: 181 but max is 0 [ 204.964898][ T4231] usb 4-1: config 4 has no interface number 0 [ 204.980347][ T4231] usb 4-1: config 4 interface 181 altsetting 255 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 205.013824][ T4231] usb 4-1: config 4 interface 181 has no altsetting 0 [ 205.313312][ T4231] usb 4-1: string descriptor 0 read error: -22 [ 205.320852][ T4231] usb 4-1: New USB device found, idVendor=0499, idProduct=1032, bcdDevice=9e.81 [ 205.340966][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.438136][ T4231] snd-usb-audio: probe of 4-1:4.181 failed with error -2 [ 205.543529][ T8206] loop2: detected capacity change from 0 to 32768 [ 205.553955][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.181/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.604592][ T4228] usb 4-1: USB disconnect, device number 7 [ 205.671677][ T8228] FAULT_INJECTION: forcing a failure. [ 205.671677][ T8228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.681911][ T782] Bluetooth: hci5: Frame reassembly failed (-84) [ 205.703184][ T8228] CPU: 0 PID: 8228 Comm: syz.6.816 Not tainted syzkaller #0 [ 205.710497][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 205.720563][ T8228] Call Trace: [ 205.723853][ T8228] [ 205.726787][ T8228] dump_stack_lvl+0x188/0x250 [ 205.731486][ T8228] ? show_regs_print_info+0x20/0x20 [ 205.736703][ T8228] ? load_image+0x410/0x410 [ 205.741232][ T8228] ? __lock_acquire+0x7d40/0x7d40 [ 205.746269][ T8228] should_fail+0x383/0x4b0 [ 205.750707][ T8228] _copy_from_user+0x2e/0x170 [ 205.755405][ T8228] memdup_user+0x5b/0xb0 [ 205.759663][ T8228] edid_write+0x6e/0x280 [ 205.763921][ T8228] full_proxy_write+0x109/0x1c0 [ 205.768822][ T8228] ? full_proxy_read+0x1c0/0x1c0 [ 205.773774][ T8228] vfs_write+0x304/0xd70 [ 205.778040][ T8228] ? file_end_write+0x250/0x250 [ 205.782912][ T8228] ? mutex_lock_nested+0x17/0x20 [ 205.787858][ T8228] ? __fdget_pos+0x2bf/0x370 [ 205.792462][ T8228] ? ksys_write+0x70/0x260 [ 205.796897][ T8228] ksys_write+0x153/0x260 [ 205.801245][ T8228] ? __ia32_sys_read+0x80/0x80 [ 205.806027][ T8228] ? lockdep_hardirqs_on+0x94/0x140 [ 205.811248][ T8228] do_syscall_64+0x4c/0xa0 [ 205.815678][ T8228] ? clear_bhb_loop+0x30/0x80 [ 205.820461][ T8228] ? clear_bhb_loop+0x30/0x80 [ 205.825163][ T8228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.831071][ T8228] RIP: 0033:0x7fd568ea01d9 [ 205.835502][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.855119][ T8228] RSP: 002b:00007fd5670f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.863558][ T8228] RAX: ffffffffffffffda RBX: 00007fd569127fa0 RCX: 00007fd568ea01d9 [ 205.871543][ T8228] RDX: 0000000000006200 RSI: 00002000000001c0 RDI: 0000000000000003 [ 205.879526][ T8228] RBP: 00007fd5670f8090 R08: 0000000000000000 R09: 0000000000000000 [ 205.887507][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.895489][ T8228] R13: 00007fd569128038 R14: 00007fd569127fa0 R15: 00007ffc72a0cce8 [ 205.903489][ T8228] [ 205.981599][ T8206] XFS (loop2): Mounting V5 Filesystem [ 206.181011][ T8206] XFS (loop2): Ending clean mount [ 206.260875][ T8202] FAULT_INJECTION: forcing a failure. [ 206.260875][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 206.294191][ T8202] CPU: 0 PID: 8202 Comm: syz.2.744 Not tainted syzkaller #0 [ 206.301518][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 206.311586][ T8202] Call Trace: [ 206.314875][ T8202] [ 206.317814][ T8202] dump_stack_lvl+0x188/0x250 [ 206.322515][ T8202] ? show_regs_print_info+0x20/0x20 [ 206.327735][ T8202] ? load_image+0x410/0x410 [ 206.332258][ T8202] ? __lock_acquire+0x7d40/0x7d40 [ 206.337303][ T8202] should_fail+0x383/0x4b0 [ 206.341735][ T8202] should_failslab+0x5/0x20 [ 206.346249][ T8202] slab_pre_alloc_hook+0x51/0xc0 [ 206.351202][ T8202] ? __alloc_file+0x25/0x240 [ 206.355810][ T8202] kmem_cache_alloc+0x3d/0x280 [ 206.360584][ T8202] __alloc_file+0x25/0x240 [ 206.365099][ T8202] alloc_empty_file+0x90/0x180 [ 206.369870][ T8202] alloc_file+0x5c/0x510 [ 206.374123][ T8202] ? do_raw_spin_unlock+0x11d/0x230 [ 206.379334][ T8202] alloc_file_pseudo+0x180/0x200 [ 206.384285][ T8202] ? alloc_empty_file_noaccount+0x80/0x80 [ 206.390055][ T8202] ? alloc_fd+0x59e/0x650 [ 206.394408][ T8202] sock_alloc_file+0xb3/0x240 [ 206.399105][ T8202] __sys_socket+0x11d/0x170 [ 206.403623][ T8202] __x64_sys_socket+0x76/0x80 [ 206.408315][ T8202] do_syscall_64+0x4c/0xa0 [ 206.412750][ T8202] ? clear_bhb_loop+0x30/0x80 [ 206.417445][ T8202] ? clear_bhb_loop+0x30/0x80 [ 206.422143][ T8202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 206.428058][ T8202] RIP: 0033:0x7f90332711d9 [ 206.432483][ T8202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.452100][ T8202] RSP: 002b:00007f90314c8fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.458569][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 206.460532][ T8202] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f90332711d9 [ 206.474496][ T8202] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 206.482479][ T8202] RBP: 00007f9033308888 R08: 0000000000000000 R09: 0000000000000000 [ 206.490468][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.498641][ T8202] R13: 00007f90334f9038 R14: 00007f90334f8fa0 R15: 00007ffe1c88bc58 [ 206.506645][ T8202] [ 206.585789][ T7882] XFS (loop2): Unmounting Filesystem [ 206.966994][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.820'. [ 207.609848][ T8280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'. [ 208.089773][ T4236] Bluetooth: hci5: command 0x1003 tx timeout [ 208.097566][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 208.125012][ T8295] loop2: detected capacity change from 0 to 512 [ 208.232099][ T8301] fuse: Invalid rootmode [ 208.614400][ T8295] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.639144][ T8295] EXT4-fs (loop2): Test dummy encryption mode enabled [ 208.653146][ T8295] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 208.952946][ T8322] loop6: detected capacity change from 0 to 8192 [ 209.039262][ T8322] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 209.053227][ T8322] REISERFS (device loop6): using ordered data mode [ 209.066683][ T8322] reiserfs: using flush barriers [ 209.112451][ T8322] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.135744][ T8322] REISERFS (device loop6): checking transaction log (loop6) [ 209.318476][ T8325] loop2: detected capacity change from 0 to 32768 [ 209.382493][ T8322] REISERFS (device loop6): Using tea hash to sort names [ 209.398880][ T8322] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 209.559260][ T8338] loop3: detected capacity change from 0 to 8192 [ 209.636220][ T8338] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 209.664632][ T8338] REISERFS (device loop3): using ordered data mode [ 209.673562][ T8338] reiserfs: using flush barriers [ 209.787055][ T8338] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 209.968786][ T8338] REISERFS (device loop3): checking transaction log (loop3) [ 210.002951][ T8358] loop6: detected capacity change from 0 to 512 [ 210.014647][ T8338] REISERFS (device loop3): Using r5 hash to sort names [ 210.023384][ T8338] REISERFS warning (device loop3): super-2030 reiserfs_fill_super: This file system claims to use 23297 bitmap blocks in its super block, but requires 131072. Clearing to zero. [ 210.074874][ T8358] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 210.114494][ T8358] EXT4-fs (loop6): 1 truncate cleaned up [ 210.120257][ T8358] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 210.129695][ T8338] REISERFS (device loop3): using 3.5.x disk format [ 210.149998][ T26] Bluetooth: hci5: command 0x1001 tx timeout [ 210.158659][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 210.193303][ T8338] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 210.341543][ T8338] device veth0 entered promiscuous mode [ 210.512451][ T8338] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 210.852306][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 533 (0) [ 210.947714][ T8338] REISERFS (device loop3): Remounting filesystem read-only [ 210.955305][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 534 (0) [ 210.965972][ T8337] device veth0 left promiscuous mode [ 210.966022][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 535 (0) [ 210.989434][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 536 (0) [ 211.043100][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 537 (0) [ 211.112854][ T8380] loop6: detected capacity change from 0 to 256 [ 211.120465][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 538 (0) [ 211.180118][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 539 (0) [ 211.243590][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 540 (0) [ 211.273115][ T8383] fuse: Invalid rootmode [ 211.277534][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 541 (0) [ 211.318365][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 542 (0) [ 211.371774][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 543 (0) [ 211.403842][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 544 (0) [ 211.434154][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 545 (0) [ 211.463134][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 546 (0) [ 211.493067][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 547 (0) [ 211.523075][ T8338] REISERFS error (device loop3): vs-4010 is_reusable: block number is out of range 548 (0) [ 211.636422][ T4236] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 211.851631][ T25] audit: type=1326 audit(1791774372.724:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 211.926815][ T25] audit: type=1326 audit(1791774372.774:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.012032][ T25] audit: type=1326 audit(1791774372.774:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.053262][ T4236] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.096873][ T4236] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.138147][ T25] audit: type=1326 audit(1791774372.774:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.144430][ T4236] usb 7-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 212.213303][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 212.250811][ T4236] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.250862][ T25] audit: type=1326 audit(1791774372.774:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.291224][ T8413] loop8: detected capacity change from 0 to 128 [ 212.389747][ T8413] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 212.391289][ T25] audit: type=1326 audit(1791774372.774:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.533041][ T25] audit: type=1326 audit(1791774372.774:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.611253][ T25] audit: type=1326 audit(1791774372.774:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.620546][ T8425] FAT-fs (loop8): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 212.653358][ T8425] FAT-fs (loop8): Filesystem has been set read-only [ 212.706540][ T25] audit: type=1326 audit(1791774372.774:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.788737][ T6453] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 212.801928][ T25] audit: type=1326 audit(1791774372.774:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8394 comm="syz.3.843" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87040341d9 code=0x7ffc0000 [ 212.869166][ T8410] loop3: detected capacity change from 0 to 32768 [ 212.976714][ T8434] loop8: detected capacity change from 0 to 512 [ 213.029008][ T8434] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 213.224064][ T8434] EXT4-fs (loop8): 1 truncate cleaned up [ 213.229812][ T8434] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 214.566228][ T8452] fuse: Bad value for 'fd' [ 214.590697][ T8452] netlink: 36 bytes leftover after parsing attributes in process `syz.8.855'. [ 214.692093][ T8460] loop3: detected capacity change from 0 to 8 [ 214.751522][ T8460] Filesystem uses "unknown" compression. This is not supported [ 215.063167][ T4236] rtsx_usb: probe of 7-1:1.0 failed with error -110 [ 215.086430][ T8475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 215.099985][ T8475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.861'. [ 215.234161][ T8479] loop3: detected capacity change from 0 to 128 [ 215.256406][ T4236] usb 7-1: USB disconnect, device number 10 [ 215.313558][ T8479] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 215.491266][ T8479] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 1) [ 215.525664][ T8479] FAT-fs (loop3): Filesystem has been set read-only [ 215.538941][ T8492] loop6: detected capacity change from 0 to 512 [ 215.589446][ T8492] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 215.616198][ T4188] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 215.706407][ T8492] EXT4-fs (loop6): 1 truncate cleaned up [ 215.712150][ T8492] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 216.463116][ T4486] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 216.748193][ T8529] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.826425][ T4486] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 216.836555][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.5.872'. [ 216.850762][ T4486] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 216.953131][ T4490] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 217.043527][ T4486] usb 4-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 217.060727][ T4486] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.087867][ T4486] usb 4-1: Product: syz [ 217.101063][ T4486] usb 4-1: Manufacturer: syz [ 217.118730][ T4486] usb 4-1: SerialNumber: syz [ 217.141786][ T8553] loop2: detected capacity change from 0 to 512 [ 217.171083][ T8557] fuse: Bad value for 'fd' [ 217.188635][ T8553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.194666][ T4486] whiteheat 4-1:1.0: Connect Tech - WhiteHEAT converter detected [ 217.232217][ T8562] bond1: option mode: unable to set because the bond device has slaves [ 217.260686][ T8553] EXT4-fs (loop2): 1 truncate cleaned up [ 217.266478][ T8553] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 217.323515][ T4490] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 217.337796][ T4490] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 217.367946][ T8562] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 217.406517][ T4490] usb 7-1: config 4 has no interface number 0 [ 217.413468][ T4486] usb 4-1: Connect Tech - WhiteHEAT: Couldn't send command [-71] [ 217.421598][ T4486] usb 4-1: Connect Tech - WhiteHEAT: Unable to retrieve firmware version, try replugging [ 217.441709][ T4490] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 217.456116][ T4486] usb 4-1: Connect Tech - WhiteHEAT: If the firmware is not running (status led not blinking) [ 217.473475][ T4486] usb 4-1: Connect Tech - WhiteHEAT: please contact support@connecttech.com [ 217.559770][ T4486] usb 4-1: USB disconnect, device number 8 [ 217.592829][ T8575] device geneve1 entered promiscuous mode [ 217.633271][ T4490] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 217.660691][ T4490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.675511][ T4490] usb 7-1: Product: syz [ 217.681943][ T4490] usb 7-1: Manufacturer: syz [ 217.695347][ T4490] usb 7-1: SerialNumber: syz [ 217.882794][ T8595] loop5: detected capacity change from 0 to 256 [ 218.123870][ T8586] loop8: detected capacity change from 0 to 32768 [ 218.223423][ T4490] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 218.307641][ T4490] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 218.384277][ T4490] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 218.438050][ T4490] usb 7-1: media controller created [ 218.459290][ T4490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.511909][ T8586] XFS (loop8): Mounting V5 Filesystem [ 218.520041][ T8619] loop5: detected capacity change from 0 to 8 [ 218.587968][ T4490] DVB: Unable to find symbol dib7000p_attach() [ 218.609819][ T8619] SQUASHFS error: zlib decompression failed, data probably corrupt [ 218.633447][ T8619] SQUASHFS error: Failed to read block 0x9b: -5 [ 218.634460][ T4490] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 218.641948][ T8619] SQUASHFS error: Unable to read metadata cache entry [99] [ 218.656862][ T8619] SQUASHFS error: Unable to read inode 0x127 [ 218.799529][ T8586] XFS (loop8): Ending clean mount [ 218.823189][ T4490] rc_core: IR keymap rc-dib0700-rc5 not found [ 218.829414][ T4490] Registered IR keymap rc-empty [ 218.840798][ T4490] dvb-usb: could not initialize remote control. [ 219.129050][ T4490] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 219.513580][ T8635] XFS (loop8): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 219.547457][ T4490] usb 7-1: USB disconnect, device number 11 [ 219.561024][ T4490] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 219.664776][ T8641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 219.736333][ T8635] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 219.798720][ T8586] netlink: 4 bytes leftover after parsing attributes in process `syz.8.886'. [ 219.865784][ T8652] loop3: detected capacity change from 0 to 512 [ 219.975318][ T8652] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.023183][ T4490] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 220.054067][ T8652] EXT4-fs (loop3): 1 truncate cleaned up [ 220.059814][ T8652] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 220.433252][ T4490] usb 7-1: not running at top speed; connect to a high speed hub [ 220.513323][ T4490] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.529423][ T4490] usb 7-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 220.548565][ T4490] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.622556][ T4490] uvcvideo 7-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 220.771540][ T8586] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 220.853396][ T4490] usb 7-1: string descriptor 0 read error: -71 [ 220.853460][ T4490] usb 7-1: Found UVC 1.00 device (046d:0825) [ 220.853513][ T4490] usb 7-1: No streaming interface found for terminal 2. [ 220.866210][ T4490] usb 7-1: USB disconnect, device number 12 [ 221.048430][ T4231] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 221.117505][ T8693] xt_l2tp: invalid flags combination: 8 [ 221.140772][ T6453] XFS (loop8): Unmounting Filesystem [ 221.154894][ T8693] FAULT_INJECTION: forcing a failure. [ 221.154894][ T8693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.173488][ T8693] CPU: 1 PID: 8693 Comm: syz.3.907 Not tainted syzkaller #0 [ 221.180817][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.190887][ T8693] Call Trace: [ 221.194178][ T8693] [ 221.197118][ T8693] dump_stack_lvl+0x188/0x250 [ 221.201813][ T8693] ? show_regs_print_info+0x20/0x20 [ 221.207031][ T8693] ? load_image+0x410/0x410 [ 221.211574][ T8693] ? __lock_acquire+0x7d40/0x7d40 [ 221.216621][ T8693] ? preempt_schedule_common+0xa5/0xd0 [ 221.222100][ T8693] should_fail+0x383/0x4b0 [ 221.226540][ T8693] _copy_from_user+0x2e/0x170 [ 221.231241][ T8693] iovec_from_user+0x142/0x370 [ 221.236030][ T8693] __import_iovec+0x70/0x490 [ 221.240646][ T8693] import_iovec+0x6f/0xa0 [ 221.245034][ T8693] ___sys_sendmsg+0x1fd/0x2e0 [ 221.249740][ T8693] ? __sys_sendmsg+0x290/0x290 [ 221.254561][ T8693] __se_sys_sendmsg+0x1b7/0x2a0 [ 221.259436][ T8693] ? __x64_sys_sendmsg+0x80/0x80 [ 221.264395][ T8693] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 221.270403][ T8693] ? lockdep_hardirqs_on+0x94/0x140 [ 221.275626][ T8693] do_syscall_64+0x4c/0xa0 [ 221.280064][ T8693] ? clear_bhb_loop+0x30/0x80 [ 221.284759][ T8693] ? clear_bhb_loop+0x30/0x80 [ 221.289455][ T8693] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.295371][ T8693] RIP: 0033:0x7f87040341d9 [ 221.299801][ T8693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.319419][ T8693] RSP: 002b:00007f870228c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.327858][ T8693] RAX: ffffffffffffffda RBX: 00007f87042bbfa0 RCX: 00007f87040341d9 [ 221.335851][ T8693] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000003 [ 221.343832][ T8693] RBP: 00007f87040cb888 R08: 0000000000000000 R09: 0000000000000000 [ 221.351818][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.359803][ T8693] R13: 00007f87042bc038 R14: 00007f87042bbfa0 R15: 00007ffc9d389118 [ 221.367808][ T8693] [ 221.399282][ T8703] FAULT_INJECTION: forcing a failure. [ 221.399282][ T8703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.438505][ T8703] CPU: 1 PID: 8703 Comm: syz.6.911 Not tainted syzkaller #0 [ 221.445836][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 221.455899][ T8703] Call Trace: [ 221.459188][ T8703] [ 221.462126][ T8703] dump_stack_lvl+0x188/0x250 [ 221.466820][ T8703] ? show_regs_print_info+0x20/0x20 [ 221.472037][ T8703] ? load_image+0x410/0x410 [ 221.476563][ T8703] ? __lock_acquire+0x7d40/0x7d40 [ 221.481620][ T8703] should_fail+0x383/0x4b0 [ 221.486070][ T8703] _copy_to_user+0x2e/0x130 [ 221.490598][ T8703] simple_read_from_buffer+0xe3/0x150 [ 221.495994][ T8703] proc_fail_nth_read+0x1a6/0x220 [ 221.500414][ T8706] loop5: detected capacity change from 0 to 2048 [ 221.501035][ T8703] ? proc_fault_inject_write+0x310/0x310 [ 221.512974][ T8703] ? fsnotify_perm+0x254/0x560 [ 221.517750][ T8703] ? proc_fault_inject_write+0x310/0x310 [ 221.523420][ T8703] vfs_read+0x2ff/0xd50 [ 221.527597][ T8703] ? __lock_acquire+0x7d40/0x7d40 [ 221.532658][ T8703] ? kernel_read+0x1e0/0x1e0 [ 221.537275][ T8703] ? mutex_lock_nested+0x17/0x20 [ 221.542227][ T8703] ? __fdget_pos+0x2bf/0x370 [ 221.546835][ T8703] ? ksys_read+0x70/0x260 [ 221.551182][ T8703] ksys_read+0x153/0x260 [ 221.555445][ T8703] ? vfs_write+0xd70/0xd70 [ 221.559884][ T8703] ? lockdep_hardirqs_on+0x94/0x140 [ 221.565106][ T8703] do_syscall_64+0x4c/0xa0 [ 221.569548][ T8703] ? clear_bhb_loop+0x30/0x80 [ 221.574236][ T8703] ? clear_bhb_loop+0x30/0x80 [ 221.578927][ T8703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 221.584838][ T8703] RIP: 0033:0x7fd568e60a0e [ 221.589261][ T8703] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.608875][ T8703] RSP: 002b:00007fd5670f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.617302][ T8703] RAX: ffffffffffffffda RBX: 00007fd5670f86c0 RCX: 00007fd568e60a0e [ 221.625292][ T8703] RDX: 000000000000000f RSI: 00007fd5670f80a0 RDI: 0000000000000004 [ 221.633277][ T8703] RBP: 00007fd5670f8090 R08: 0000000000000000 R09: 0000000000000000 [ 221.641264][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.649247][ T8703] R13: 00007fd569128038 R14: 00007fd569127fa0 R15: 00007ffc72a0cce8 [ 221.657248][ T8703] [ 221.766766][ T8706] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.873443][ T4231] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.888448][ T4231] usb 3-1: config 0 has no interface number 0 [ 222.063354][ T1325] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 222.124272][ T4231] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 222.145230][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.179767][ T4231] usb 3-1: Product: syz [ 222.193592][ T4231] usb 3-1: Manufacturer: syz [ 222.198544][ T4231] usb 3-1: SerialNumber: syz [ 222.217854][ T8719] FAULT_INJECTION: forcing a failure. [ 222.217854][ T8719] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.229795][ T4231] usb 3-1: config 0 descriptor?? [ 222.231865][ T8719] CPU: 0 PID: 8719 Comm: syz.8.916 Not tainted syzkaller #0 [ 222.243325][ T8719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 222.253387][ T8719] Call Trace: [ 222.256668][ T8719] [ 222.259601][ T8719] dump_stack_lvl+0x188/0x250 [ 222.264304][ T8719] ? show_regs_print_info+0x20/0x20 [ 222.269513][ T8719] ? load_image+0x410/0x410 [ 222.274026][ T8719] ? __lock_acquire+0x7d40/0x7d40 [ 222.279064][ T8719] should_fail+0x383/0x4b0 [ 222.283490][ T8719] prepare_alloc_pages+0x1e3/0x5b0 [ 222.288614][ T8719] __alloc_pages+0x11b/0x480 [ 222.293216][ T8719] ? zone_statistics+0x170/0x170 [ 222.298158][ T8719] ? aa_file_perm+0x38b/0xe80 [ 222.302849][ T8719] kmalloc_order+0x40/0x150 [ 222.307359][ T8719] ? debugfs_file_get+0x368/0x460 [ 222.312394][ T8719] kmalloc_order_trace+0x14/0xf0 [ 222.317339][ T8719] memdup_user+0x22/0xb0 [ 222.321585][ T8719] edid_write+0x6e/0x280 [ 222.325845][ T8719] full_proxy_write+0x109/0x1c0 [ 222.330740][ T8719] ? full_proxy_read+0x1c0/0x1c0 [ 222.335856][ T8719] vfs_write+0x304/0xd70 [ 222.340114][ T8719] ? file_end_write+0x250/0x250 [ 222.340890][ T4231] usb 3-1: selecting invalid altsetting 1 [ 222.344981][ T8719] ? mutex_lock_nested+0x17/0x20 [ 222.345003][ T8719] ? __fdget_pos+0x2bf/0x370 [ 222.345019][ T8719] ? ksys_write+0x70/0x260 [ 222.345036][ T8719] ksys_write+0x153/0x260 [ 222.345050][ T8719] ? __ia32_sys_read+0x80/0x80 [ 222.369245][ T4231] dvb_ttusb_budget: ttusb_init_controller: error [ 222.369441][ T8719] ? lockdep_hardirqs_on+0x94/0x140 [ 222.385705][ T8719] do_syscall_64+0x4c/0xa0 [ 222.390220][ T8719] ? clear_bhb_loop+0x30/0x80 [ 222.392665][ T4231] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 222.394937][ T8719] ? clear_bhb_loop+0x30/0x80 [ 222.394967][ T8719] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 222.394986][ T8719] RIP: 0033:0x7fd4afb3b1d9 [ 222.418259][ T8719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.437871][ T8719] RSP: 002b:00007fd4add93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 222.446300][ T8719] RAX: ffffffffffffffda RBX: 00007fd4afdc2fa0 RCX: 00007fd4afb3b1d9 [ 222.454286][ T8719] RDX: 0000000000006200 RSI: 00002000000001c0 RDI: 0000000000000003 [ 222.462269][ T8719] RBP: 00007fd4add93090 R08: 0000000000000000 R09: 0000000000000000 [ 222.470261][ T8719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.478247][ T8719] R13: 00007fd4afdc3038 R14: 00007fd4afdc2fa0 R15: 00007ffd0548e968 [ 222.486252][ T8719] [ 222.551797][ T8678] udc-core: couldn't find an available UDC or it's busy [ 222.570201][ T8678] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.578636][ T1325] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.589023][ T4231] DVB: Unable to find symbol stv0299_attach() [ 222.599450][ T4233] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 222.612926][ T8723] loop8: detected capacity change from 0 to 512 [ 222.627394][ T1325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.663420][ T8723] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 222.675432][ T1325] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.704111][ T8723] EXT4-fs (loop8): 1 truncate cleaned up [ 222.709851][ T8723] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 222.732269][ T4231] DVB: Unable to find symbol tda8083_attach() [ 222.883733][ T4231] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 222.892100][ T1325] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.918944][ T4231] usb 3-1: USB disconnect, device number 3 [ 222.925471][ T1325] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 222.950352][ T1325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.143299][ T4233] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 223.151342][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.183700][ T4233] usb 4-1: config 0 has no interface number 0 [ 223.189868][ T4233] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 223.215804][ T4233] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 223.483522][ T4233] usb 4-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 223.502151][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.519835][ T4233] usb 4-1: Product: syz [ 223.534337][ T4233] usb 4-1: Manufacturer: syz [ 223.549381][ T4233] usb 4-1: SerialNumber: syz [ 223.583978][ T4233] usb 4-1: config 0 descriptor?? [ 223.619475][ T8715] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 223.632752][ T8715] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 223.702445][ T4233] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 223.722918][ T8744] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.870860][ T8744] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.882439][ T4233] usb 4-1: USB disconnect, device number 9 [ 223.970975][ T8744] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.059568][ T8744] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.122949][ T1325] [drm] Initialized gud 1.0.0 20200422 for 7-1:1.0 on minor 2 [ 224.221603][ T8744] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.239648][ T8744] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.257180][ T8744] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.279075][ T8744] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.443470][ T4231] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 224.797777][ T4603] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 224.812706][ T1325] gud 7-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 224.833140][ T4490] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 224.850861][ T1325] usb 7-1: USB disconnect, device number 13 [ 224.873487][ T4231] usb 3-1: New USB device found, idVendor=05c6, idProduct=1000, bcdDevice= 0.00 [ 224.890311][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.964502][ T4231] usb-storage 3-1:1.0: USB Mass Storage device detected [ 225.063233][ T4603] usb 4-1: Using ep0 maxpacket: 8 [ 225.087209][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 225.193221][ T4603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.210507][ T4603] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 225.258668][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 225.282133][ T4490] usb 6-1: can't read configurations, error -61 [ 225.327434][ T8852] device syzkaller0 entered promiscuous mode [ 225.423485][ T4603] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 225.441896][ T4603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.454841][ T4603] usb 4-1: Product: syz [ 225.459035][ T4603] usb 4-1: Manufacturer: syz [ 225.477614][ T4603] usb 4-1: SerialNumber: syz [ 225.593605][ T4490] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 225.622900][ T8776] udc-core: couldn't find an available UDC or it's busy [ 225.640521][ T8776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.680749][ T4231] scsi host1: usb-storage 3-1:1.0 [ 225.873195][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 225.873475][ T4603] usb 4-1: unit 35 not found! [ 225.899902][ T4297] usb 3-1: USB disconnect, device number 4 [ 225.946245][ T4603] usb 4-1: USB disconnect, device number 10 [ 226.033167][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 226.044805][ T4490] usb 6-1: can't read configurations, error -61 [ 226.068823][ T4490] usb usb6-port1: attempt power cycle [ 226.339513][ T8885] bond1: option mode: unable to set because the bond device has slaves [ 226.361327][ T8885] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 226.476110][ T8894] loop2: detected capacity change from 0 to 512 [ 226.493267][ T4490] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 226.521232][ T8894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.554651][ T8894] EXT4-fs (loop2): 1 truncate cleaned up [ 226.560424][ T8894] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 226.773208][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 226.796470][ T8908] loop3: detected capacity change from 0 to 256 [ 226.933227][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 226.940906][ T4490] usb 6-1: can't read configurations, error -61 [ 227.113143][ T4490] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 227.203321][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 227.246313][ T4297] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.363210][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 227.391886][ T4490] usb 6-1: can't read configurations, error -61 [ 227.438044][ T4490] usb usb6-port1: unable to enumerate USB device [ 227.481746][ T8951] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 227.503898][ T4297] usb 4-1: Using ep0 maxpacket: 32 [ 227.598742][ T8955] loop8: detected capacity change from 0 to 164 [ 227.627357][ T4297] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 227.653110][ T4297] usb 4-1: config 0 has no interface number 0 [ 228.147460][ T8969] rock: directory entry would overflow storage [ 228.153900][ T8969] rock: sig=0x4f50, size=4, remaining=3 [ 228.159705][ T8969] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 228.579654][ T4297] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 228.583596][ T8967] rock: directory entry would overflow storage [ 228.589560][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.595436][ T8967] rock: sig=0x4f50, size=4, remaining=3 [ 228.595455][ T8967] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 228.603622][ T4297] usb 4-1: Product: syz [ 228.626898][ T4297] usb 4-1: Manufacturer: syz [ 228.631639][ T4297] usb 4-1: SerialNumber: syz [ 228.646496][ T8976] loop5: detected capacity change from 0 to 256 [ 228.659168][ T4297] usb 4-1: config 0 descriptor?? [ 228.718292][ T4297] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 228.941404][ T4297] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 228.961871][ T8976] loop5: detected capacity change from 0 to 256 [ 228.987786][ T8992] FAULT_INJECTION: forcing a failure. [ 228.987786][ T8992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.012352][ T4297] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 229.033918][ T8992] CPU: 1 PID: 8992 Comm: syz.6.959 Not tainted syzkaller #0 [ 229.041370][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.051581][ T8992] Call Trace: [ 229.054877][ T8992] [ 229.057815][ T8992] dump_stack_lvl+0x188/0x250 [ 229.062517][ T8992] ? show_regs_print_info+0x20/0x20 [ 229.067730][ T8992] ? load_image+0x410/0x410 [ 229.072253][ T8992] ? __lock_acquire+0x7d40/0x7d40 [ 229.077301][ T8992] should_fail+0x383/0x4b0 [ 229.081738][ T8992] _copy_from_user+0x2e/0x170 [ 229.086427][ T8992] memdup_user+0x5b/0xb0 [ 229.090683][ T8992] edid_write+0x6e/0x280 [ 229.094942][ T8992] full_proxy_write+0x109/0x1c0 [ 229.099807][ T8992] ? full_proxy_read+0x1c0/0x1c0 [ 229.104760][ T8992] vfs_write+0x304/0xd70 [ 229.109018][ T8992] ? file_end_write+0x250/0x250 [ 229.113896][ T8992] ? mutex_lock_nested+0x17/0x20 [ 229.118845][ T8992] ? __fdget_pos+0x2bf/0x370 [ 229.123447][ T8992] ? ksys_write+0x70/0x260 [ 229.127884][ T8992] ksys_write+0x153/0x260 [ 229.132220][ T8992] ? __ia32_sys_read+0x80/0x80 [ 229.136998][ T8992] ? lockdep_hardirqs_on+0x94/0x140 [ 229.142211][ T8992] do_syscall_64+0x4c/0xa0 [ 229.146631][ T8992] ? clear_bhb_loop+0x30/0x80 [ 229.151318][ T8992] ? clear_bhb_loop+0x30/0x80 [ 229.156008][ T8992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.161908][ T8992] RIP: 0033:0x7fd568ea01d9 [ 229.166326][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.185971][ T8992] RSP: 002b:00007fd5670f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.194397][ T8992] RAX: ffffffffffffffda RBX: 00007fd569127fa0 RCX: 00007fd568ea01d9 [ 229.202378][ T8992] RDX: 0000000000006200 RSI: 00002000000001c0 RDI: 0000000000000003 [ 229.210354][ T8992] RBP: 00007fd5670f8090 R08: 0000000000000000 R09: 0000000000000000 [ 229.218330][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.226311][ T8992] R13: 00007fd569128038 R14: 00007fd569127fa0 R15: 00007ffc72a0cce8 [ 229.234309][ T8992] [ 229.271411][ T8976] loop5: detected capacity change from 0 to 256 [ 229.493113][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 229.493125][ T25] audit: type=1800 audit(1791774390.364:34): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.960" name="c_chmask" dev="configfs" ino=48836 res=0 errno=0 [ 229.547900][ T9003] netlink: 36 bytes leftover after parsing attributes in process `syz.8.960'. [ 229.561435][ T9007] loop6: detected capacity change from 0 to 64 [ 229.648296][ T8976] loop5: detected capacity change from 0 to 256 [ 229.838622][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.964'. [ 229.866422][ T8976] loop5: detected capacity change from 0 to 256 [ 229.901736][ T9018] netlink: 40 bytes leftover after parsing attributes in process `syz.8.965'. [ 229.992452][ T26] usb 4-1: USB disconnect, device number 11 [ 229.993072][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 230.022896][ T26] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 230.060195][ T26] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 230.083115][ T8976] loop5: detected capacity change from 0 to 256 [ 230.098702][ T26] quatech2 4-1:0.51: device disconnected [ 230.225792][ T8976] loop5: detected capacity change from 0 to 256 [ 230.242731][ T9029] loop8: detected capacity change from 0 to 4096 [ 230.272623][ T9035] loop3: detected capacity change from 0 to 8 [ 230.321598][ T9029] ntfs3: loop8: ino=3, Correct links count -> 2. [ 230.450371][ T9035] SQUASHFS error: xz decompression failed, data probably corrupt [ 230.489857][ T9035] SQUASHFS error: Failed to read block 0xa8: -5 [ 230.542563][ T9035] SQUASHFS error: xz decompression failed, data probably corrupt [ 230.574946][ T9035] SQUASHFS error: Failed to read block 0xa8: -5 [ 230.590441][ T25] audit: type=1800 audit(1791774391.464:35): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.970" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 230.611460][ T9029] ntfs3: loop8: ino=5, "/" directory corrupted [ 230.669153][ T9029] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 231.190805][ T9056] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 231.228249][ T9056] EXT4-fs (loop8): 1 truncate cleaned up [ 231.234123][ T9056] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 231.516704][ T9037] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 231.586417][ T9071] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.604790][ T9037] netlink: 'syz.2.971': attribute type 2 has an invalid length. [ 231.647697][ T9071] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.684583][ T9074] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.730143][ T9075] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.778950][ T9074] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.836173][ T9074] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.858416][ T9074] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 231.933240][ T4488] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 231.964722][ T9074] netlink: 'syz.6.976': attribute type 29 has an invalid length. [ 232.237109][ T4490] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 232.366659][ T4488] usb 7-1: unable to get BOS descriptor or descriptor too short [ 232.473391][ T4488] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.483623][ T4297] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 232.493086][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 232.533296][ T4490] usb 6-1: too many configurations: 86, using maximum allowed: 8 [ 232.623329][ T4488] usb 7-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 232.642637][ T4488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 232.658473][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 232.668756][ T4490] usb 6-1: can't read configurations, error -61 [ 232.681428][ T4488] usb 7-1: Product: syz [ 232.686440][ T4488] usb 7-1: Manufacturer: syz [ 232.733150][ T4297] usb 3-1: Using ep0 maxpacket: 32 [ 232.751122][ T4488] usb 7-1: Found UVC 1.00 device syz (8086:0ad2) [ 232.762959][ T4488] usb 7-1: No streaming interface found for terminal 2. [ 232.802393][ T4488] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input10 [ 232.834652][ T4490] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 232.950414][ T4231] usb 7-1: USB disconnect, device number 14 [ 233.013438][ T4297] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 233.027490][ T4297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.060401][ T4297] usb 3-1: Product: syz [ 233.070581][ T4297] usb 3-1: Manufacturer: syz [ 233.080584][ T4297] usb 3-1: SerialNumber: syz [ 233.094242][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 233.133281][ T4490] usb 6-1: too many configurations: 86, using maximum allowed: 8 [ 233.158306][ T4488] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 233.226188][ T9121] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 233.253461][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 233.262526][ T4490] usb 6-1: can't read configurations, error -61 [ 233.270747][ T4490] usb usb6-port1: attempt power cycle [ 233.307989][ T9121] netlink: 48 bytes leftover after parsing attributes in process `syz.8.985'. [ 233.564735][ T4488] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.313163][ T4488] usb 4-1: not running at top speed; connect to a high speed hub [ 234.369062][ T4490] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 234.413170][ T4488] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.432233][ T4488] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.441789][ T9161] set_capacity_and_notify: 14 callbacks suppressed [ 234.441802][ T9161] loop6: detected capacity change from 0 to 512 [ 234.473308][ T4490] usb 6-1: Using ep0 maxpacket: 16 [ 234.496623][ T9161] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 234.513589][ T4490] usb 6-1: too many configurations: 86, using maximum allowed: 8 [ 234.531957][ T9161] EXT4-fs (loop6): 1 truncate cleaned up [ 234.537858][ T9161] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 234.633440][ T4490] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 234.641137][ T4490] usb 6-1: can't read configurations, error -61 [ 234.703303][ T4488] usb 4-1: string descriptor 0 read error: -22 [ 234.723288][ T4488] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 234.765432][ T4488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.893445][ T4490] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 235.263236][ T4490] usb 6-1: device descriptor read/8, error -71 [ 235.383295][ T4490] usb usb6-port1: unable to enumerate USB device [ 235.433647][ T9112] loop3: detected capacity change from 0 to 8192 [ 235.454997][ T9112] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.764599][ T9180] loop6: detected capacity change from 0 to 4096 [ 235.804554][ T9180] ntfs3: loop6: ino=3, Correct links count -> 2. [ 235.942892][ T4488] usb 4-1: unit 3 not found! [ 235.943688][ T9180] ntfs3: loop6: ino=5, "/" directory corrupted [ 236.014316][ T4297] usb 3-1: USB disconnect, device number 5 [ 236.034082][ T9180] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 236.112019][ T9194] loop2: detected capacity change from 0 to 4096 [ 236.232099][ T9194] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 236.270591][ T9194] EXT4-fs (loop2): inline encryption not supported [ 236.306220][ T9194] EXT4-fs (loop2): Test dummy encryption mode enabled [ 236.345393][ T9194] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c0a8, mo2=0003] [ 236.413235][ T9194] System zones: 0-5 [ 236.448128][ T9194] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,journal_dev=0x00000000000007ff,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 236.496946][ T9192] loop5: detected capacity change from 0 to 32768 [ 236.540031][ T9210] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 237.377441][ T9234] fuse: Bad value for 'fd' [ 237.392207][ T9218] loop2: detected capacity change from 0 to 32768 [ 237.417244][ T9234] 9pnet: Insufficient options for proto=fd [ 237.475769][ T9234] fuseblk: Bad value for 'fd' [ 237.504623][ T4233] usb 4-1: USB disconnect, device number 12 [ 237.700701][ T9250] loop3: detected capacity change from 0 to 512 [ 237.748554][ T9250] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 237.802771][ T9250] EXT4-fs (loop3): 1 truncate cleaned up [ 237.808775][ T9250] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 238.019390][ T9258] loop5: detected capacity change from 0 to 1024 [ 238.658782][ T9258] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bsddf,quota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,lazytime,,errors=continue. Quota mode: writeback. [ 238.862335][ T9277] loop3: detected capacity change from 0 to 4096 [ 238.960043][ T9277] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 238.992446][ T9277] ntfs3: loop3: Failed to load $Secure. [ 239.095965][ T9243] loop2: detected capacity change from 0 to 65536 [ 239.110580][ T9286] sctp: [Deprecated]: syz.8.1015 (pid 9286) Use of int in max_burst socket option deprecated. [ 239.110580][ T9286] Use struct sctp_assoc_value instead [ 239.136292][ T9243] xfs: Unknown parameter 'barrier' [ 239.358610][ T9300] bond1: option mode: unable to set because the bond device has slaves [ 239.381932][ T9300] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 239.597657][ T9316] loop3: detected capacity change from 0 to 512 [ 239.604169][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1021'. [ 239.604264][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1021'. [ 239.689745][ T9316] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.721997][ T9316] EXT4-fs (loop3): 1 truncate cleaned up [ 239.728206][ T9316] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 239.885357][ T9322] device syzkaller0 entered promiscuous mode [ 240.476171][ T9322] tipc: Started in network mode [ 240.530213][ T9322] tipc: Node identity eaf798cc6f1e, cluster identity 4711 [ 240.626233][ T9322] tipc: Enabled bearer , priority 0 [ 240.627953][ T9341] loop8: detected capacity change from 0 to 8 [ 240.681504][ T9319] tipc: Resetting bearer [ 240.799412][ T9319] tipc: Disabling bearer [ 241.161279][ T25] audit: type=1800 audit(1791774402.034:36): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="idVendor" dev="configfs" ino=49228 res=0 errno=0 [ 241.163698][ T9378] loop6: detected capacity change from 0 to 512 [ 241.219802][ T25] audit: type=1800 audit(1791774402.064:37): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="idProduct" dev="configfs" ino=49229 res=0 errno=0 [ 241.260165][ T9378] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 241.290794][ T9378] EXT4-fs (loop6): 1 truncate cleaned up [ 241.297077][ T9378] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 241.298312][ T25] audit: type=1800 audit(1791774402.074:38): pid=9381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="report_length" dev="configfs" ino=49230 res=0 errno=0 [ 241.492887][ T25] audit: type=1800 audit(1791774402.084:39): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1039" name="UDC" dev="configfs" ino=49233 res=0 errno=0 [ 242.126039][ T9405] FAULT_INJECTION: forcing a failure. [ 242.126039][ T9405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.161284][ T9406] device syzkaller0 entered promiscuous mode [ 242.174426][ T9405] CPU: 0 PID: 9405 Comm: syz.2.1046 Not tainted syzkaller #0 [ 242.181842][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 242.191914][ T9405] Call Trace: [ 242.195201][ T9405] [ 242.198140][ T9405] dump_stack_lvl+0x188/0x250 [ 242.202833][ T9405] ? show_regs_print_info+0x20/0x20 [ 242.208038][ T9405] ? load_image+0x410/0x410 [ 242.212549][ T9405] ? __lock_acquire+0x7d40/0x7d40 [ 242.217578][ T9405] should_fail+0x383/0x4b0 [ 242.221998][ T9405] _copy_to_user+0x2e/0x130 [ 242.226497][ T9405] simple_read_from_buffer+0xe3/0x150 [ 242.231860][ T9405] proc_fail_nth_read+0x1a6/0x220 [ 242.236873][ T9405] ? proc_fault_inject_write+0x310/0x310 [ 242.242509][ T9405] ? fsnotify_perm+0x254/0x560 [ 242.247261][ T9405] ? proc_fault_inject_write+0x310/0x310 [ 242.252881][ T9405] vfs_read+0x2ff/0xd50 [ 242.257024][ T9405] ? __lock_acquire+0x7d40/0x7d40 [ 242.262037][ T9405] ? kernel_read+0x1e0/0x1e0 [ 242.266625][ T9405] ? mutex_lock_nested+0x17/0x20 [ 242.271547][ T9405] ? __fdget_pos+0x2bf/0x370 [ 242.276125][ T9405] ? ksys_read+0x70/0x260 [ 242.280444][ T9405] ksys_read+0x153/0x260 [ 242.284674][ T9405] ? vfs_write+0xd70/0xd70 [ 242.289087][ T9405] ? lockdep_hardirqs_on+0x94/0x140 [ 242.294283][ T9405] do_syscall_64+0x4c/0xa0 [ 242.298788][ T9405] ? clear_bhb_loop+0x30/0x80 [ 242.303455][ T9405] ? clear_bhb_loop+0x30/0x80 [ 242.308124][ T9405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 242.314012][ T9405] RIP: 0033:0x7f9033231a0e [ 242.318427][ T9405] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.338020][ T9405] RSP: 002b:00007f90314c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.346424][ T9405] RAX: ffffffffffffffda RBX: 00007f90314c96c0 RCX: 00007f9033231a0e [ 242.354381][ T9405] RDX: 000000000000000f RSI: 00007f90314c90a0 RDI: 0000000000000004 [ 242.362334][ T9405] RBP: 00007f90314c9090 R08: 0000000000000000 R09: 0000000000000000 [ 242.370380][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.378358][ T9405] R13: 00007f90334f9038 R14: 00007f90334f8fa0 R15: 00007ffe1c88bc58 [ 242.386416][ T9405] [ 242.422966][ T9406] tipc: Started in network mode [ 242.443521][ T9406] tipc: Node identity 8239c4617f61, cluster identity 4711 [ 242.451203][ T9406] tipc: Enabled bearer , priority 0 [ 242.531263][ T9415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 242.700945][ T9427] loop2: detected capacity change from 0 to 512 [ 242.771354][ T9427] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 242.803898][ T9427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0102] [ 242.825752][ T9427] EXT4-fs (loop2): orphan cleanup on readonly fs [ 242.947694][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1053'. [ 243.197315][ T9427] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1052: bg 0: block 361: padding at end of block bitmap is not set [ 243.393190][ T9427] EXT4-fs (loop2): Remounting filesystem read-only [ 243.430833][ T9427] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 243.516271][ T9427] EXT4-fs (loop2): Remounting filesystem read-only [ 243.601908][ T9427] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1052: invalid indirect mapped block 1358954509 (level 0) [ 243.686430][ T9457] loop8: detected capacity change from 0 to 128 [ 243.701038][ T9450] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1055'. [ 243.739912][ T9427] EXT4-fs (loop2): Remounting filesystem read-only [ 243.765819][ T9427] EXT4-fs (loop2): 1 truncate cleaned up [ 243.803182][ T9427] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,noblock_validity,discard,errors=remount-ro,debug_want_extra_isize=0x0000000000000008. Quota mode: none. [ 243.897837][ T9457] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 244.025628][ T4603] tipc: Node number set to 4250453089 [ 244.268437][ T9469] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 244.322507][ T9441] loop6: detected capacity change from 0 to 32768 [ 244.357952][ T9469] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 244.533173][ T26] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 244.619490][ T9479] tipc: Started in network mode [ 244.641500][ T9479] tipc: Node identity aa29cca897a6, cluster identity 4711 [ 244.669495][ T9479] tipc: Enabled bearer , priority 0 [ 244.957894][ T9466] loop5: detected capacity change from 0 to 40427 [ 244.973435][ T26] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 244.981919][ T26] usb 4-1: config 0 has no interface number 0 [ 244.991863][ T26] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 245.085852][ T9466] F2FS-fs (loop5): invalid crc value [ 245.142832][ T9466] F2FS-fs (loop5): Found nat_bits in checkpoint [ 245.149536][ T26] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 245.177218][ T26] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 245.208956][ T26] usb 4-1: Manufacturer: syz [ 245.221051][ T26] usb 4-1: SerialNumber: syz [ 245.243954][ T26] usb 4-1: config 0 descriptor?? [ 245.300396][ T9466] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 245.476663][ T9514] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 245.530328][ T9511] loop8: detected capacity change from 0 to 4096 [ 245.608168][ T9511] ntfs: (device loop8): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 245.701350][ T5839] attempt to access beyond end of device [ 245.701350][ T5839] loop5: rw=2049, want=40992, limit=40427 [ 245.732572][ T9511] ntfs: volume version 3.1. [ 245.773219][ T4488] tipc: Node number set to 1032834216 [ 245.954253][ T26] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 245.997263][ T26] usb 4-1: USB disconnect, device number 13 [ 246.223132][ T4487] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 246.385439][ T9543] loop5: detected capacity change from 0 to 128 [ 246.421845][ T9545] loop8: detected capacity change from 0 to 512 [ 246.428529][ T4487] usb 7-1: device descriptor read/64, error -71 [ 246.451154][ T9543] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 246.543338][ T9545] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 246.556947][ T9553] loop3: detected capacity change from 0 to 512 [ 246.589975][ T9545] EXT4-fs (loop8): 1 truncate cleaned up [ 246.595863][ T9545] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 246.623250][ T9553] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 246.678782][ T9556] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 246.723218][ T4487] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 246.791190][ T9556] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 246.820611][ T9553] EXT4-fs (loop3): 1 truncate cleaned up [ 246.827504][ T9553] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 247.545466][ T4487] usb 7-1: device descriptor read/64, error -71 [ 247.673206][ T4487] usb usb7-port1: attempt power cycle [ 247.812450][ T9586] loop3: detected capacity change from 0 to 512 [ 247.832116][ T9583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.881827][ T9589] device bond_slave_0 entered promiscuous mode [ 247.888150][ T9589] device bond_slave_1 entered promiscuous mode [ 247.901733][ T9589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 247.942199][ T9589] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 247.944582][ T9586] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 247.967666][ T5829] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 247.990162][ T9591] device syzkaller0 entered promiscuous mode [ 248.041929][ T9591] tipc: Started in network mode [ 248.059263][ T9591] tipc: Node identity 2203432905a, cluster identity 4711 [ 248.070287][ T9591] tipc: Enabled bearer , priority 0 [ 248.070878][ T9586] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 248.085728][ T4487] usb 7-1: new low-speed USB device number 17 using dummy_hcd [ 248.152771][ T9586] EXT4-fs (loop3): orphan cleanup on readonly fs [ 248.177895][ T9586] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.198771][ T4487] usb 7-1: device descriptor read/8, error -71 [ 248.264819][ T9586] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 248.286212][ T9586] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #16: comm syz.3.1086: casefold flag without casefold feature [ 248.313137][ T9586] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1086: couldn't read orphan inode 16 (err -117) [ 248.336602][ T9586] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,min_batch_time=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 248.474142][ T4487] usb 7-1: new low-speed USB device number 18 using dummy_hcd [ 248.532516][ T4236] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 248.573359][ T4487] usb 7-1: device descriptor read/8, error -71 [ 248.685766][ T9587] tipc: Resetting bearer [ 248.693281][ T4487] usb usb7-port1: unable to enumerate USB device [ 248.721651][ T9587] tipc: Disabling bearer [ 248.897827][ T9633] loop5: detected capacity change from 0 to 512 [ 248.904560][ T4236] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 248.912795][ T4236] usb 3-1: config 0 has no interface number 0 [ 248.927551][ T4236] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 248.950011][ T9633] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 249.000692][ T9633] EXT4-fs (loop5): 1 truncate cleaned up [ 249.006600][ T9633] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 249.051402][ T9640] loop6: detected capacity change from 0 to 128 [ 249.233214][ T4236] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 249.242353][ T4236] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 249.487171][ T3852] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.496698][ T3852] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.541866][ T9640] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 249.568626][ T3852] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.698352][ T3852] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.790210][ T4236] usb 3-1: Manufacturer: syz [ 249.797007][ T4236] usb 3-1: SerialNumber: syz [ 249.814046][ T4236] usb 3-1: config 0 descriptor?? [ 249.820260][ T3852] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.841426][ T3852] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.863689][ T3852] netdevsim netdevsim4 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.872041][ T3852] netdevsim netdevsim4 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.897891][ T3852] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.920136][ T3852] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.943136][ T3852] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.951500][ T3852] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.970293][ T3852] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.990233][ T9646] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 250.013045][ T3852] netdevsim netdevsim0 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.021691][ T3852] netdevsim netdevsim0 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.043076][ T3852] netdevsim netdevsim0 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.043693][ T9646] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 250.051429][ T3852] netdevsim netdevsim9 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.109444][ T3852] netdevsim netdevsim9 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.127912][ T3852] netdevsim netdevsim9 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.148145][ T3852] netdevsim netdevsim9 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.463527][ T4236] usbtouchscreen: probe of 3-1:0.214 failed with error -71 [ 250.489823][ T4236] usb 3-1: USB disconnect, device number 6 [ 250.531317][ T9658] loop5: detected capacity change from 0 to 512 [ 250.589531][ T9658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 250.632520][ T9658] EXT4-fs (loop5): 1 truncate cleaned up [ 250.638624][ T9658] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 251.530758][ T9671] loop8: detected capacity change from 0 to 512 [ 251.596189][ T9671] EXT4-fs (loop8): Ignoring removed oldalloc option [ 251.608946][ T9674] loop6: detected capacity change from 0 to 256 [ 251.669569][ T9671] EXT4-fs (loop8): filesystem is read-only [ 251.709673][ T9671] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 251.730939][ T9674] exfat: Unknown parameter '0x00000000000000000x00000000ffffffff' [ 251.766263][ T9671] EXT4-fs (loop8): filesystem is read-only [ 251.772168][ T9671] EXT4-fs (loop8): orphan cleanup on readonly fs [ 251.780541][ T9685] loop3: detected capacity change from 0 to 512 [ 251.788346][ T9671] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1101: bg 0: block 64: padding at end of block bitmap is not set [ 251.841131][ T9685] EXT4-fs (loop3): Ignoring removed orlov option [ 251.860493][ T9671] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 251.875041][ T9685] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.898611][ T9671] EXT4-fs (loop8): 1 orphan inode deleted [ 251.904946][ T9671] EXT4-fs (loop8): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noauto_da_alloc,auto_da_alloc=0x0000000000000000,stripe=0x0000000000000004,bsdgroups,noblock_validity,minixdf,nouid32,dioread_lock,nolazytime,oldalloc,usrquota,,errors=continue. Quota mode: writeback. [ 251.987836][ T9685] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3894: comm syz.3.1106: Allocating blocks 41-42 which overlap fs metadata [ 252.024717][ T4236] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 252.033397][ T9685] Quota error (device loop3): write_blk: dquota write failed [ 252.062611][ T9685] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 252.084395][ T9685] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 252.094802][ T9685] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1106: Failed to acquire dquot type 1 [ 252.107051][ T9692] user requested TSC rate below hardware speed [ 252.119460][ T9685] EXT4-fs error (device loop3): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 252.233341][ T9685] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1106: corrupted inode contents [ 252.303639][ T9685] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #12: comm syz.3.1106: mark_inode_dirty error [ 252.336579][ T9715] loop2: detected capacity change from 0 to 128 [ 252.336657][ T9685] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1106: corrupted inode contents [ 252.400030][ T9685] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #12: comm syz.3.1106: mark_inode_dirty error [ 252.417403][ T4236] usb 7-1: config 4 has an invalid interface number: 12 but max is 0 [ 252.426631][ T9685] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1106: corrupted inode contents [ 252.446247][ T4236] usb 7-1: config 4 has no interface number 0 [ 252.452651][ T4236] usb 7-1: config 4 interface 12 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 252.484192][ T4236] usb 7-1: config 4 interface 12 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 252.594412][ T9722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1112'. [ 253.006822][ T782] wlan1: Trigger new scan to find an IBSS to join [ 253.042198][ T9715] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 253.052023][ T9685] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 253.091765][ T9685] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #12: comm syz.3.1106: corrupted inode contents [ 253.154779][ T1169] ------------[ cut here ]------------ [ 253.160767][ T1169] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 253.171372][ T1169] WARNING: CPU: 1 PID: 1169 at net/mac80211/rate.c:376 __rate_control_send_low+0x62c/0x880 [ 253.181452][ T1169] Modules linked in: [ 253.185393][ T1169] CPU: 1 PID: 1169 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 253.192951][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.203182][ T1169] Workqueue: phy16 ieee80211_scan_work [ 253.208668][ T1169] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 253.214967][ T1169] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 ba 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 24 1c 6a 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 253.234628][ T1169] RSP: 0018:ffffc90004e47508 EFLAGS: 00010246 [ 253.240715][ T1169] RAX: 66f703183e397900 RBX: 000000000000000c RCX: ffff888023458000 [ 253.248739][ T1169] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 253.256758][ T1169] RBP: 0000000000000084 R08: ffffc90004e47027 R09: 1ffff920009c8e04 [ 253.264773][ T1169] R10: dffffc0000000000 R11: fffff520009c8e05 R12: ffff88804b604de8 [ 253.272763][ T1169] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 253.280783][ T1169] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 253.289763][ T1169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.296391][ T1169] CR2: 00007fc9badf4fe8 CR3: 0000000065c4b000 CR4: 00000000003506e0 [ 253.304411][ T1169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.312398][ T1169] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.320419][ T1169] Call Trace: [ 253.323740][ T1169] [ 253.326701][ T1169] rate_control_send_low+0x194/0x790 [ 253.332007][ T1169] ? ieee80211_scan_work+0x41f/0x1aa0 [ 253.337518][ T1169] rate_control_get_rate+0x207/0x5c0 [ 253.342833][ T1169] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 253.348536][ T1169] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 253.354574][ T1169] ? sta_info_hash_lookup+0x53e/0x580 [ 253.359968][ T1169] ? ieee80211_queue_skb+0xbd/0x20e0 [ 253.365310][ T1169] invoke_tx_handlers_late+0xae/0x1720 [ 253.370791][ T1169] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 253.376828][ T1169] ? sta_info_get+0x220/0x230 [ 253.381537][ T1169] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 253.387414][ T1169] ieee80211_tx+0x2d4/0x460 [ 253.391945][ T1169] ? ieee80211_skb_resize+0x610/0x610 [ 253.397392][ T1169] ? ieee80211_xmit+0x309/0x420 [ 253.402271][ T1169] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 253.408141][ T1169] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 253.414371][ T1169] ieee80211_scan_work+0x41f/0x1aa0 [ 253.419598][ T1169] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 253.425562][ T1169] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.430792][ T1169] process_one_work+0x867/0xff0 [ 253.435713][ T1169] ? worker_detach_from_pool+0x240/0x240 [ 253.441367][ T1169] ? lockdep_hardirqs_off+0x70/0x100 [ 253.446712][ T1169] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.451758][ T1169] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.457364][ T1169] ? wq_worker_running+0x97/0x170 [ 253.462498][ T1169] worker_thread+0xad7/0x12a0 [ 253.467256][ T1169] kthread+0x42e/0x520 [ 253.471340][ T1169] ? rcu_lock_release+0x20/0x20 [ 253.476245][ T1169] ? kthread_blkcg+0xd0/0xd0 [ 253.480854][ T1169] ret_from_fork+0x1f/0x30 [ 253.485339][ T1169] [ 253.488383][ T1169] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 253.495759][ T1169] CPU: 1 PID: 1169 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 253.503322][ T1169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.513477][ T1169] Workqueue: phy16 ieee80211_scan_work [ 253.519003][ T1169] Call Trace: [ 253.522295][ T1169] [ 253.525234][ T1169] dump_stack_lvl+0x188/0x250 [ 253.529935][ T1169] ? show_regs_print_info+0x20/0x20 [ 253.535143][ T1169] ? load_image+0x410/0x410 [ 253.539671][ T1169] panic+0x2f8/0x850 [ 253.543581][ T1169] ? bpf_jit_dump+0xd0/0xd0 [ 253.548105][ T1169] ? ret_from_fork+0x1f/0x30 [ 253.552705][ T1169] ? __rate_control_send_low+0x62c/0x880 [ 253.558344][ T1169] __warn+0x248/0x2b0 [ 253.562330][ T1169] ? __rate_control_send_low+0x62c/0x880 [ 253.568057][ T1169] report_bug+0x1b9/0x2e0 [ 253.572403][ T1169] handle_bug+0x3a/0x70 [ 253.576569][ T1169] exc_invalid_op+0x16/0x40 [ 253.581166][ T1169] asm_exc_invalid_op+0x16/0x20 [ 253.586019][ T1169] RIP: 0010:__rate_control_send_low+0x62c/0x880 [ 253.592269][ T1169] Code: 42 0f b6 04 28 84 c0 0f 85 ea 01 00 00 48 8b 04 24 8b 08 48 c7 c7 c0 ba 39 8b 4c 89 f6 44 8b 44 24 14 45 89 f9 e8 24 1c 6a 00 <0f> 0b e9 74 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 0a fa ff [ 253.611881][ T1169] RSP: 0018:ffffc90004e47508 EFLAGS: 00010246 [ 253.618045][ T1169] RAX: 66f703183e397900 RBX: 000000000000000c RCX: ffff888023458000 [ 253.626024][ T1169] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 253.634006][ T1169] RBP: 0000000000000084 R08: ffffc90004e47027 R09: 1ffff920009c8e04 [ 253.641985][ T1169] R10: dffffc0000000000 R11: fffff520009c8e05 R12: ffff88804b604de8 [ 253.649971][ T1169] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000040 [ 253.657974][ T1169] ? __rate_control_send_low+0x62c/0x880 [ 253.663641][ T1169] rate_control_send_low+0x194/0x790 [ 253.668951][ T1169] ? ieee80211_scan_work+0x41f/0x1aa0 [ 253.674337][ T1169] rate_control_get_rate+0x207/0x5c0 [ 253.679652][ T1169] ieee80211_tx_h_rate_ctrl+0xaeb/0x16e0 [ 253.685309][ T1169] ? ieee80211_tx_h_select_key+0x1710/0x1710 [ 253.691346][ T1169] ? sta_info_hash_lookup+0x53e/0x580 [ 253.696732][ T1169] ? ieee80211_queue_skb+0xbd/0x20e0 [ 253.702032][ T1169] invoke_tx_handlers_late+0xae/0x1720 [ 253.707512][ T1169] ? ieee80211_tx_h_select_key+0x11fb/0x1710 [ 253.713506][ T1169] ? sta_info_get+0x220/0x230 [ 253.718215][ T1169] ? invoke_tx_handlers_early+0xa26/0x1ca0 [ 253.724051][ T1169] ieee80211_tx+0x2d4/0x460 [ 253.728578][ T1169] ? ieee80211_skb_resize+0x610/0x610 [ 253.733978][ T1169] ? ieee80211_xmit+0x309/0x420 [ 253.738845][ T1169] __ieee80211_tx_skb_tid_band+0x165/0x200 [ 253.744662][ T1169] ieee80211_scan_state_send_probe+0x556/0x8e0 [ 253.750843][ T1169] ieee80211_scan_work+0x41f/0x1aa0 [ 253.756051][ T1169] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 253.761972][ T1169] ? _raw_spin_unlock_irq+0x1f/0x40 [ 253.767183][ T1169] process_one_work+0x867/0xff0 [ 253.772057][ T1169] ? worker_detach_from_pool+0x240/0x240 [ 253.777698][ T1169] ? lockdep_hardirqs_off+0x70/0x100 [ 253.782998][ T1169] ? _raw_spin_lock_irq+0xb7/0xf0 [ 253.788033][ T1169] ? _raw_spin_lock_irqsave+0x100/0x100 [ 253.793590][ T1169] ? wq_worker_running+0x97/0x170 [ 253.798622][ T1169] worker_thread+0xad7/0x12a0 [ 253.803333][ T1169] kthread+0x42e/0x520 [ 253.807403][ T1169] ? rcu_lock_release+0x20/0x20 [ 253.812260][ T1169] ? kthread_blkcg+0xd0/0xd0 [ 253.816859][ T1169] ret_from_fork+0x1f/0x30 [ 253.821293][ T1169] [ 253.824616][ T1169] Kernel Offset: disabled [ 253.829216][ T1169] Rebooting in 86400 seconds..