last executing test programs: 10m50.648967534s ago: executing program 32 (id=321): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000145802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10m45.775101125s ago: executing program 33 (id=354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796c", 0x6}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/5, 0x5}], 0x1}, 0x0) 10m10.622130206s ago: executing program 34 (id=594): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$kcm(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/254, 0xfe}, {&(0x7f0000000b80)=""/138, 0x8a}], 0x2}, 0x10000) sendmsg(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000180)="976cc9389350154397d69a4468938f72d454ee14574d0759975114ac17fb6817b39e0934b3ae31a323958e6e691b9a53dd5dfb03da190c0de5d3096ec4b176584744f9d9c77190084ef6490e2c18a3fad6af9e01a89c228b7079475e5316f05ff15cf513e72c9bca91b824ab738651a8bd585c4f0c9ed39943563926164b901f583b2c08350f83847b2b1bc4d0c49b6b287b0b7ad91bb561a77f25b8ec55375858a87bf66a08832e146594f3d99cdfdccff2f35a59cf29c320f9521ae5c852e50f6bac0ce47f0637e26766035418569a4a87d70eef96c5c065ffa816363ce901b40c", 0xe2}, {&(0x7f0000000480)="00b12a8e9c7956916367acfc245aedbaa4a6d27f2110f42d47683371464480631b3396ab86f6771a14720da77ae563c549948b34b55007257236b073643f4ef8b782cc89d4922361f680e014788928d744bc82ad233940de117e494d91a7024c36a5231ee235b00bfddd0bd60dcd8b4673628d9d2b4163f8ebbc6724f53b25fe7ba96d7199172824ab6cfc2dcc9cd5aab2320aa7fc6d66d3daa20b404c26a084a585e330c508", 0xa6}], 0x2}, 0x10) 10m3.815406191s ago: executing program 35 (id=639): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x4073, &(0x7f0000000400)="$eJzszzFKA1EQBuA/iWsWWQiCVoIYLOxk7az2FuklZ7CyUHFvYikewHt4B0s9QiTKBtfYBoJ8XzHM7M/sey9st4+uKVefBkle5s/7SU6maev6O9z5Cke97foixV45TJXkev3ns6eN3h0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANg24x/9sJfcJWlfb866uVyW3WWZH6W9bXJZJeXhJHkYpWiOBzlIpud/nDFK3pIMkrwnmU029xwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D+56k3j33HVNffrq4+naZtilS4Wn+zOMQEAIAwDwYwYxCQmg4V2vzPw346zJ7lv+woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcFAAD//xGEFjw=") syz_open_procfs(r1, &(0x7f00000002c0)='smaps_rollup\x00') 8m38.554869943s ago: executing program 36 (id=1191): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={0x0, 0x0, 0x2a, 0x0, 0x4}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x4, 0x4, 0x2, 0x0, r0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/4, 0x2}, 0x20) 8m31.543540994s ago: executing program 37 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 7m13.750933535s ago: executing program 38 (id=1738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x1000004f}, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20000006}) 6m15.32930918s ago: executing program 39 (id=2101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m3.014178929s ago: executing program 40 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, 0x0, 0xb00) 5m32.332588927s ago: executing program 41 (id=2287): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x200) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4m27.053310892s ago: executing program 42 (id=2720): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000780)}, 0x20) 4m0.152661625s ago: executing program 43 (id=2785): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r0, &(0x7f0000000c40)=ANY=[@ANYBLOB="7105b8"], 0xbb) 3m55.92492837s ago: executing program 44 (id=2858): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0xa40) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m27.143360394s ago: executing program 45 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@dellink={0x20, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x20004, 0x4}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) 3m18.732784838s ago: executing program 46 (id=3043): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x1ff) open(&(0x7f00000002c0)='./file0\x00', 0x2a5c0, 0x0) r0 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 2m30.889742472s ago: executing program 47 (id=3351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 2m16.227609595s ago: executing program 1 (id=3403): ioprio_set$pid(0x2, 0x0, 0x4000) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 2m15.156740531s ago: executing program 1 (id=3409): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0xdb) 2m14.658094196s ago: executing program 1 (id=3413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r3, 0x3a, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) 2m14.16714095s ago: executing program 1 (id=3415): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2d7, &(0x7f0000000d40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m13.652261684s ago: executing program 1 (id=3417): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x80080, 0x32) mmap$IORING_OFF_SQ_RING(0x0, 0x19c4, 0xc, 0x12, r0, 0x0) 2m12.119343272s ago: executing program 1 (id=3424): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) 2m11.232864379s ago: executing program 48 (id=3424): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) 2m10.969201894s ago: executing program 0 (id=3432): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xd) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m10.666401614s ago: executing program 0 (id=3435): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000600)=ANY=[], 0x342) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000200)={'gre0\x00', 0x0}) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto(r0, 0x0, 0x0, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80) 2m10.189152329s ago: executing program 0 (id=3438): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone3(&(0x7f0000000400)={0x802000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) 2m9.710126692s ago: executing program 0 (id=3439): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m9.424096772s ago: executing program 0 (id=3442): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000180)=0x7ff, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 2m8.896423646s ago: executing program 0 (id=3446): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x98}], 0x1) 2m8.024263944s ago: executing program 49 (id=3446): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x98}], 0x1) 1m38.230717726s ago: executing program 6 (id=3594): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RSTATu(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="ba"], 0x5e6) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m37.964485673s ago: executing program 6 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 1m37.699304178s ago: executing program 6 (id=3598): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2b, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 1m37.222867799s ago: executing program 6 (id=3601): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m36.878159759s ago: executing program 6 (id=3603): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e23, 0xfffffff9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x200}}}, 0x90) 1m35.294422506s ago: executing program 6 (id=3609): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) 1m34.703146766s ago: executing program 50 (id=3609): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) 43.917051784s ago: executing program 5 (id=3906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 42.389626548s ago: executing program 5 (id=3912): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0xad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006900)={0xa0, 0x0, 0x0, {{0x5, 0x3, 0x9, 0x0, 0x2, 0x3, {0xfffffffffffffffd, 0x1, 0x1, 0xfc4, 0x124, 0x4749, 0x6, 0x8, 0x9, 0x8000, 0x800, r2, r3, 0x9, 0x2}}, {0x0, 0x12}}}, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000006c0)={0x50, 0x0, r1, {0x7, 0x26, 0x4, 0x12885b10, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x10, 0x11fff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 38.798741826s ago: executing program 5 (id=3932): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 38.392877264s ago: executing program 5 (id=3936): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 37.984198923s ago: executing program 5 (id=3941): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000057f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0x3) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 36.926478862s ago: executing program 5 (id=3948): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fadvise64(0xffffffffffffffff, 0xdffffffffffffff, 0x1, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) capset(0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 36.16310544s ago: executing program 51 (id=3948): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fadvise64(0xffffffffffffffff, 0xdffffffffffffff, 0x1, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) capset(0x0, 0x0) sendto$inet(r0, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) 11.498415123s ago: executing program 8 (id=4106): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 9.827544705s ago: executing program 8 (id=4121): unshare(0x6a040000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010200000008"], 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) dup(0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 6.504581888s ago: executing program 2 (id=4160): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x1c, 0x52, 0x1, 0x70bd2c, 0x4, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@nodiscard}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@data_err_ignore}, {@debug}]}, 0xff, 0x45c, &(0x7f0000000d80)="$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") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000200)=""/221, &(0x7f0000000340)=0xdd) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, 0x0) 6.13791862s ago: executing program 2 (id=4150): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 5.693062764s ago: executing program 4 (id=4153): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket(0x800000000000009, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5.534632638s ago: executing program 2 (id=4155): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x3000, 0x3) 5.234420865s ago: executing program 2 (id=4157): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f0000000180)={0x2e, 0x68, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 4.770358976s ago: executing program 9 (id=4158): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 4.676238416s ago: executing program 8 (id=4159): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.558441207s ago: executing program 4 (id=4161): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000600)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 3.983903367s ago: executing program 9 (id=4164): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x22004091) 3.975304579s ago: executing program 4 (id=4165): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008180}, 0x800) 3.403170449s ago: executing program 7 (id=4167): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) close(0x3) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f00000012c0)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 3.282088377s ago: executing program 4 (id=4169): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 2.981132076s ago: executing program 8 (id=4170): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x942) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000693000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x3545, 0xf69, 0x3e, 0x0, 0x0) 2.975414183s ago: executing program 2 (id=4182): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000001c600)="$eJzs/QWcbXXBeP/PhUt3qLSUgklJGUiXiEiDIF2SAlKKgFiAKAZKd3d3d3d3d3fzf124oOIC9ft7/g8+rrVezJzac+ZzPu+9N3Nmzz1n6XkXm3NgYMyBd3vv9K/tsvJYh245sPDZB25y/12rvPbFM4dePfy7J2PNPvR0jqGncw4MDAwaej+D3r1u8GwnnDjMwOCBIf/9tVFHGnmYUQcGRh56cej9DMz87skoB7233NsfiAc66ZBvt/27H+802pA7eWegK84x3sDAwIh/8/VDxjXtPzxQaUvPMd+8f7V6322YoTcP+utt75wOfvdjlP0GBkbZZ+DD148hyw73N1/7v9mQ7znmHZuu/MjH8L3/z7X0HPMt8AH/IdvisEOvm3nINv7BbdDYB9fz1S+5Y8WhUzho6MQN/pvt5eNY7/+fWnqOeRca+PDteOCI+2c68+139puD5x4YGDzPwMDgeQcGBs/3cXvU/0wf68pXVVVVH0tzzDnDkOfsw3zg54ER3/u5ln4uvPiZ528bGBi88LvPEwev+N5zwaqqqqqqqqr6z2yOOWeYC57/j/lRz/+nOXneaXr+X1VVVVVVVfV/pwXmmHOGIc/1P/D8f7yPev7/9kPr7/7u3/7PPvO7X/XWx/sgqqqqqqqqquojm3cBfP4/6Uc9/7/wlPue6fl/VVVVVVVV1f+dFp1h3rkG/uZ19oZePfV7t9Pz/+Men2iVj2u8VVVVVVVVVfXv99aTp53119d8n2TgA6/3/k5Dfy8w6JhzrrnmYxvof0aD/vH3IVt/3GP6/9oQ5xEPm3RgYL0lPu6h1MfQ/5nXqq//v5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7kOP/77/+//hrjPnw0EWnOmWnp9f961e+897/gxde4MltPqahfxz9tx7/H1hr0MDAUN8x1xoYGFh4jkUXn3pgYGDdp3c6ZcqB92+bZchtXxt72HfeIP69fyYyz1h8x1tP/u7pkBVlYNz37+OYd+5/gbf3HXbQBwbxN4110oEHrrn0y1/54OlUH/44hnnvzFLn7rj3e/+WZZgPLDTih3zxe/f/3mP5oPPQsU89ZOzTbLzuBtNstPkWX1pr3ZXWWG2N1dabYfoZp5t2pulmnXbGaVZfa53Vpn3384fM2aTvfJ7rX5mzUT84Z0/O8bdz9sHH9mFzNulHz9k79zjsxSeP9d6cDf4352yuj56zSdca+o3Gmn24gRXfmZpBAwNjzT3cwGZDLkw3wsDAWPMMXXa8Ict+fexhBgZ2+usDHXJuhPfXwUFbD1lm6XkXm/Pd3dTAwF9P/9qHvJ/98ENHPvvQ0zmGns757rcZc+Cvq+Lg2U44cZghc/F30zHqSCMPM+rAwMhDLw69n4FZ3z0Z+fT3lvuQ91n/wEDfeZmV7d/9eKfRBgYGRhlyZu6VBj0/ZOr/F96n/f/p////4DXLoPfXx0FDP4Yu867XHPMt8Nfv9c40DJm7YYdeN/MQk//ht7b/u/5hvJOOODDpR4z3I14X551o/VrlpJvP+J96XRwa73gfMd6PeB3fDx3vMo8se/O7d/U/Nt4P7OsWeufz7P/Kvm7go/d1w9IdrHblxB/c133rw4f4d7vL9+ZohA8s9GH7ukVmvmrrIfc/+0fv6xYaMvbh/m5fN8zAwFhzvbevG7Ljm3e4gZ2GXJh+yIX5hhs4ZMiFGd65MNLAOUMufHmV9ddZdcgV8//jejD1oL/7A03Yzub9wHY26G8e+6AP/H3n4HdPR9nvvfdw+pD95qChD+uf7itovR3zI8b7Ee8/hfM85Lq1z7zsC/9T7z9F4x3xo8f7Ye+X/aHj3fa1re76Hx7v+9vZcH8zXfP/K9vZpH+/nQ15iMP+zZbxr/4ctios/+758d6/t13HOOb9nymG+8D9/rOfKeb/6O1szLU+8HXb7TMw6KPmZr5/ZW4m+od90DZ/Ozf/6s9bU0/x7u3DfsTcXDOw/Fbvzc3w/+bczPfvzs3sA8P+/dwMHphnYGBgyqH7h3n/lbkZ76Pn5l9db0aG5d89v9r7V8090RWTvTc3H5yLfzY38/67czPp++vNlO/cNvkwA8MPP7DZShtvvOF0735+7+L0737+6G1w7n9lLsf8n5nLCQZ/2Fz+dVXdef7lt/sn2+A/7NPfu/+5/925HHh/LgfW+uDGUv+p9fs/d/m7y99d/u7yd5e/u/zFfcjx//df/3+RXc+ZaegvN4ab8O6rx/m4x/sx9199/H+o798d/x/n6rsnHGbg/ds+8vjsu8v8Rx6fnfndk1EOem+5Dx4f5IF++PHZ12bd4bn/peOz/0+9t63+C7+Ha//vLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yF/chx/+nfe/vAC6+4rjlhh4IHe7tWy9f8OMe78fcf/Xx/6G+f3f8f8HLb317mIH3b/vI4//vLuM4/n/K66+99p98/P+9bbXj//VPyt9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xX3I8f/Z3/s7gFkvvHiF9/4e4NK7Hp/o4x7vx9x/6/H/3v/fW/t/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7ihx/8HPvD2lou0XmBw/P//dh/i/938MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+/lj1n8l8sfs/gvnz9m8f9+/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+P8gfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P8wfs/hvmD9m8d8of8ziv3H+mMX/R/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/+P8MYv/T/LHLP5b5o9Z/H+aP2bx3yp/zOK/df6YxX+b/DGL/8/yxyz+2+aPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8d8uf8ziv33+mMV/h/wxi/9v8scs/jvmj1n8f5s/ZvH/Xf6YxX+n/DGL/+/zxyz+f8gfs/j/MX/M4v+n/DGL/875Yxb/P+ePWfz/kj9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxP0Xqv80/ud3if6rU/59l8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8Ctf+HP3KL/4Vq/w/P4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMX/7fwxif+ggfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP6fyB+z+H8yf8zi/6n8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMX/0/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/5n8MYv/Z/PHLP5T5Y9Z/KfOH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/0r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+M+WP2bx/2b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8v5s/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8zi/738MYv/cvljFv/l88cs/t/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMX/B/ljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/h/ljFv8N88cs/hvlj1n8N84fs/j/KH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8f5w/ZvH/Sf6YxX/L/DGL/0/zxyz+W+WPWfy3zh+z+G+TP2bx/1n+mMV/2/wxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/tvlj1n8t88fs/jvkD9m8f9N/pjFf8f8MYv/b/PHLP6/yx+z+O+UP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bx3zl/zOL/5/wxi/9f8scs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+75zN/x+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+J/DGL/yfzxyz+n8ofs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/nT9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+n8kfs/h/Nn/M4j9V/pjFf+r8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/r+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/2z5Yxb/b+aPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMX/u/ljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38sfs/gvlz9m8V8+f8zi//38MYv/CvljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfx/kD9m8V87f8ziv07+mMV/3fwxi/96+WMW//Xzxyz+G+SPWfx/mD9m8d8wf8ziv1H+mMV/4/wxi/+P8scs/pvkj1n8N80fs/hvlj9m8d88f8ziv0X+mMX/x/ljFv+f5I9Z/LfMH7P4/zR/zOK/Vf6YxX/r/DGL/zb5Yxb/n+WPWfy3zR+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+P86f8ziv13+mMV/+/wxi/8O+WMW/9/kj1n8d8wfs/j/Nn/M4v+7/DGL/075Yxb/3+ePWfz/kD9m8f9j/pjF/0/5Yxb/nfPHLP5/zh+z+P8lf8ziv0v+mMV/1/wxi/9u+WMW/93zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/TOI/7ED+mMV/UP6YxX+Y/DGL/7D5Yxb/wfljFv/h8scs/sPnj1n8R8gfs/iPmD9m8R8pf8ziP3L+mMV/lPwxi/+o+WMW/9Hyxyz+o+ePWfzHyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/T+SPWfw/mT9m8f9U/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8zi/+n8MYv/pPljFv/J8scs/pPnj1n8p8gfs/hPmT9m8f9M/pjF/7P5Yxb/qfLHLP5T549Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bx/3L+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfxnyB+z+H8lf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfxnyx+z+H8zf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/t/NH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8f9e/pjFf7n8MYv/8vljFv/v549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/ivmT9m8V8rf8zi/4P8MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8P8MYv/hvljFv+N8scs/hvnj1n8f5Q/ZvHfJH/M4r9p/pjFf7P8MYv/5vljFv8t8scs/j/OH7P4/yR/zOK/Zf6Yxf+n+WMW/63yxyz+W+ePWfy3yR+z+P8sf8ziv23+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv/t8scs/tvnj1n8d8gfs/j/Jn/M4r9j/pjF/7f5Yxb/3+WPWfx3yh+z+P8+f8zi/4f8MYv/H/PHLP5/yh+z+O+cP2bx/3P+mMX/L/ljFv9d8scs/rvmj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfE/sP9xG3WfwfF/t/VBb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dPybxHzyQP2bxH5Q/ZvEfJn/M4j9s/pjFf3D+mMV/uPwxi//w+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjF/xP5Yxb/T+aPWfw/lT9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+H86f8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfw/kz9m8f9s/pjFf6r8MYv/1PljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP5fyR+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/2fLHLP7fzB+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/9388cs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfy/lz9m8V8uf8ziv3z+mMX/+/ljFv8V8scs/ivmj1n8V8ofs/iv/GH+W/0vjes/NIv/Km3/mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bx/0H+mMV/7fwxi/86+f+1v5kYi/+6+WMW//Xyxyz+6+ePWfw3yB+z+P8wf8ziv2H+mMV/o/wxi//G+WMW/x/lj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+P88cs/j/JH7P4b5k/ZvH/af6YxX+r/DGL/9b5Yxb/bfLHLP4/yx+z+G+bP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx/3X+mMV/u/wxi//2+WMW/x3yxyz+v8kfs/jvmD9m8f9t/pjF/3f5Yxb/nfLHLP6/zx+z+P8hf8zi/8f8MYv/n/LHLP47549Z/P+cP2bx/0v+mMV/l/wxi/+u+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfc/gPHjgyf8zhPzD4qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B8z+g/a+p8vIvF/3Oj/L2TxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/th/o/+SQ8/+rf9L+WP/jf60/b+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/JvEfbiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/J/LHLP6fzB+z+H8qf8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bx/3T+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+H8mf8zi/9n8MYv/VPljFv+p88cs/p/LH7P4fz5/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+SP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6z5Y9Z/L+ZP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/+/mj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfyXzR+z+H8vf8ziv1z+mMV/+fwxi//388cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bx/0H+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2H+mMV/w/wxi/9G+WMW/43zxyz+P8ofs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/x/nj1n8f5I/ZvHfMn/M4v/T/DGL/1b5Yxb/rfPHLP7b5I9Z/H+WP2bx3zZ/zOL/8/wxi/8v8scs/r/MH7P4/yp/zOL/6/wxi/92+WMW/+3zxyz+O+SPWfx/kz9m8d8xf8zi/9v8MYv/7/LHLP475Y9Z/H+fP2bx/0P+mMX/j/ljFv8/5Y9Z/HfOH7P4/zl/zOL/l/wxi/8u+WMW/13zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vyxd/zf+u/3vyR/zLL9X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYv/m/ljFv+38scs/m/nj0n8hx/IH7P4D8ofs/gPkz9m8R82f8ziPzh/zOI/XP6YxX/4/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/9l/qP2hgYOu/8x81f+y/1P+d/tZ/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6Yxf8T+WMW/0/mj1n8P5U/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/On/M4j9p/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8P5M/ZvH/bP6YxX+q/DGL/9T5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+X8kfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/9nyxyz+38wfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf9b+WMW/4Xyxyz+384fs/gvnD9m8f9O/pjFf5H8MYv/d/PHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8v5c/ZvFfLn/M4r98/pjF//v5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/j/IH/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/MH/M4r9h/pjFf6P8MYv/xvljFv8f5Y9Z/DfJH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/j/PHLP4/yR+z+G+ZP2bx/2n+mMV/q/wxi//W+WMW/23yxyz+P8sfs/hvmz9m8f95/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjFf7v8MYv/9vljFv8d8scs/r/JH7P475g/ZvH/rcd/i39nYYv/7zz+/1YW/53yxyz+v88fs/j/IX/M4v/H/DGL/5/yxyz+O+ePWfz/nD9m8f9L/pjFf5f8MYv/rvljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8c+6D/S//K4/kOz+D/e9o9Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6YxH+Egfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP6fyB+z+H8yf8zi/6n8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMX/0/ljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8zi/5n8MYv/Z/PHLP5T5Y9Z/KfOH7P4fy5/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOL/5fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/0r+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H81f8zi/7X8MYv/1/PHLP7fyB+z+M+WP2bx/2b+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8v5s/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8V82f8zi/738MYv/cvljFv/l88cs/t/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMX/B/ljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/h/ljFv8N88cs/hvlj1n8N84fs/j/KH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8f5w/ZvH/Sf6YxX/L/DGL/0/zxyz+W+WPWfy3zh+z+G+TP2bx/1n+mMV/2/wxi//P88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/tvlj1n8t88fs/jvkD9m8f9N/pjFf8f8MYv/b/PHLP6/yx+z+O+UP2bx/33+mMX/D/ljFv8/5o9Z/P+UP2bx3zl/zOL/5/wxi/9f8scs/rvkj1n8d80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyT+Iw7kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bx/0T+mMX/k/ljFv9P5Y9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/p/OH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv/P5I9Z/D+bP2bxnyp/zOI/df6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/y/nj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/9X8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/tvwxi/8388cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/1b+mMV/ofwxi/+388cs/gvnj1n8v5M/ZvFfJH/M4v/d/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/v5Y9Z/JfLH7P4L58/ZvH/fv6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/mvljFv+18scs/j/IH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/j/MH7P4b5g/ZvHfKH/M4r9x/pjF/0f5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/j/DGL/0/yxyz+W+aPWfx/mj9m8d8qf8ziv3X+mMV/m/wxi//P8scs/tvmj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvHfLn/M4r99/pjFf4f8MYv/b/LHLP475o9Z/H+bP2bx/13+mMV/p/wxi//v88cs/n/IH7P4/zF/zOL/p/wxi//O+WMW/z/nj1n8/5I/ZvHfJX/M4r9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT8m8R9pIH/M4j8of8ziP0z+mMV/2Pwxi//g/DGL/3D5Yxb/4fPHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/8n8scs/p/MH7P4fyp/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/dP6YxX/S/DGL/2T5Yxb/yfPHLP5T5I9Z/KfMH7P4fyZ/zOL/2fwxi/9U+WMW/6nzxyz+n8sfs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4j9N/pjFf9r8MYv/dPljFv/p88cs/jPkj1n8v5I/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/l/NH7P4fy1/zOL/9fwxi/838scs/rPlj1n8v5k/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/7+aPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fy9/zOK/XP6YxX/5/DGL//fzxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Qf6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Yf6YxX/D/DGL/0b5Yxb/jfPHLP4/yh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/H+ePWfx/kj9m8d8yf8zi/9P8MYv/VvljFv+t88cs/tvkj1n8f5Y/ZvHfNn/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4v/r/DGL/3b5Yxb/7fPHLP475I9Z/H+TP2bx3zF/zOL/2/wxi//v8scs/jvlj1n8f58/ZvH/Q/6Yxf+P+WMW/z/lj1n8d84fs/j/OX/M4v+X/DGL/y75Yxb/XfPHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/yAP5Yxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8P5E/ZvH/ZP6Yxf9T+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6fzxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6Yxf8z+WMW/8/mj1n8p8ofs/hPnT9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+V/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvGfLX/M4v/N/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5U/ZvFfKH/M4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+H83f8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf97+WMW/+Xyxyz+y+ePWfy/nz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/w/yxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/w/zxyz+G+aPWfw3yh+z+G+cP2bx/1H+mMV/k/wxi/+m+WMW/83yx/7qP+7b7/Zxj+j/Yx/iv3n+mGX73yJ/zOL/4/wxi/9P8scs/lvq/Ef6l5ay+P9U5/+vZfHfKn/M4r91/pjFf5v8MYv/z/LHLP7b5o9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/H+dP2bx3y5/zOK/ff6YxX+H/DGL/2/yxyz+O+aPWfx/mz9m8f9d/pjFf6f8MYv/7/PHLP5/yB+z+P8xf8zi/6f8MYv/zvljFv8/549Z/P+SP2bx3yV/zOK/a/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4ngv+ggYGt/zeH9p+Yxf+ktn/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tR/lP8z/wrj+Q7P4X9f2j1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYn/KAP5Yxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8P5E/ZvH/ZP6Yxf9T+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6fzxyz+k+aPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6Yxf8z+WMW/8/mj1n8p8ofs/hPnT9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+V/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvGfLX/M4v/N/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5U/ZvFfKH/M4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+H83f8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf97+WMW/+Xyxyz+y+ePWfy/nz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/w/yxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/w/zxyz+G+aPWfw3yh+z+G+cP2bx/1H+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+P84f8zi/5P8MYv/lvljFv+f5o9Z/LfKH7P4b50/ZvHfJn/M4v+z/DGL/7b5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/X+ePWfy3yx+z+G+fP2bx3yF/zOL/m/wxi/+O+WMW/9/mj1n8f5c/ZvHfKX/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4r9z/pjF/8/5Yxb/v+SPWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549J/EcdyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+J/DGL/yfzxyz+n8ofs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/nT9m8Z80f8ziP1n+77fV35y3+E+eP2bxnyJ/zOI/Zf6Yxf8z+WMW/8/mj1n8p8ofs/hPnT9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v+V/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/av6Yxf9r+WMW/6/nj1n8v5E/ZvGfLX/M4v/N/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5U/ZvFfKH/M4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+H83f8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf97+WMW/+Xyxyz+y+ePWfy/nz9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/w/yxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/w/zxyz+G+aPWfw3yh+z+G+cP2bx/1H+mMV/k/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+P84f8zi/5P8MYv/lvljFv+f5o9Z/LfKH7P4b50/ZvHfJn/M4v+z/DGL/7b5Yxb/n+ePWfx/kT9m8f9l/pjF/1f5Yxb/X+ePWfy3yx+z+G+fP2bx3yF/zOL/m/wxi/+O+WMW/9/mj1n8f5c/ZvHfKX/M4v/7/DGL/x/yxyz+f8wfs/j/KX/M4r9z/pjF/8/5Yxb/v+SPWfx3yR+z+O+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549J/EcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4v+J/DGL/yfzxyz+n8ofs/iPlz9m8R8/f8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfw/nT9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ym9/lt/1I0W/894/T8yi/9n88cs/lPlj1n8p84fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvH/Sv6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4z5Y/ZvH/Zv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/KH7P4L5Q/ZvH/dv6YxX/h/DGL/3fyxyz+i+SPWfy/mz9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/vfwxi/9y+WMW/+Xzxyz+388fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6Yxf8H+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+H+WMW/w3zxyz+G+WPWfw3zh+z+P8of8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfx/nD9m8f9J/pjFf8v8MYv/T/PHLP5b5Y9Z/LfOH7P4b5M/ZvH/Wf6YxX/b/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/6/zxyz+2+WPWfy3zx+z+O+QP2bx/03+mMV/x/wxi/9v88cs/r/LH7P475Q/ZvH/ff6Yxf8P+WMW/z/mj1n8/5Q/ZvHfOX/M4v/n/DGL/1/yxyz+u+SPWfx3zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHJP6jD+SPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvH/RP6Yxf+T+WMW/0/lj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+n84fs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/8/kj1n8P5s/ZvGfKn/M4j91/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/1fyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf+r+WMW/6/lj1n8v54/ZvH/Rv6YxX+2/DGL/zfzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Vv6YxX+h/DGL/7fzxyz+C+ePWfy/kz9m8V8kf8zi/938MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+/lj1n8l8sfs/gvnz9m8f9+/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+P8gfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P8wfs/hvmD9m8d8of8ziv3H+mMX/R/ljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi/+P8MYv/T/LHLP5b5o9Z/H+aP2bx3yp/zOK/df6YxX+b/DGL/8/yxyz+2+aPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8d8uf8ziv33+mMV/h/wxi/9v8scs/jvmj1n8f5s/ZvH/Xf6YxX+n/DGL/+/zxyz+f8gfs/j/MX/M4v+n/DGL/875Yxb/P+ePWfz/kj9m8d8lf8ziv2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dPybxH2Mgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/yfyxyz+n8wfs/h/Kn/M4j9e/pjFf/z8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8f90/pjFf9L8MYv/ZPljFv/J88cs/lPk//9j586j7KzrO47fJAw71V+P9nSRNrVSoEWyACqtxQCBLMgYRBISkkiWyWISErNAFkOitk1TCmKpIGobTZsKYtFWiRUNRMFi2QRK7UJKRQqIbcS1KSpJz01mYjL9MqfzpM9D9ft6/ZGZe4fvFfI+H+7l5BxDWfq/Qv9Qlv7H6B/K0v9X9Q9l6X+s/qEs/Y/TP5Sl//H6h7L0/zX9Q1n6/7r+oSz9T9A/lKX/K/UPZel/ov6hLP2H6B/K0n+o/qEs/YfpH8rSf7j+oSz9T9I/lKX/yfqHsvQ/Rf9Qlv6v0j+Upf+r9Q9l6f8a/UNZ+p+qfyhL/9/QP5Sl/2/qH8rS/7X6h7L0/y39Q1n6n6Z/KEv/1+kfytJ/hP6hLP1P1z+Upf8Z+oey9D9T/1CW/iP1D2Xpf5b+oSz9z9Y/lKX/KP1DWfqP1j+Upf8Y/UNZ+o/VP5Sl/zn6h7L0f73+oSz9z9U/lKV/p/6hLP3foH8oS/9x+oey9D9P/1CW/m/UP5Sl//n6h7L0f5P+oSz9L9A/lKX/eP1DWfpP0D+Upf+F+oey9J+ofyhL/0n6h7L0v0j/UJb+k/UPZek/Rf9Qlv5T9Q9l6f9m/UNZ+l+sfyhL/2n6h7L0n65/KEv/GfqHsvSfqX8oS/8u/UNZ+s/SP5Sl/2z9Q1n6z9E/lKX/XP1DWfq/Rf9Qlv7z9A9l6T9f/1CW/gv0D2Xpf4n+oSz9F+ofytJ/kf6hLP3fqn8oS//F+oey9F+ifyhL/6X6h7L0X6Z/KEv/S/UPZel/mf6hLP2X6x/K0n+F/qEs/VfqH8rSf5X+oSz936Z/KEv/1fqHsvS/XP9Qlv5r9A9l6b9W/1CW/m/XP5Sl/zv0D2Xp/079Q1n6/7b+oSz9f0f/UJb+v6t/KEv/dfqHsvT/Pf1DWfqv1z+Upf/v6x/K0v8K/UNZ+v+B/qEs/a/UP5Sl/1X6h7L0f5f+oSz9r9Y/lKX/u/UPZen/h/qHsvS/Rv9Qlv5/pH8oS//36B/K0v9a/UNZ+l+nfyhL//fqH8rS/3r9Q1n6v0//UJb+79c/lKX/B/QPZen/x/qHsvT/E/1DWfpv0D+Upf8H9Q9l6f8h/UNZ+m/UP5Sl/5/qH8rS/8/0D2Xpv0n/UJb+f65/KEv/D+sfytL/Bv1DWfrfqH8oS/+P6B/K0v8m/UNZ+n9U/1CW/n+hfyhL/5v1D2Xp/zH9Q1n6f1z/UJb+f6l/KEv/v9I/lKX/J/QPZen/Sf1DWfrfon8oS//N+oey9P+U/qEs/f9a/1CW/p/WP5Sl/636h7L0/4z+oSz9P6t/KEv/LfqHsvS/Tf9Qlv636x/K0n+r/qEs/T+nfyhL/8/rH8rS/w79Q1n636l/KEv/L+gfytL/b/QPZel/l/6hLP2/qH8oS/+/1T+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6369/KEv/L+kfytL/Af1DWfo/qH8oS/+H9A9l6f93+oey9H9Y/1CW/n+vfyhL/y/rH8rS/x/0D2Xp/4/6h7L0/yf9Q1n6/7P+oSz9H9E/lKX/Nv1DWfr/i/6hLP0f1T+Upf+/6h/K0v8r+oey9H9M/1CW/l/VP5Sl/+P6h7L0/zf9Q1n6P6F/KEv/J/UPZen/lP6hLP2/pn8oS/+n9Q9l6f91/UNZ+v+7/qEs/f9D/1CW/tv1D2Xp/w39Q1n6P6N/KEv/b+ofytL/W/qHsvT/tv6hLP2/o38oS//v6h/K0v97+oey9P9P/UNZ+u/QP5Sl/3/pH8rS/1n9Q1n6f1//UJb+P9A/lKX/D/UPZen/nP6hLP136h/K0n+X/qEk/V/c0j+Upf8A/UNZ+g/UP5Sl/yD9Q1n6H6R/KEv/Dv1DWfofrH8oS/9D9A9l6X+o/qEs/Q/TP5Sl/+H6h7L0P0L/UJb+R+ofytL/KP1DWfr/lP6hLP1fpH/oJ64/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/zdLVqycN23+/K7FvvGNb3yz95sX+t9MAADA/7Uffeh/of9OAAAAAAAAAAAAAAAAAAAAIK8m/u/EXuh/RgAAAAAAAAAAAAAA+HE3pvP07YMG7PfUoH0fHH1f1+6vJ++4cM6mTZtLz9fuH58TvOTAfR/s2rVr1/lLtpzV/fCQVqvV/l97cffjQ3sft19/7f2vHrfnURnx3unlxtWtzts3Xfr4ozO+f8KWjt3PdrQunjV3ftfQga1WObOjtbz9YNiAVquc3dG6uv1gePvBqI7WDe0HJ+1+cFhra/vBiTMWzp/ZfmJ05d8z+EkxpnNta9B+i23t92+Dffe/9v5Jy3u+9vGSPa92UKt7/xueG/dwr5/1eJ7997x+Ob33/vv9Dwg8r/7tf9bQnq99vOT/eP8/+4fDtkQ/e/7997x+OcP+oT7B5//9Ntr7c3+vz/+Dg5fce18+ddeg9v6HH/6dWd1PHfS/+fz/o9cvZ/be/8D9Pv+3P8eP7Pn8f0irVc46wN8OSGVM59u39/X+3/f+D/r5XjcD9t3/+imj39Pe/y/d8dhLup/q6Of+R/b1/r++198r0D9jOj+0q9f7fz/23zo2eMm9+99w5ecmtPe/etQtN+7zs/7s/6ze+x+ydMGiIUtWrHzl3AXTZnfN7rrkpOGnDBv6qmGnDj1lyO6PBHt+PcDfFcjhwN7/W4f3uhnQanXtvf/le182sr3/Ozc+Obb7qUP7uf+z+3z/H+z9H0IvH9g6+ODW8mlLly4etufXnofD9/y65y8L9t+P//7/leO6/7KePzMc0Gr97N77NVNaD7T3/4tPPfi67qcO7uf+R/W5/xH7/1kl0D8H+P4/s9fNfvsvH3/R9e39jzpi+D3dT/X3v/9H97n/D3r/hwMxprNV65toe/8Dn7j22mrXZYw//4P6NLH/E8u646pdl7H2D/VpYv9dC0+4rdp1Ocf+oT5N7H/du0afV+26vN7+oT5N7P/ebz1+V7Xrcq79Q32a2P9XOr69otp16bR/qE8T+79p1cRnql2XN9g/1KeJ/b/sume+Wu26jLN/qE8T+5/w9Mil1a7LefYP9Wli/6uOvuDuatfljfYP9Wli/0Nn7Jxc7bqcb/9Qnyb2/9A73/eJatflTfYP9Wli/9c/N+yYatflAvuH+jSx/1sOG/z+atdlvP1DfZrY/87Lrjiq2nWZYP9Qnyb2v/a2jhHVrsuF9g/1aWL/92y9+cvVrstE+4f6NLH/p06+fU616zLJ/qE+Tez/o2NfsrPadbnI/qE+Tey/8yOLSrXrMtn+oT5N7L/j4UfWVbsuU+wf6tPE/o8ffPep1a7LVPuH+jSx/+lTp32s2nV5s/1DfZrY/6hnP/zyatflYvuH+jSx/yPXHfnJatdlmv1DfZrY/+AlRx9e7bpMt3+oTxP7n3fU5g9Uuy4z7B/q08T+129/aEm16zLT/qE+Tez/89eseKLademyf6hPE/v/xuw5F1W7LrPsH+rTxP43/dwd91W7LrPtH+rTxP4feeDctdWuyxz7h/o0sf+rb37yZ6pdl7n2D/VpYv+fnbTjhmrX5S32D/VpYv87XjH5tGrXZZ79Q32a2P9L73zNg9Wuy3z7h/o0sf+pt14zqtp1WWD/UJ8m9r+48x3PVrsul9g/1KeJ/Z869PiF1a7LQvuH+jSx/6u2bZhe7bossn+oTxP7/8LGk79b7bq81f6hPk3s/+nxx4ytdl0W2z/Up4n9bzzuqm3VrssS+4f6NLH/EV/8+knVrstS+4f6NLH/IzafvqnadVlm/1CfJvZ/7BnjfqHadbnU/qE+Tex//mt/cGW163KZ/UN9mtj/T39v2dZq12W5/UN9mtj/xCseHV/tuqywf6hPE/tftuZLX6t2XVbaP9Snif2fNmDm5dWuyyr7h/o0sf9tj7XeXe26vM3+oT5N7P+6DTcdUu26rLZ/qE8T+//MvFs/Xe26XG7/UJ8m9v/Nl5Yh1a7LGvsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/psdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHjgUAAAAAhPlbB9G7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBRAAAA///Tm4+K") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) ioctl$FICLONE(r1, 0x40049409, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x128) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xae, 0x1, 0x0, &(0x7f0000000080)=[{0xa, 0x1ff, 0xffffffff}]}) 2.96927141s ago: executing program 7 (id=4171): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.722594843s ago: executing program 7 (id=4172): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e0915ca8703c0e8f94b157f55799d27afa84640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6a", 0x4b}, {&(0x7f0000000840)="3f67466b434f0f1dab64b413f241dddea2dbdf0911184a79c6d06cb8", 0x1c}, {0x0}], 0x3}}], 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 2.628881665s ago: executing program 4 (id=4173): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, 0x0, &(0x7f00000025c0)) 2.461815405s ago: executing program 8 (id=4175): sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x2a}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.458754248s ago: executing program 9 (id=4176): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000340)={0x0, "72a59baeb6c10b67b134a5f267418d0000000000000000000000820f2cf9ff6c8d2600", {0x800000000000004, 0x50000000000}}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffa, 0x1fe, 0x4a, 0x28, 0x4, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1.99667738s ago: executing program 3 (id=4177): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x101800, 0x3) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x265, 0x26, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.755235603s ago: executing program 3 (id=4178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300, 0x4240a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 1.626023657s ago: executing program 7 (id=4179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) 1.384777463s ago: executing program 9 (id=4180): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x3, 0x2, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x3}, 0xff, 0xff}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 1.337372153s ago: executing program 3 (id=4181): ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.20549493s ago: executing program 7 (id=4183): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.205290317s ago: executing program 8 (id=4184): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r1, &(0x7f0000001fc0)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x2220}], 0x1, 0x0, 0x0, 0x0) close(r0) 1.073955672s ago: executing program 3 (id=4185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="2beb2e"], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 1.027174308s ago: executing program 2 (id=4186): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 509.943958ms ago: executing program 3 (id=4187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 508.293995ms ago: executing program 9 (id=4199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000400)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000280)={r2, r0}) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040810) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[], 0xc8}, 0x1, 0x0, 0x0, 0x22008095}, 0x0) 506.648312ms ago: executing program 4 (id=4200): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") socket$inet6(0xa, 0x802, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x990080, 0x0, 0x0, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 121.056323ms ago: executing program 7 (id=4188): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x22004091) 53.254281ms ago: executing program 3 (id=4189): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x22004d0, &(0x7f0000000100)=ANY=[@ANYBLOB="636f6465706167653d69736f383835392d372c696f636861727365743d63703935302c00ba266516f6fa4924d9fba264348e497675bf335802186301933c289a656051fe8b3ae727ac44171791dc80"], 0x4, 0x33a, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lseek(r0, 0xc658, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 0s ago: executing program 9 (id=4190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x8, 0x0, 0x0, 0x80, 0x3c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@local, {0x0, 0x192, 0x10000006, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x29}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) kernel console output (not intermixed with test programs): ="syz.1.3303" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f460819e019 code=0x7ffc0000 [ 641.877680][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 642.066782][ T9] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 642.103596][ T9] usb 2-1: config 0 has no interface number 0 [ 642.111096][ T9] usb 2-1: config 0 interface 41 has no altsetting 0 [ 642.140406][ T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 642.187628][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.209956][ T9] usb 2-1: Product: syz [ 642.219465][ T9] usb 2-1: Manufacturer: syz [ 642.232666][ T9] usb 2-1: SerialNumber: syz [ 642.249445][ T9] usb 2-1: config 0 descriptor?? [ 642.982846][T17611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.102883][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 643.559586][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 643.584886][ T9] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 643.632454][ T9] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 643.707874][ T9] usb 2-1: USB disconnect, device number 9 [ 643.941289][T17627] loop6: detected capacity change from 0 to 4096 [ 643.963985][T17627] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 644.102481][T17627] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 644.165412][T17627] ntfs3(loop6): Failed to load $Extend (-22). [ 644.204324][T17627] ntfs3(loop6): Failed to initialize $Extend. [ 644.239949][T17627] ntfs3(loop6): ino=5, mi_enum_attr [ 644.311835][T17643] loop3: detected capacity change from 0 to 512 [ 644.352165][T17643] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 644.381032][T17627] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 644.413404][T17643] EXT4-fs (loop3): 1 truncate cleaned up [ 644.482622][T17643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.519788][T17647] xt_hashlimit: size too large, truncated to 1048576 [ 644.561474][T17627] ntfs3(loop6): ino=5, "/" mi_enum_attr [ 644.724163][T17643] loop3: detected capacity change from 512 to 0 [ 644.731554][ C1] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 644.902910][T16395] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -EIO reading directory block [ 644.916801][T17658] xt_hashlimit: size too large, truncated to 1048576 [ 645.050862][T16395] EXT4-fs error (device loop3): ext4_get_inode_loc:5023: inode #2: block 5: comm syz-executor: unable to read itable block [ 645.133300][T16395] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 645.167898][T16395] EXT4-fs (loop3): I/O error while writing superblock [ 645.196283][T16395] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6435: IO failure [ 645.216865][T16395] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 645.238779][T16395] EXT4-fs (loop3): I/O error while writing superblock [ 645.267908][T16395] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 645.292551][T16395] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 645.309515][T16395] EXT4-fs (loop3): I/O error while writing superblock [ 645.398104][T15561] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:5008: inode #2: block 5: comm kworker/u8:34: unable to read itable block [ 645.453783][T15561] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 645.487208][T15561] EXT4-fs (loop3): I/O error while writing superblock [ 645.533474][T17675] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3345'. [ 645.569953][T16395] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.597792][T16395] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 645.642892][T16395] EXT4-fs (loop3): I/O error while writing superblock [ 646.698921][T15562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.814172][T17678] loop1: detected capacity change from 0 to 32768 [ 646.873941][T17678] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 647.063097][T15562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.067856][T17678] XFS (loop1): Ending clean mount [ 647.617795][ T4938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 647.633747][ T4938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 647.646969][ T4938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 647.663032][ T4938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 647.671807][T15562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.687564][ T4938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 647.729157][T16559] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 648.401858][T17738] loop0: detected capacity change from 0 to 512 [ 648.488230][T17738] EXT4-fs (loop0): 1 truncate cleaned up [ 648.495632][T15562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.526612][T17738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.138244][T17760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3365'. [ 649.312081][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056afb000: rx timeout, send abort [ 649.499634][T15713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.824581][ T5628] Bluetooth: hci3: command tx timeout [ 649.975502][T15562] bridge_slave_1: left allmulticast mode [ 649.982854][T15562] bridge_slave_1: left promiscuous mode [ 650.005411][T15562] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.067984][T15562] bridge_slave_0: left allmulticast mode [ 650.081062][T15562] bridge_slave_0: left promiscuous mode [ 650.097248][T15562] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.461379][T15562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.482322][T15562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.511389][T15562] bond0 (unregistering): Released all slaves [ 651.097483][T15562] hsr_slave_0: left promiscuous mode [ 651.110324][T15562] hsr_slave_1: left promiscuous mode [ 651.118445][T15562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.141269][T15562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.153208][T15562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.163607][T15562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.180755][T15562] veth1_macvtap: left promiscuous mode [ 651.191157][T15562] veth0_macvtap: left promiscuous mode [ 651.200074][T15562] veth1_vlan: left promiscuous mode [ 651.207703][T15562] veth0_vlan: left promiscuous mode [ 651.672313][T15562] team0 (unregistering): Port device team_slave_1 removed [ 651.700205][T15562] team0 (unregistering): Port device team_slave_0 removed [ 651.903858][ T5628] Bluetooth: hci3: command tx timeout [ 652.302289][T17721] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.322636][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.330085][T17721] bridge_slave_0: entered allmulticast mode [ 652.339140][T17721] bridge_slave_0: entered promiscuous mode [ 652.355163][T17721] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.363122][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.370479][T17721] bridge_slave_1: entered allmulticast mode [ 652.378748][T17721] bridge_slave_1: entered promiscuous mode [ 652.470288][T17721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.489269][T17721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.539165][T17721] team0: Port device team_slave_0 added [ 652.550396][T17721] team0: Port device team_slave_1 added [ 652.604913][T17721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.613437][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.653798][T17721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.673640][T17721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.680849][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.710468][T17721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.796964][T17721] hsr_slave_0: entered promiscuous mode [ 652.805842][T17721] hsr_slave_1: entered promiscuous mode [ 652.815773][T17721] debugfs: 'hsr0' already exists in 'hsr' [ 652.823089][T17721] Cannot create hsr debugfs directory [ 653.722373][T17721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 653.738955][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 653.757583][T17721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 653.770202][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 653.786092][T17721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 653.797693][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 653.806997][T17721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 653.830117][T17721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 653.984130][ T5628] Bluetooth: hci3: command tx timeout [ 653.998817][T17721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.033041][T17721] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.057169][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.064385][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.098054][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.105262][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.968665][T17721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.056745][T17721] veth0_vlan: entered promiscuous mode [ 655.073000][T17721] veth1_vlan: entered promiscuous mode [ 655.137731][T17721] veth0_macvtap: entered promiscuous mode [ 655.152334][T17721] veth1_macvtap: entered promiscuous mode [ 655.188496][T17721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.212148][T17721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.244321][ T134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.256753][ T134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.288932][T15553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.359909][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.466283][T15562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.492877][T15562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.538977][T15561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.547073][T15561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.651897][T17891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3353'. [ 655.672306][T17891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3353'. [ 655.787803][T17897] loop6: detected capacity change from 0 to 1024 [ 655.791597][T17898] loop1: detected capacity change from 0 to 128 [ 655.816467][T17896] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 655.852089][T17898] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 655.862901][T17897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 655.911081][T17898] hpfs: filesystem error: improperly stopped [ 655.943238][T17898] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 655.982361][T17898] hpfs: You really don't want any checks? You are crazy... [ 656.025131][T17898] hpfs: hpfs_map_sector(): read error [ 656.053590][T17898] hpfs: code page support is disabled [ 656.063976][ T5628] Bluetooth: hci3: command tx timeout [ 656.087200][T17898] hpfs: hpfs_map_4sectors(): unaligned read [ 656.111698][T17898] hpfs: hpfs_map_4sectors(): unaligned read [ 656.131317][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 656.131344][ T31] audit: type=1800 audit(3933265134.822:484): pid=17909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3384" name="bus" dev="loop6" ino=878 res=0 errno=0 [ 656.133939][T17898] hpfs: filesystem error: unable to find root dir [ 656.270281][T17915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 656.363820][T17898] hpfs: hpfs_map_4sectors(): unaligned read [ 656.389130][T17898] hpfs: hpfs_map_sector(): read error [ 656.464020][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 656.493903][T17898] hpfs: hpfs_map_4sectors(): unaligned read [ 656.558067][T17898] hpfs: hpfs_map_sector(): read error [ 657.624751][T13570] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 657.906583][T13570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 657.984607][T13570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.054184][T13570] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 658.132806][T13570] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 658.173381][T13570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.230874][T13570] usb 2-1: config 0 descriptor?? [ 658.667406][T17971] loop6: detected capacity change from 0 to 4096 [ 658.731198][T17971] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.769972][T13570] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 658.972462][T13570] usb 2-1: USB disconnect, device number 10 [ 659.816472][T15777] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.615372][T18053] loop6: detected capacity change from 0 to 512 [ 661.645268][T18053] EXT4-fs (loop6): Test dummy encryption mode enabled [ 661.660477][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3402'. [ 661.692584][T18053] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3400: inode has both inline data and extents flags [ 661.736796][T18053] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 661.737768][T18053] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3400: couldn't read orphan inode 15 (err -117) [ 661.747135][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 661.747202][ C0] EXT4-fs (loop6): initial error at time 3933265140: ext4_orphan_get:1399: inode 15 [ 661.747260][ C0] EXT4-fs (loop6): last error at time 3933265140: ext4_orphan_get:1399: inode 15 [ 661.803594][T18053] loop6: lost filesystem error report for type 5 error -117 [ 661.830342][T18053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.515703][T18067] loop0: detected capacity change from 0 to 32768 [ 662.547666][T18067] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 662.556671][T18067] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 662.620118][T18067] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 662.632255][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 662.663798][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 663.151933][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 488ms [ 663.191982][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 663.220050][T18067] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 663.776626][ T31] audit: type=1804 audit(3933265142.472:485): pid=18067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3404" name="/newroot/87/file0/file0" dev="loop0" ino=9378 res=1 errno=0 [ 663.826100][T15777] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.872256][T18107] loop1: detected capacity change from 0 to 256 [ 663.934774][T18107] vfat filesystem being mounted at /54/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 664.169371][T16559] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 664.183207][T16559] FAT-fs (loop1): Filesystem has been set read-only [ 664.300202][T16559] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 666.222967][ T6289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.762579][ T6289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.288007][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.305363][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.325026][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.335496][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.344688][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.620488][T18184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3437'. [ 667.660352][T18182] netlink: 'syz.8.3431': attribute type 1 has an invalid length. [ 667.707580][T18188] loop2: detected capacity change from 0 to 128 [ 667.731626][T18188] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 667.761462][T18188] hpfs: filesystem error: improperly stopped [ 667.780001][T18188] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 667.818726][T18188] hpfs: You really don't want any checks? You are crazy... [ 667.848843][T18188] hpfs: Code page index out of array [ 667.870439][ T6289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.871557][T18188] hpfs: code page support is disabled [ 667.908474][T18188] hpfs: hpfs_map_4sectors(): unaligned read [ 667.921464][T18188] hpfs: hpfs_map_4sectors(): unaligned read [ 667.932682][T18188] hpfs: filesystem error: unable to find root dir [ 667.994038][T18188] hpfs filesystem being remounted at /16/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 668.551499][T18208] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 668.581824][T18182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 668.794267][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 668.974862][ T6289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.995938][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 669.016084][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.026323][T18218] loop2: detected capacity change from 0 to 512 [ 669.047622][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 669.063127][T18218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 669.082249][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 669.117598][T18218] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.3445: iget: bad i_size value: 38620345925642 [ 669.136598][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 669.164115][T18218] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 669.164583][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 669.173568][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 669.183552][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.189256][ C1] EXT4-fs (loop2): initial error at time 3933265147: ext4_orphan_get:1399: inode 15 [ 669.189314][ C1] EXT4-fs (loop2): last error at time 3933265147: ext4_orphan_get:1399: inode 15 [ 669.192478][T18218] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3445: couldn't read orphan inode 15 (err -117) [ 669.322237][T18218] loop2: lost filesystem error report for type 5 error -117 [ 669.388086][T18218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.436135][ T5628] Bluetooth: hci5: command tx timeout [ 669.587064][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 669.612561][ T9] usbtmc 6-1:16.0: can't read capabilities [ 669.829071][ T5782] usb 6-1: USB disconnect, device number 16 [ 670.235196][T18233] loop6: detected capacity change from 0 to 32768 [ 670.244204][T18233] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3448 (18233) [ 670.266401][T18233] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 670.276638][T18233] BTRFS info (device loop6): using crc32c checksum algorithm [ 670.307940][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 670.425441][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 2048 with error 28 [ 670.456555][T15562] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 670.476038][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 670.476038][ T37] [ 670.525422][T18233] BTRFS warning (device loop6): couldn't read tree root [ 670.526949][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 670.532460][T18233] BTRFS warning (device loop6): try to load backup roots slot 1 [ 670.550544][ T134] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 670.580194][ T37] EXT4-fs (loop2): Free/Dirty block details [ 670.593683][ T37] EXT4-fs (loop2): free_blocks=0 [ 670.603447][ T37] EXT4-fs (loop2): dirty_blocks=3128 [ 670.608911][ T37] EXT4-fs (loop2): Block reservation details [ 670.614985][ T37] EXT4-fs (loop2): i_reserved_data_blocks=3128 [ 670.725591][T18233] BTRFS warning (device loop6): couldn't read tree root [ 670.732642][T18233] BTRFS warning (device loop6): try to load backup roots slot 2 [ 670.742793][ T37] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 670.784367][T15553] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2088 with max blocks 1072 with error 28 [ 670.797766][T18233] BTRFS warning (device loop6): couldn't read tree root [ 670.804991][T18233] BTRFS warning (device loop6): try to load backup roots slot 3 [ 670.844677][T18233] BTRFS info (device loop6): checking UUID tree [ 670.853320][T18233] BTRFS info (device loop6): setting nodatasum [ 670.859614][T18233] BTRFS info (device loop6): enabling ssd optimizations [ 670.866883][T18233] BTRFS info (device loop6): turning on flush-on-commit [ 670.873919][T18233] BTRFS info (device loop6): turning on async discard [ 670.880739][T18233] BTRFS info (device loop6): enabling free space tree [ 670.887603][T18233] BTRFS info (device loop6): trying to use backup root at mount time [ 670.895873][T18233] BTRFS info (device loop6): max_inline set to 0 [ 670.950171][ T6289] bridge_slave_1: left allmulticast mode [ 670.968940][ T6289] bridge_slave_1: left promiscuous mode [ 671.001522][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.004023][ T4938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 671.012978][T17721] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 671.041865][ T4938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 671.051729][ T4938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 671.064023][ T4938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.073896][ T4938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.116527][ T6289] bridge_slave_0: left allmulticast mode [ 671.150652][ T6289] bridge_slave_0: left promiscuous mode [ 671.160637][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.513994][ T5628] Bluetooth: hci5: command tx timeout [ 672.074283][T15777] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 672.493695][ T6289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.571254][ T6289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.650836][ T6289] bond0 (unregistering): Released all slaves [ 673.200786][ T5628] Bluetooth: hci4: command tx timeout [ 673.541415][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 673.584800][ T5628] Bluetooth: hci5: command tx timeout [ 674.019298][ T6289] hsr_slave_0: left promiscuous mode [ 674.055192][ T6289] hsr_slave_1: left promiscuous mode [ 674.081170][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.099609][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.121287][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.151566][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.237705][ T6289] veth1_macvtap: left promiscuous mode [ 674.244064][ T6289] veth0_macvtap: left promiscuous mode [ 674.250838][ T6289] veth1_vlan: left promiscuous mode [ 674.257370][ T6289] veth0_vlan: left promiscuous mode [ 674.294902][T18328] input: syz0 as /devices/virtual/input/input29 [ 675.228608][ T6289] team0 (unregistering): Port device team_slave_1 removed [ 675.264643][ T5628] Bluetooth: hci4: command tx timeout [ 675.301372][ T6289] team0 (unregistering): Port device team_slave_0 removed [ 675.552320][T18352] loop6: detected capacity change from 0 to 1024 [ 675.612547][T18352] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.664098][ T5628] Bluetooth: hci5: command tx timeout [ 675.999042][T15777] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.982492][T18170] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.005319][T18170] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.024379][T18170] bridge_slave_0: entered allmulticast mode [ 677.038022][T18170] bridge_slave_0: entered promiscuous mode [ 677.058921][T18170] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.073654][T18170] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.097765][T18170] bridge_slave_1: entered allmulticast mode [ 677.126705][T18170] bridge_slave_1: entered promiscuous mode [ 677.344096][ T5628] Bluetooth: hci4: command tx timeout [ 677.388416][T18170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.417976][T18170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.536826][T18170] team0: Port device team_slave_0 added [ 677.555598][T18170] team0: Port device team_slave_1 added [ 677.715450][T18390] overlayfs: failed to resolve './file0': -2 [ 677.756307][T18170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.789439][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.924558][T18170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.982273][T18170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.013606][T18170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.073588][T18170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.579789][T18260] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.592011][T18260] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.599886][T18260] bridge_slave_0: entered allmulticast mode [ 678.609862][T18260] bridge_slave_0: entered promiscuous mode [ 678.642917][T18170] hsr_slave_0: entered promiscuous mode [ 678.662266][T18170] hsr_slave_1: entered promiscuous mode [ 678.679089][T18170] debugfs: 'hsr0' already exists in 'hsr' [ 678.695338][T18170] Cannot create hsr debugfs directory [ 678.715810][T18260] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.725204][T18260] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.734943][T18260] bridge_slave_1: entered allmulticast mode [ 678.744567][T18260] bridge_slave_1: entered promiscuous mode [ 678.867554][T18260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.891920][T18419] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 678.938723][T18260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.987924][T18419] overlayfs: failed to set xattr on upper [ 679.032862][T18260] team0: Port device team_slave_0 added [ 679.062191][T18260] team0: Port device team_slave_1 added [ 679.067901][T18419] overlayfs: ...falling back to redirect_dir=nofollow. [ 679.131758][T18419] overlayfs: ...falling back to index=off. [ 679.179726][T18419] overlayfs: ...falling back to uuid=null. [ 679.211399][T18419] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 679.223248][T18419] overlayfs: maximum fs stacking depth exceeded [ 679.311040][T18260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.326169][T18260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.358581][T18260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.375038][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 679.424709][ T5628] Bluetooth: hci4: command tx timeout [ 679.439198][T18260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.450229][T18260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.482744][T18260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.851732][T18260] hsr_slave_0: entered promiscuous mode [ 679.884263][T18260] hsr_slave_1: entered promiscuous mode [ 679.890746][T18260] debugfs: 'hsr0' already exists in 'hsr' [ 679.896978][T18260] Cannot create hsr debugfs directory [ 680.237005][T18170] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.590685][ T31] audit: type=1326 audit(3933265159.282:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.8.3499" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa158f9e019 code=0x0 [ 680.712177][ T134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.853039][T18170] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.940999][ T134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.023350][T18170] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.109958][ T134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.215223][T18170] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.296432][ T134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.352863][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 681.447457][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 681.538825][T18484] overlayfs: failed to resolve './file0': -2 [ 681.628398][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 681.803628][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 681.824710][ T10] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 681.849209][ T10] usb 3-1: config 2 has no interface number 0 [ 681.862757][ T10] usb 3-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256 [ 681.894322][ T10] usb 3-1: config 2 interface 88 has no altsetting 0 [ 681.911262][ T10] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 681.931992][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 681.954633][ T10] usb 3-1: Product: syz [ 681.964853][ T10] usb 3-1: Manufacturer: syz [ 681.970560][ T10] usb 3-1: SerialNumber: syz [ 682.017362][T18480] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 682.100937][T18170] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 682.141409][T18170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.175472][T18170] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 682.192009][T18170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.205231][T18170] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 682.221786][T18170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.277777][T18480] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 682.433963][T18260] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.455662][T18260] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.504652][T18170] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 682.548617][T18170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.571855][ T134] bridge_slave_1: left allmulticast mode [ 682.583585][ T134] bridge_slave_1: left promiscuous mode [ 682.594117][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.612664][ T134] bridge_slave_0: left allmulticast mode [ 682.620303][ T134] bridge_slave_0: left promiscuous mode [ 682.633424][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.081179][ T134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.098670][ T134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.109146][ T134] bond0 (unregistering): Released all slaves [ 683.124343][ T189] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 683.302451][T18260] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.325446][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 683.338075][T18260] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.352784][ T189] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.363470][ T189] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.415262][ T189] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 683.428735][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.447665][ T189] usb 6-1: Product: syz [ 683.452906][ T189] usb 6-1: Manufacturer: syz [ 683.458764][ T189] usb 6-1: SerialNumber: syz [ 683.542178][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 683.585764][ T10] asix 3-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 683.616044][ T10] asix 3-1:2.88: probe with driver asix failed with error -71 [ 683.629655][ T10] usb 3-1: USB disconnect, device number 3 [ 683.687175][ T189] usb 6-1: usb_control_msg returned -71 [ 683.706460][ T189] usbtmc 6-1:1.0: can't read capabilities [ 683.711646][T18260] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.757956][T18260] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.777873][ T189] usb 6-1: USB disconnect, device number 17 [ 684.100015][T18260] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.110979][T18260] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.223986][ T189] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 684.262073][T18531] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.270074][T18531] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.402701][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.413077][ T189] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 684.425282][ T189] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.457518][ T189] usb 6-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 684.473555][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.481698][ T189] usb 6-1: Product: syz [ 684.486075][ T189] usb 6-1: Manufacturer: syz [ 684.490708][ T189] usb 6-1: SerialNumber: syz [ 684.666692][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.708745][ T189] usb 6-1: usb_control_msg returned -32 [ 684.736345][ T189] usbtmc 6-1:1.0: can't read capabilities [ 684.974622][T15562] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.075455][T18544] usbtmc 6-1:1.0: INITIATE_ABORT_BULK_OUT returned 0 [ 685.093957][ T134] hsr_slave_0: left promiscuous mode [ 685.129373][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.136874][ T134] hsr_slave_1: left promiscuous mode [ 685.138198][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.154880][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.175606][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.213185][ T189] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 685.225008][ T134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.232496][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.259280][ T134] veth1_macvtap: left promiscuous mode [ 685.265702][ T134] veth0_macvtap: left promiscuous mode [ 685.271365][ T134] veth1_vlan: left promiscuous mode [ 685.278093][ T5864] usb 6-1: USB disconnect, device number 18 [ 685.297409][ T134] veth0_vlan: left promiscuous mode [ 685.368679][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.394168][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.417081][ T189] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 685.455646][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.501194][ T189] usb 3-1: config 0 descriptor?? [ 685.929547][T18563] sctp: [Deprecated]: syz.8.3520 (pid 18563) Use of int in maxseg socket option. [ 685.929547][T18563] Use struct sctp_assoc_value instead [ 685.949494][ T189] hid_parser_main: 16 callbacks suppressed [ 685.949551][ T189] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 685.966256][ T134] team0 (unregistering): Port device team_slave_1 removed [ 685.973008][ T189] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 685.983133][ T189] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 685.992168][ T189] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 686.003322][ T189] playstation 0003:054C:0DF2.001C: unknown main item tag 0x0 [ 686.021578][ T134] team0 (unregistering): Port device team_slave_0 removed [ 686.042796][ T189] playstation 0003:054C:0DF2.001C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 686.483990][T15562] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.498644][T15562] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.549435][ T189] playstation 0003:054C:0DF2.001C: Failed to retrieve feature with reportID 5: -71 [ 686.559519][T15562] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.580063][ T189] playstation 0003:054C:0DF2.001C: Failed to retrieve DualSense calibration info: -71 [ 686.602012][ T189] playstation 0003:054C:0DF2.001C: Failed to get calibration data from DualSense [ 686.633871][ T189] playstation 0003:054C:0DF2.001C: Failed to create dualsense. [ 686.648385][ T189] playstation 0003:054C:0DF2.001C: probe with driver playstation failed with error -71 [ 686.680432][ T189] usb 3-1: USB disconnect, device number 4 [ 687.092035][T18260] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 687.139889][T18260] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.195274][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 687.198455][T18260] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 687.256262][T18260] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.299946][T18170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.335782][T18260] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 687.388129][T18260] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 687.397203][T18260] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 687.412181][T18260] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 687.492423][ T31] audit: type=1326 audit(3933265166.182:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18589 comm="syz.8.3526" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa158f9e019 code=0x7fc00000 [ 687.533200][T18170] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.555498][T15553] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.562723][T15553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.592261][T15553] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.599509][T15553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.904778][T18260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.976386][T18260] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.979277][T18608] loop2: detected capacity change from 0 to 8192 [ 688.008259][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.015497][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.044553][T18608] vfat filesystem being mounted at /38/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 688.073924][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.081163][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.115399][ T31] audit: type=1326 audit(3933265166.802:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18589 comm="syz.8.3526" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa158f3f399 code=0x7fc00000 [ 689.446802][T18649] loop2: detected capacity change from 0 to 1024 [ 689.494522][T18649] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 689.528784][T18649] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 689.570068][T18649] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 689.623738][T18649] EXT4-fs error (device loop2): ext4_get_journal_inode:5900: comm syz.2.3538: inode #63: comm syz.2.3538: iget: illegal inode # [ 689.635530][T18658] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3540'. [ 689.703723][T18649] loop2: lost filesystem error report for type 5 error -117 [ 689.706128][T18649] EXT4-fs (loop2): no journal found [ 689.723517][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 689.730004][ C0] EXT4-fs (loop2): initial error at time 3933265168: ext4_get_journal_inode:5900 [ 689.739288][ C0] EXT4-fs (loop2): last error at time 3933265168: ext4_get_journal_inode:5900 [ 689.774380][T18649] EXT4-fs (loop2): can't get journal size [ 689.804949][T18649] EXT4-fs (loop2): failed to initialize system zone (-22) [ 689.819831][T18649] EXT4-fs (loop2): mount failed [ 689.871047][T18170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.926421][T18655] loop6: detected capacity change from 0 to 8192 [ 689.964333][T18655] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 690.019568][T18655] vfat filesystem being mounted at /107/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 690.112984][T18649] loop2: detected capacity change from 0 to 4096 [ 690.155972][T18649] ntfs3: Unknown parameter '18446744073709551615' [ 690.854169][T18260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.365269][T18170] veth0_vlan: entered promiscuous mode [ 691.440373][T18170] veth1_vlan: entered promiscuous mode [ 691.542777][T18170] veth0_macvtap: entered promiscuous mode [ 691.578101][T18170] veth1_macvtap: entered promiscuous mode [ 691.637834][T18170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.697742][T18170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.780912][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.826204][T15562] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.858255][T15562] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.912352][ T6289] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.146489][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.185400][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.364243][T18260] veth0_vlan: entered promiscuous mode [ 692.373132][ T6289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.389609][ T6289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.431230][T18260] veth1_vlan: entered promiscuous mode [ 692.602423][T18260] veth0_macvtap: entered promiscuous mode [ 692.666292][T18260] veth1_macvtap: entered promiscuous mode [ 692.791625][T18260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.889018][T18260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.994424][T13570] libceph: connect (1)[c::]:6789 error -101 [ 693.010152][T13570] libceph: mon0 (1)[c::]:6789 connect error [ 693.027595][T13570] libceph: connect (1)[c::]:6789 error -101 [ 693.055066][T13570] libceph: mon0 (1)[c::]:6789 connect error [ 693.061842][T13566] libceph: connect (1)[c::]:6789 error -101 [ 693.069726][T13566] libceph: mon0 (1)[c::]:6789 connect error [ 693.189526][T15562] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.354108][ T134] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.358055][T13566] libceph: connect (1)[c::]:6789 error -101 [ 693.378840][T13570] libceph: connect (1)[c::]:6789 error -101 [ 693.402360][T13570] libceph: mon0 (1)[c::]:6789 connect error [ 693.437177][T13566] libceph: mon0 (1)[c::]:6789 connect error [ 693.555463][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.609692][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.637902][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.673744][T15553] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.780799][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.782272][T18731] ceph: No mds server is up or the cluster is laggy [ 693.800147][T18726] ceph: No mds server is up or the cluster is laggy [ 693.827817][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.994655][T13578] libceph: connect (1)[c::]:6789 error -101 [ 694.019448][T13578] libceph: mon0 (1)[c::]:6789 connect error [ 695.671314][T18792] loop7: detected capacity change from 0 to 256 [ 695.709771][T18792] vfat filesystem being mounted at /3/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 696.540622][T18800] loop6: detected capacity change from 0 to 32768 [ 696.557728][T18800] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 696.565953][T18800] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 696.689869][T18800] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 696.704398][T18705] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 696.729062][T18811] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 696.740601][T18811] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 696.756409][T18705] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 696.935399][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 696.987216][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 697.235039][T18705] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 478ms [ 697.276187][T18705] gfs2: fsid=syz:syz.0: jid=0: Done [ 697.295254][T18800] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 697.773624][T18705] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 697.909688][ T31] audit: type=1804 audit(3933265176.592:489): pid=18800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3574" name="/newroot/120/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=9378 res=1 errno=0 [ 697.990638][T18705] usb 3-1: Using ep0 maxpacket: 32 [ 698.011955][T18705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 698.055957][T18705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.107265][T18705] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 698.140969][T18705] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 698.160155][T18705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.239135][T18705] usb 3-1: config 0 descriptor?? [ 698.652428][T18850] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.660270][T18850] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.829441][T18705] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001D/input/input30 [ 698.860742][T18840] uprobe: syz.8.3584:18840 failed to unregister, leaking uprobe [ 698.997986][T18705] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.001D/input/input31 [ 699.137198][T18705] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 699.198337][T18858] overlayfs: failed to resolve './file0': -2 [ 699.253224][T18850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.286867][T18850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.452572][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3587'. [ 699.527010][T18840] uprobe: syz.8.3584:18840 failed to unregister, leaking uprobe [ 699.558818][T18865] loop9: detected capacity change from 0 to 2048 [ 699.631781][T18865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 699.957963][ C0] kye 0003:0458:5011.001D: usb_submit_urb(ctrl) failed: -1 [ 700.003809][ T37] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.093809][ T49] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.121211][ T49] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.150867][ T49] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.258559][T18881] netlink: 'syz.6.3598': attribute type 1 has an invalid length. [ 700.316962][T18881] bond2: entered promiscuous mode [ 700.327611][T18881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.376749][T18881] 8021q: adding VLAN 0 to HW filter on device bond2 [ 700.385522][T18881] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 700.398074][T18881] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 700.424299][T18881] bond2: (slave ipip0): making interface the new active one [ 700.433336][T18881] ipip0: entered promiscuous mode [ 700.451384][T18881] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 700.739914][T13570] usb 3-1: USB disconnect, device number 5 [ 701.383659][T13571] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 701.587715][T13571] usb 6-1: Using ep0 maxpacket: 16 [ 701.599611][T13571] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 701.627175][T13571] usb 6-1: config 0 has no interface number 0 [ 701.649546][T13571] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 701.674535][T18898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.690999][T13571] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 701.730251][T13571] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 701.766692][T13571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.799648][T13571] usb 6-1: Product: syz [ 701.814629][T13571] usb 6-1: Manufacturer: syz [ 701.849175][T13571] usb 6-1: SerialNumber: syz [ 701.902538][T13571] usb 6-1: config 0 descriptor?? [ 701.947844][T18902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 701.974469][T18902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.211641][T18902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.238910][T18902] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 702.478302][T13571] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 702.839135][T18898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.244993][T18898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.324048][T13570] kernel write not supported for file net/rpc/auth.rpcsec.context/channel (pid: 13570 comm: kworker/1:12) [ 703.440657][T18898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.541655][T13571] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 703.577257][T13571] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 703.629064][T13571] asix 6-1:0.34: probe with driver asix failed with error -71 [ 703.655370][T13571] usb 6-1: USB disconnect, device number 19 [ 703.805474][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 703.829804][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 703.848115][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 703.863842][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 703.880043][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.604852][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.942713][T18971] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 705.112975][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.154839][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.177164][T18954] loop7: detected capacity change from 0 to 32768 [ 705.192340][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.209901][T18954] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3616 (18954) [ 705.363654][T18954] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 705.406848][T18954] BTRFS info (device loop7): using blake2b checksum algorithm [ 705.686672][T18954] BTRFS info (device loop7): enabling ssd optimizations [ 705.727899][T18954] BTRFS info (device loop7): turning on async discard [ 705.762894][T18954] BTRFS info (device loop7): enabling free space tree [ 705.827521][ T49] bond1: left allmulticast mode [ 705.845392][ T49] bond1: left promiscuous mode [ 705.855011][T13578] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 705.883121][ T49] bridge0: port 3(bond1) entered disabled state [ 705.938468][ T49] bridge_slave_1: left allmulticast mode [ 705.965199][ T49] bridge_slave_1: left promiscuous mode [ 705.994752][ T5628] Bluetooth: hci2: command tx timeout [ 706.011336][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.044399][T13578] usb 10-1: Using ep0 maxpacket: 32 [ 706.059829][T13578] usb 10-1: unable to get BOS descriptor or descriptor too short [ 706.085214][T13578] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 706.095111][ T49] bridge_slave_0: left allmulticast mode [ 706.105243][T13578] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 706.123631][ T49] bridge_slave_0: left promiscuous mode [ 706.129558][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.138511][T13578] usb 10-1: config 14 has no interface number 0 [ 706.162889][T13578] usb 10-1: config 14 has no interface number 1 [ 706.185300][T13578] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 706.221952][T13578] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 706.271825][T13578] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 706.308840][T13578] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 706.398382][T13578] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 706.421422][T13578] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.450800][T13578] usb 10-1: config 14 interface 57 has no altsetting 0 [ 706.458362][T13578] usb 10-1: config 14 interface 228 has no altsetting 0 [ 706.498520][T13578] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 706.526985][T13578] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.556198][T13578] usb 10-1: Product: syz [ 706.570393][T13578] usb 10-1: Manufacturer: syz [ 706.603208][T13578] usb 10-1: SerialNumber: syz [ 706.627696][T18260] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 707.017075][ T49] bond2 (unregistering): (slave ipip0): Releasing backup interface [ 707.110992][T13578] legousbtower 10-1:14.57: interrupt endpoints not found [ 707.294457][ T49] ipip0 (unregistering): left promiscuous mode [ 707.524274][T13578] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 707.566840][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.567119][T13578] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 707.661755][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.724076][ T49] bond0 (unregistering): Released all slaves [ 707.796905][ T49] bond1 (unregistering): Released all slaves [ 707.879817][ T49] bond2 (unregistering): Released all slaves [ 708.066288][ T5628] Bluetooth: hci2: command tx timeout [ 708.160129][ T49] tipc: Left network mode [ 708.179245][T19031] fuse: fd is not a fuse device [ 708.356439][T19035] usb 10-1: LEGO USB Tower reset control request failed [ 708.382566][T13570] usb 10-1: USB disconnect, device number 9 [ 708.476942][T13570] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 708.850653][ T49] hsr_slave_0: left promiscuous mode [ 708.861325][ T49] hsr_slave_1: left promiscuous mode [ 708.871001][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.895002][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.111204][T19060] loop7: detected capacity change from 0 to 128 [ 709.165222][T19060] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 709.223825][T19060] hpfs: filesystem error: improperly stopped [ 709.248828][T19060] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 709.284213][T19060] hpfs: You really don't want any checks? You are crazy... [ 709.317684][T19060] hpfs: hpfs_map_sector(): read error [ 709.345294][T19060] hpfs: code page support is disabled [ 709.357850][T19060] hpfs: hpfs_map_4sectors(): unaligned read [ 709.372012][T19060] hpfs: hpfs_map_4sectors(): unaligned read [ 709.398310][T19060] hpfs: filesystem error: unable to find root dir [ 709.533177][T19071] loop2: detected capacity change from 0 to 128 [ 709.607637][T19071] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 709.892855][T19071] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 710.020356][ T49] team0 (unregistering): Port device team_slave_1 removed [ 710.109886][ T49] team0 (unregistering): Port device team_slave_0 removed [ 710.143970][ T5628] Bluetooth: hci2: command tx timeout [ 711.438370][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3646'. [ 712.135523][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.143319][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.225213][ T5628] Bluetooth: hci2: command tx timeout [ 713.211977][T18946] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.255141][T18946] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.289976][T18946] bridge_slave_0: entered allmulticast mode [ 713.320006][T18946] bridge_slave_0: entered promiscuous mode [ 713.756321][T18946] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.776251][T18946] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.786644][T18946] bridge_slave_1: entered allmulticast mode [ 713.809161][T18946] bridge_slave_1: entered promiscuous mode [ 714.003038][T18946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.013644][T13571] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 714.048354][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 714.067260][T18946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.145234][T18946] team0: Port device team_slave_0 added [ 714.188263][T13571] usb 3-1: Using ep0 maxpacket: 16 [ 714.207104][T13571] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 714.233744][T13571] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.255214][T13571] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.283664][T13571] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.302141][T13571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 714.333567][T13571] usb 3-1: config 0 has no interface number 0 [ 714.349947][T13571] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 714.378712][T13571] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 714.404628][T13571] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.418607][T13571] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.432353][T13571] usb 3-1: config 0 interface 125 has no altsetting 0 [ 714.442968][T13571] usb 3-1: config 0 interface 125 has no altsetting 2 [ 714.457138][T13571] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 714.471413][T13571] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.482379][T13571] usb 3-1: Product: syz [ 714.490853][T13571] usb 3-1: Manufacturer: syz [ 714.496341][T13571] usb 3-1: SerialNumber: syz [ 714.505781][T13571] usb 3-1: config 0 descriptor?? [ 714.525580][T13571] usb 3-1: selecting invalid altsetting 2 [ 714.575661][T18946] team0: Port device team_slave_1 added [ 714.664166][ T5769] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 714.676638][T18946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.684465][T18946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.711303][T18946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.732500][T19146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.744832][T18946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.754047][T19146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.761328][T18946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.812463][T18946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.851799][ T5769] usb 10-1: Using ep0 maxpacket: 16 [ 714.879844][ T5769] usb 10-1: unable to get BOS descriptor or descriptor too short [ 714.910835][ T5769] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.925130][ T5769] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 714.965189][ T5769] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 715.018504][ T5769] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 715.037945][ T5769] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.056722][ T5769] usb 10-1: Product: syz [ 715.061922][ T5769] usb 10-1: Manufacturer: syz [ 715.073417][ T5769] usb 10-1: SerialNumber: syz [ 715.492198][ T5769] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 715.524458][ T5769] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 715.584885][T13571] get_1284_register timeout [ 715.602984][ C1] usb 3-1: async_complete: urb error -104 [ 715.608974][ C1] usb 3-1: async_complete: urb error -104 [ 715.614893][ C1] usb 3-1: async_complete: urb error -104 [ 715.620790][ C1] usb 3-1: async_complete: urb error -104 [ 715.725592][T13571] usb 3-1: USB disconnect, device number 6 [ 715.775395][ T5769] usb 10-1: 2:1 : bogus bTerminalLink 6 [ 715.989233][T18946] hsr_slave_0: entered promiscuous mode [ 716.021813][T18946] hsr_slave_1: entered promiscuous mode [ 716.038667][T18946] debugfs: 'hsr0' already exists in 'hsr' [ 716.053556][T18946] Cannot create hsr debugfs directory [ 716.117237][ T5769] usb 10-1: USB disconnect, device number 10 [ 716.166751][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 716.607373][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.983701][T13578] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 717.157672][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.174213][T13578] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 717.244501][T13578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 717.259842][T13578] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 717.270405][T13578] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 717.290835][T13578] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 717.301249][T13578] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.341667][T13578] usb 10-1: config 0 descriptor?? [ 717.611122][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3682'. [ 717.620428][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3682'. [ 717.638302][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.826084][T19221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3682'. [ 717.836180][ T134] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.838741][T13578] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 717.858026][T19221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3682'. [ 718.185156][T15554] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.266273][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3686'. [ 718.376049][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.405556][T19243] Set syz1 is full, maxelem 1021 reached [ 718.545830][ T37] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.584948][ T37] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.790371][ T5769] usb 10-1: USB disconnect, device number 11 [ 719.108142][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 719.992227][T19278] loop9: detected capacity change from 0 to 1024 [ 720.025883][T19278] EXT4-fs: Ignoring removed bh option [ 720.124002][T19278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 720.162809][T19278] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.204082][T13578] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 720.300610][T19278] EXT4-fs error (device loop9): ext4_free_blocks:6717: comm syz.9.3695: Freeing blocks not in datazone - block = 0, count = 16 [ 720.404585][T13578] usb 3-1: Using ep0 maxpacket: 8 [ 720.420805][T19278] EXT4-fs (loop9): Remounting filesystem read-only [ 720.445725][ T31] audit: type=1326 audit(3933265199.132:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19272 comm="syz.2.3694" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1507b9e019 code=0x0 [ 720.567942][T13578] usb 3-1: unable to get BOS descriptor or descriptor too short [ 720.587165][T13578] usb 3-1: no configurations [ 720.599433][T13578] usb 3-1: can't read configurations, error -22 [ 720.641235][T18170] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 721.507468][T19311] fuse: fd is not a fuse device [ 721.555495][ T49] bridge_slave_1: left allmulticast mode [ 721.582025][ T49] bridge_slave_1: left promiscuous mode [ 721.612179][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.785754][ T49] bridge_slave_0: left allmulticast mode [ 721.796179][ T49] bridge_slave_0: left promiscuous mode [ 721.810279][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.452988][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.494831][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.517349][ T49] bond0 (unregistering): Released all slaves [ 722.611102][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 723.058697][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3711'. [ 723.087313][T19325] tipc: Started in network mode [ 723.101917][T19325] tipc: Node identity 4, cluster identity 4711 [ 723.138109][T19325] tipc: Node number set to 4 [ 723.947488][T19357] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3717'. [ 724.325381][ T49] hsr_slave_0: left promiscuous mode [ 724.356300][ T49] hsr_slave_1: left promiscuous mode [ 724.370947][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.396570][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.432597][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.448547][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.581087][ T49] veth1_macvtap: left promiscuous mode [ 724.597437][ T49] veth0_macvtap: left promiscuous mode [ 724.612155][ T49] veth1_vlan: left promiscuous mode [ 724.624496][ T49] veth0_vlan: left promiscuous mode [ 724.676533][T19371] loop2: detected capacity change from 0 to 512 [ 724.701629][T19371] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 724.809854][T19371] EXT4-fs (loop2): 1 truncate cleaned up [ 724.867322][T19371] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 725.054619][ T31] audit: type=1800 audit(3933265203.752:491): pid=19371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3721" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 725.529581][T17721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.205785][ T49] team0 (unregistering): Port device team_slave_1 removed [ 726.274462][T19406] netlink: 'syz.7.3729': attribute type 39 has an invalid length. [ 726.293849][ T49] team0 (unregistering): Port device team_slave_0 removed [ 726.917150][T18946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 726.951989][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 726.966768][T19404] syz_tun: entered allmulticast mode [ 727.170853][T19406] syz_tun (unregistering): left allmulticast mode [ 727.219310][T19427] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3734'. [ 727.278713][T19428] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3734'. [ 727.292766][T18946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.351675][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.450094][T18946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.501833][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 727.532283][T18946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.569951][T19435] loop2: detected capacity change from 0 to 1024 [ 727.590466][T18946] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 727.676559][T19435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 727.954510][T17721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.136484][T18946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.244501][T18946] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.299292][T15551] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.306623][T15551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.382290][T15551] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.389600][T15551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.332326][ T31] audit: type=1326 audit(3933265208.022:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19488 comm="syz.2.3750" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1507b9e019 code=0x0 [ 729.736760][ T31] audit: type=1800 audit(3933265208.432:493): pid=19492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3751" name="file1" dev="tmpfs" ino=1178 res=0 errno=0 [ 730.669846][T18946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.584037][ T5782] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 731.777175][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.806227][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.838791][ T5782] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 731.854983][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.930464][ T5782] usb 6-1: config 0 descriptor?? [ 732.016600][T18946] veth0_vlan: entered promiscuous mode [ 732.049867][T18946] veth1_vlan: entered promiscuous mode [ 732.146171][T18946] veth0_macvtap: entered promiscuous mode [ 732.162045][T18946] veth1_macvtap: entered promiscuous mode [ 732.272184][T18946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.340663][T18946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.429660][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.444349][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.473858][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.503724][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.518410][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.561462][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.606974][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.631846][T15554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.640570][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.677287][ T5782] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0 [ 732.742320][T15554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.774007][ T5782] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 732.905213][ T5782] cp2112 0003:10C4:EA90.001F: Part Number: 0x00 Device Version: 0x00 [ 733.099745][T15554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.177810][T15554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.381144][T15554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.409782][T15554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.776377][T13566] usb 6-1: USB disconnect, device number 20 [ 734.155570][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 734.344925][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 734.373744][ T10] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 734.401691][ T10] usb 5-1: config 1 has no interface number 0 [ 734.414040][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 734.446111][ T10] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 734.506897][ T10] usb 5-1: config 1 interface 105 has no altsetting 0 [ 734.546672][ T10] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 734.580234][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 734.608483][ T10] usb 5-1: Product: syz [ 734.631304][ T10] usb 5-1: Manufacturer: syz [ 734.656459][ T10] usb 5-1: SerialNumber: syz [ 734.711150][T19580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 734.745446][T19580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 734.788654][T19602] loop2: detected capacity change from 0 to 136 [ 735.257307][T19580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 735.276746][T19580] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 735.488914][T19621] sctp: [Deprecated]: syz.2.3782 (pid 19621) Use of int in maxseg socket option. [ 735.488914][T19621] Use struct sctp_assoc_value instead [ 735.727947][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 735.778974][ T10] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 735.867423][ T10] aqc111 5-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:4d:50:61:b9:10 [ 736.064608][ T5782] usb 5-1: USB disconnect, device number 19 [ 736.109090][ T5782] aqc111 5-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 736.286633][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 736.366928][ T9] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 736.448337][ T31] audit: type=1326 audit(3933265215.142:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19650 comm="syz.2.3796" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1507b9e019 code=0x0 [ 736.491162][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.527398][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.553569][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.577886][ T10] usb 10-1: Product: syz [ 736.582810][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 736.601921][ T10] usb 10-1: Manufacturer: syz [ 736.606916][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 736.632990][ T10] usb 10-1: SerialNumber: syz [ 736.645758][ T9] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 736.655225][ T9] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 736.676028][ T9] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 736.699815][ T9] usb 6-1: config 14 has no interface number 0 [ 736.720574][ T9] usb 6-1: config 14 has no interface number 1 [ 736.747845][ T9] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 736.788589][ T9] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 736.813729][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 736.848030][ T9] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 736.883795][ T9] usb 6-1: config 14 interface 57 has no altsetting 0 [ 736.912688][ T9] usb 6-1: config 14 interface 228 has no altsetting 0 [ 736.941938][ T9] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 736.964061][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.982209][ T9] usb 6-1: Product: syz [ 736.986999][ T9] usb 6-1: Manufacturer: syz [ 736.991660][ T9] usb 6-1: SerialNumber: syz [ 737.212711][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 737.226512][ T5782] aqc111 5-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 737.268434][ T5782] aqc111 5-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 737.320696][ T5782] aqc111 5-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 737.500673][ T9] legousbtower 6-1:14.57: interrupt endpoints not found [ 737.519882][T19669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 737.539417][T19670] loop4: detected capacity change from 0 to 1024 [ 737.562276][T19670] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 737.593580][T19670] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 737.628155][T19670] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 737.648947][T19670] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.3801: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 737.689229][T19670] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 737.689664][T19670] EXT4-fs (loop4): no journal found [ 737.698830][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 737.698866][ C1] EXT4-fs (loop4): initial error at time 3933265216: ext4_ext_check_inode:521: inode 3 [ 737.698924][ C1] EXT4-fs (loop4): last error at time 3933265216: ext4_ext_check_inode:521: inode 3 [ 737.747755][ T10] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 737.762300][ T10] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 737.794015][ T10] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 737.820232][T19670] EXT4-fs (loop4): can't get journal size [ 737.858221][T19670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 737.913373][ T9] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 737.989525][ T9] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 738.161417][ T10] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 738.226901][T19686] fuse: fd is not a fuse device [ 738.257752][T18946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.271655][ T10] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 738.324567][ T10] usb 10-1: USB disconnect, device number 12 [ 738.339902][ T10] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 738.584860][T13567] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 738.743633][T13567] usb 3-1: Using ep0 maxpacket: 32 [ 738.756695][ T10] usb 6-1: USB disconnect, device number 21 [ 738.760984][T13567] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.810219][ T10] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 738.819659][T13567] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 738.857593][T13567] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 738.895029][T13567] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 738.932014][T13567] usb 3-1: config 1 interface 1 has no altsetting 0 [ 738.972787][T13567] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 739.004976][T13567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.033603][T13567] usb 3-1: Product: syz [ 739.042341][T13567] usb 3-1: Manufacturer: syz [ 739.055539][T13567] usb 3-1: SerialNumber: syz [ 739.089947][T19699] netlink: 'syz.7.3809': attribute type 5 has an invalid length. [ 739.161370][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 739.319724][T13567] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 739.523117][T19720] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 739.532919][T19720] overlayfs: failed to set xattr on upper [ 739.540435][T19720] overlayfs: ...falling back to redirect_dir=nofollow. [ 739.547693][T19720] overlayfs: ...falling back to index=off. [ 739.556846][T19720] overlayfs: ...falling back to uuid=null. [ 739.564665][T19720] overlayfs: ...falling back to xino=off. [ 739.583256][T19721] loop9: detected capacity change from 0 to 1024 [ 739.607792][T19721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 739.655443][T19721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.691111][T13567] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 739.750451][T13567] usb 3-1: USB disconnect, device number 9 [ 739.907984][T13574] udevd[13574]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 740.049295][T18170] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.106539][T18705] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 740.193037][T19741] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3821'. [ 740.285439][T18705] usb 6-1: Using ep0 maxpacket: 8 [ 740.292777][T18705] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 740.335072][T18705] usb 6-1: config 0 has no interface number 0 [ 740.365299][T18705] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 740.406709][T18705] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.456938][T18705] usb 6-1: config 0 descriptor?? [ 740.604533][T18705] viperboard 6-1:0.143: version 0.00 found at bus 006 address 022 [ 740.732346][T19732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.744876][T18705] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 740.775527][T19732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.785570][T18705] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 740.911615][T19761] loop9: detected capacity change from 0 to 1024 [ 741.020834][T19761] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 741.232914][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 741.374778][T18705] usb 6-1: USB disconnect, device number 22 [ 741.420119][T19776] fuse: fd is not a fuse device [ 741.498561][T18170] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 741.742136][T19779] fuse: fd is not a fuse device [ 741.807282][T19748] loop4: detected capacity change from 0 to 32768 [ 741.854449][T19781] loop9: detected capacity change from 0 to 512 [ 741.896539][T19748] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 741.916216][T19781] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 741.947240][T19781] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 741.979653][T19781] System zones: 0-1, 15-15, 18-18, 34-34 [ 742.000012][T19781] EXT4-fs (loop9): orphan cleanup on readonly fs [ 742.019314][T19781] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 742.029744][T19781] EXT4-fs warning (device loop9): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 742.045248][T19781] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 742.071520][T19781] EXT4-fs (loop9): 1 truncate cleaned up [ 742.079812][T19781] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 742.109552][T19781] fscrypt (loop9, inode 16): Error -61 getting encryption context [ 742.143088][T19748] XFS (loop4): Ending clean mount [ 742.314265][T18170] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.456565][ T31] audit: type=1800 audit(3933265221.142:495): pid=19799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3823" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 742.593656][ T31] audit: type=1800 audit(3933265221.152:496): pid=19748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3823" name="bus" dev="loop4" ino=4425 res=0 errno=0 [ 742.802752][T18946] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 743.338688][T19820] fuse: root generation should be zero [ 744.135870][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 744.247970][T19850] loop9: detected capacity change from 0 to 128 [ 744.323293][T19850] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 744.430083][T19850] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 744.466039][T19863] netlink: 'syz.4.3855': attribute type 2 has an invalid length. [ 744.899434][T18170] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 744.903360][T19879] netlink: 'syz.7.3860': attribute type 1 has an invalid length. [ 745.084184][T19879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 745.116063][ T5782] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 745.149297][T19882] bond1: (slave erspan0): making interface the new active one [ 745.179974][T19882] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 745.303565][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 745.303604][ T5782] usb 6-1: Using ep0 maxpacket: 32 [ 745.333662][ T5782] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 745.351716][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 745.363358][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 745.374939][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 745.387832][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 745.433808][T19883] bond1: entered promiscuous mode [ 745.439055][T19883] erspan0: entered promiscuous mode [ 745.451999][ T5782] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 745.464786][T19883] bond1: entered allmulticast mode [ 745.490989][T19883] erspan0: entered allmulticast mode [ 745.505125][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 745.511153][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.553258][ T5782] usb 6-1: Product: syz [ 745.572452][ T5782] usb 6-1: Manufacturer: syz [ 745.605573][ T5782] usb 6-1: SerialNumber: syz [ 745.645784][ T5782] usb 6-1: config 0 descriptor?? [ 745.673414][T19901] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3863'. [ 745.904623][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 745.948209][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 745.974941][ T10] usb 10-1: can't read configurations, error -71 [ 746.161890][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 746.181177][ T5782] input input33: Device does not respond to id packet M [ 746.181683][T19914] bridge_slave_0: left allmulticast mode [ 746.205318][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 746.220640][ T5782] input input33: Device does not respond to id packet P [ 746.229271][T19914] bridge_slave_0: left promiscuous mode [ 746.248059][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 746.254134][T19914] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.300550][ T5782] input input33: Device does not respond to id packet B [ 746.326129][T19914] bridge_slave_1: left allmulticast mode [ 746.338136][ T5782] input input33: Limiting number of effects to 32 (device reports 230) [ 746.341185][T19914] bridge_slave_1: left promiscuous mode [ 746.371245][T19914] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.424228][T19914] bond0: (slave bond_slave_0): Releasing backup interface [ 746.495505][T19914] bond0: (slave bond_slave_1): Releasing backup interface [ 746.540475][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 746.559601][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.566290][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.599822][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 746.614915][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 746.621346][T19914] team0: Port device team_slave_0 removed [ 746.637781][ T5782] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 746.658591][ T5782] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 746.758307][T19914] team0: Port device team_slave_1 removed [ 746.791069][T19914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.791551][ T5782] usb 6-1: USB disconnect, device number 23 [ 746.801636][T19914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.913814][T19914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.936729][T19914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.981135][T19914] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 747.600535][T19948] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3876'. [ 747.842499][T19956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.106914][ T5628] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 748.186223][T19962] fuse: fd is not a fuse device [ 748.299804][T19937] loop9: detected capacity change from 0 to 32768 [ 748.316447][T19937] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3873 (19937) [ 748.368366][T19937] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 748.411773][T19937] BTRFS info (device loop9): using blake2b checksum algorithm [ 748.561636][T19937] BTRFS info (device loop9): enabling ssd optimizations [ 748.610171][T19937] BTRFS info (device loop9): turning on async discard [ 748.633697][ T5283] 8021q: adding VLAN 0 to HW filter on device eth13 [ 748.641389][T19937] BTRFS info (device loop9): enabling free space tree [ 748.672725][T19937] BTRFS info (device loop9): use zstd compression, level 3 [ 748.898694][ T31] audit: type=1800 audit(3933265227.592:497): pid=19937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3873" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 749.017530][ T31] audit: type=1800 audit(3933265227.592:498): pid=19993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3873" name="bus" dev="loop9" ino=263 res=0 errno=0 [ 749.544755][T13570] libceph: connect (1)[c::]:6789 error -101 [ 749.590182][T13570] libceph: mon0 (1)[c::]:6789 connect error [ 749.653251][T20004] ceph: No mds server is up or the cluster is laggy [ 749.751066][T20013] loop4: detected capacity change from 0 to 128 [ 749.811368][T20013] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 749.864862][T20013] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 749.920912][ T5782] libceph: connect (1)[c::]:6789 error -101 [ 749.941897][ T5782] libceph: mon0 (1)[c::]:6789 connect error [ 750.078826][T18170] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 751.366089][T20013] EXT4-fs error (device loop4): dx_make_map:1295: inode #2: block 20: comm syz.4.3891: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 751.510477][T20013] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem [ 751.768490][T18946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.253589][T18705] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 752.436706][T18705] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 752.461381][T18705] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.535983][T18705] usb 10-1: config 0 descriptor?? [ 752.696830][ T5782] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 752.897935][ T5782] usb 6-1: config 0 has no interfaces? [ 752.908068][ T5782] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 752.927430][ T5782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.961601][ T5782] usb 6-1: config 0 descriptor?? [ 753.023637][T13566] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 753.184835][T13566] usb 3-1: Using ep0 maxpacket: 32 [ 753.207271][T13566] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 753.215465][ T5748] usb 6-1: USB disconnect, device number 24 [ 753.257370][T13566] usb 3-1: config 0 has no interface number 0 [ 753.282051][T13566] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 753.322956][T13566] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 753.339300][T13566] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.358585][T13566] usb 3-1: Product: syz [ 753.369246][T13566] usb 3-1: Manufacturer: syz [ 753.382002][T13566] usb 3-1: SerialNumber: syz [ 753.405525][T13566] usb 3-1: config 0 descriptor?? [ 753.418079][T20057] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 753.698781][T20057] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 753.786669][T18705] usb 10-1: Cannot set autoneg [ 753.808622][T18705] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 753.948696][T18705] usb 10-1: USB disconnect, device number 15 [ 754.283324][T20075] tipc: Started in network mode [ 754.316524][T20075] tipc: Node identity 7e7540c7df55, cluster identity 4711 [ 754.348747][T20075] tipc: Enabled bearer , priority 0 [ 754.502324][T20066] loop4: detected capacity change from 0 to 32768 [ 754.618117][T20066] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 754.892848][T20066] XFS (loop4): Ending clean mount [ 754.918776][T20091] xt_hashlimit: size too large, truncated to 1048576 [ 754.959771][T20077] syzkaller0: MTU too low for tipc bearer [ 754.980700][ T31] audit: type=1800 audit(3933265233.672:499): pid=20066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3904" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 754.995092][T20077] tipc: Disabling bearer [ 755.053917][T20066] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 755.147742][T13566] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 755.191860][T13566] asix 3-1:0.188: probe with driver asix failed with error -71 [ 755.250656][T13566] usb 3-1: USB disconnect, device number 10 [ 755.550817][T20098] XFS (loop4): User initiated shutdown received. [ 755.582615][T20098] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:467). Shutting down filesystem. [ 755.638197][T20098] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 755.922411][T18946] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 756.008253][T20115] loop9: detected capacity change from 0 to 512 [ 756.040896][T20115] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 756.054304][T20115] EXT4-fs (loop9): orphan cleanup on readonly fs [ 756.067374][T20115] Quota error (device loop9): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 756.106803][T20115] EXT4-fs warning (device loop9): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 756.143115][T20115] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 756.206889][T20115] EXT4-fs error (device loop9): ext4_validate_block_bitmap:431: comm syz.9.3916: bg 0: block 15: invalid block bitmap [ 756.229608][T20115] loop9: lost filesystem error report for type 5 error -117 [ 756.234565][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 756.248415][ C1] EXT4-fs (loop9): initial error at time 3933265234: ext4_validate_block_bitmap:431 [ 756.257876][ C1] EXT4-fs (loop9): last error at time 3933265234: ext4_validate_block_bitmap:431 [ 756.259498][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3913'. [ 756.277216][T20115] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 756.289541][T20115] loop9: lost filesystem error report for type 5 error -117 [ 756.298985][T20115] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #16: comm syz.9.3916: data will be lost [ 756.346910][T20115] EXT4-fs (loop9): 1 truncate cleaned up [ 756.378922][T20115] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 756.613323][T18170] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.624729][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3913'. [ 756.745962][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3917'. [ 757.430601][T20140] fuse: fd is not a fuse device [ 757.943159][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3924'. [ 758.110763][T20161] gretap0: entered promiscuous mode [ 758.182979][ T31] audit: type=1326 audit(3933265236.872:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.298770][ T31] audit: type=1326 audit(3933265236.872:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.378615][ T31] audit: type=1326 audit(3933265236.872:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.456597][ T31] audit: type=1326 audit(3933265236.872:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.546982][T20165] loop4: detected capacity change from 0 to 8192 [ 758.549463][ T31] audit: type=1326 audit(3933265236.872:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.574411][ T31] audit: type=1326 audit(3933265236.872:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.635497][T20167] loop9: detected capacity change from 0 to 4096 [ 758.698380][T20167] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 758.733930][T20165] vfat filesystem being mounted at /24/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 758.765800][ T31] audit: type=1326 audit(3933265236.872:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.912359][T20167] ntfs3(loop9): ino=19, mi_enum_attr [ 758.936396][T20167] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 758.948397][ T31] audit: type=1326 audit(3933265236.872:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20163 comm="syz.4.3926" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x7ffc0000 [ 758.978418][T20165] bio_check_eod: 56 callbacks suppressed [ 758.978445][T20165] syz.4.3926: attempt to access beyond end of device [ 758.978445][T20165] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 759.016625][T20167] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 759.908242][T20205] loop4: detected capacity change from 0 to 128 [ 759.996989][T20205] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 760.119851][T20205] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 760.415668][T18946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 761.365010][T15551] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.771729][T15551] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.166194][T15551] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.369437][ T4938] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 762.395598][ T4938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 762.412093][ T4938] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 762.421547][ T4938] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 762.432939][ T4938] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 762.464689][ T5283] 8021q: adding VLAN 0 to HW filter on device eth14 [ 762.621380][T15551] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.912673][T20256] ref_ctr_offset mismatch. inode: 0x1c1 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 764.022510][T20289] fuse: fd is not a fuse device [ 764.367375][T15551] bridge_slave_1: left allmulticast mode [ 764.392549][T15551] bridge_slave_1: left promiscuous mode [ 764.420619][T15551] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.480435][T15551] bridge_slave_0: left allmulticast mode [ 764.508951][T15551] bridge_slave_0: left promiscuous mode [ 764.538904][T15551] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.546905][ T5628] Bluetooth: hci1: command tx timeout [ 764.762757][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3969'. [ 764.785598][T20309] l2tp_ppp: sess 2/0: no socket in recv [ 766.633558][ T5628] Bluetooth: hci1: command tx timeout [ 766.919565][T15551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.933067][T15551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.946953][T15551] bond0 (unregistering): Released all slaves [ 766.988553][ T5283] 8021q: adding VLAN 0 to HW filter on device eth15 [ 767.023091][T20334] netlink: 'syz.4.3975': attribute type 5 has an invalid length. [ 767.089144][T20342] overlayfs: failed to clone upperpath [ 767.413971][T15551] tipc: Left network mode [ 767.984054][T20351] sctp: [Deprecated]: syz.4.3981 (pid 20351) Use of int in max_burst socket option deprecated. [ 767.984054][T20351] Use struct sctp_assoc_value instead [ 768.243160][T20373] fuse: fd is not a fuse device [ 768.258061][T20377] loop9: detected capacity change from 0 to 16 [ 768.408131][T20377] erofs (device loop9): mounted with root inode @ nid 36. [ 768.542663][T20382] fuse: fd is not a fuse device [ 768.546082][ T5628] erofs (device loop9): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 768.589451][T20377] erofs (device loop9): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 768.604890][T20377] erofs (device loop9): read error -117 @ 1 of nid 89 [ 768.614790][ T31] kauditd_printk_skb: 68 callbacks suppressed [ 768.614814][ T31] audit: type=1800 audit(3933265247.302:576): pid=20377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3986" name="file2" dev="loop9" ino=89 res=0 errno=0 [ 768.703745][ T5628] Bluetooth: hci1: command tx timeout [ 769.713772][T15551] hsr_slave_0: left promiscuous mode [ 769.720957][T15551] hsr_slave_1: left promiscuous mode [ 769.728604][T15551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.748938][T15551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.232584][ T31] audit: type=1326 audit(3933265248.922:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20405 comm="syz.4.3994" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x0 [ 770.458722][T15551] team0 (unregistering): Port device team_slave_1 removed [ 770.511983][T15551] team0 (unregistering): Port device team_slave_0 removed [ 770.666933][T20412] fuse: fd is not a fuse device [ 770.783557][ T5628] Bluetooth: hci1: command tx timeout [ 770.950152][ T5283] 8021q: adding VLAN 0 to HW filter on device eth16 [ 771.250404][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4000'. [ 771.327667][T13567] IPVS: starting estimator thread 0... [ 771.340231][T20431] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 771.431313][T20435] IPVS: using max 24 ests per chain, 57600 per kthread [ 771.547301][T20250] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.580548][T20250] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.593365][T20250] bridge_slave_0: entered allmulticast mode [ 771.606007][T20250] bridge_slave_0: entered promiscuous mode [ 771.626470][T20430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.679248][T20430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.799227][T20250] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.808448][T20250] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.818095][T20250] bridge_slave_1: entered allmulticast mode [ 771.827106][T20250] bridge_slave_1: entered promiscuous mode [ 771.937290][T20250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.953878][ T5748] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 771.955063][T20250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.103386][T20451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'. [ 772.130111][T20250] team0: Port device team_slave_0 added [ 772.146218][ T5748] usb 5-1: Using ep0 maxpacket: 32 [ 772.155483][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.184586][T20250] team0: Port device team_slave_1 added [ 772.197187][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.258287][ T5748] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 772.299442][ T5748] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.353863][ T5748] usb 5-1: config 0 descriptor?? [ 772.369507][T20250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.397386][T20250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.487220][T20250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.515501][T20250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.532775][T20250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.626114][T20250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.824555][ T5748] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 772.857677][ T5748] ft260 0003:0403:6030.0020: unknown main item tag 0x0 [ 772.879989][T20250] hsr_slave_0: entered promiscuous mode [ 772.929929][T20250] hsr_slave_1: entered promiscuous mode [ 772.955511][T20250] debugfs: 'hsr0' already exists in 'hsr' [ 772.972290][T20474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4016'. [ 772.983007][T20250] Cannot create hsr debugfs directory [ 773.005069][ T5748] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 773.212538][ T5748] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 773.414537][ T5748] ft260 0003:0403:6030.0020: failed to retrieve status: -32, no wakeup [ 773.438433][ T5748] ft260 0003:0403:6030.0020: failed to retrieve status: -32 [ 773.695733][ T9] usb 5-1: USB disconnect, device number 20 [ 774.235676][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 774.676325][T20508] loop4: detected capacity change from 0 to 1024 [ 774.729335][T20508] hfsplus: failed to load extents file [ 775.494098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 775.973058][T20522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 775.989685][T20522] block device autoloading is deprecated and will be removed. [ 776.686103][T20554] xt_hashlimit: size too large, truncated to 1048576 [ 777.300282][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4042'. [ 777.360889][T20250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 777.420633][T20250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 777.451131][T20250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 777.487246][T20250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 777.658547][T20250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 777.695311][T20250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 777.747246][T20250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 777.884764][T20250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 778.270917][T20250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.389908][T20250] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.447638][T15538] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.454897][T15538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.539936][T15538] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.547204][T15538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.877795][ T9] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 780.001339][ T9] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 780.057689][T20650] fuse: fd is not a fuse device [ 780.372350][T20658] overlayfs: failed to clone upperpath [ 780.592740][T20663] fuse: fd is not a fuse device [ 780.841444][T20250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.019546][T20250] veth0_vlan: entered promiscuous mode [ 781.057897][T20250] veth1_vlan: entered promiscuous mode [ 781.183068][T20250] veth0_macvtap: entered promiscuous mode [ 781.238530][T20250] veth1_macvtap: entered promiscuous mode [ 781.351259][T20250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.417677][T20250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.475561][T15562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.504732][ T6289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.530346][ T6289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.619726][ T6289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.040252][T15562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.090709][T15562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.325162][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.346260][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.574779][T20706] netlink: 'syz.4.4080': attribute type 10 has an invalid length. [ 782.610862][T20706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.672546][T20706] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 784.632903][T20738] fuse: fd is not a fuse device [ 785.169391][T20760] loop4: detected capacity change from 0 to 256 [ 785.249302][T20760] msdos filesystem being mounted at /51/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 785.347830][ T31] audit: type=1800 audit(3933265264.032:578): pid=20760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4098" name="file1" dev="loop4" ino=1048801 res=0 errno=0 [ 785.486353][T20771] overlayfs: failed to clone upperpath [ 785.746662][T20777] input: syz1 as /devices/virtual/input/input34 [ 785.809172][T20781] fuse: fd is not a fuse device [ 787.374207][T20821] tipc: Started in network mode [ 787.393541][T20821] tipc: Node identity 4, cluster identity 4711 [ 787.413651][T20821] tipc: Node number set to 4 [ 787.752383][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'. [ 787.784621][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 787.897144][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'. [ 787.905646][T15553] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.939369][T20831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4116'. [ 787.962224][T15553] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.008437][T15553] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.054539][T20835] loop9: detected capacity change from 0 to 1024 [ 788.064998][ T6289] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.092605][T20835] hfsplus: Unknown parameter ']RU2IyL">;!' [ 788.516513][ T5283] 8021q: adding VLAN 0 to HW filter on device eth17 [ 788.838182][ T31] audit: type=1326 audit(3933265267.512:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20847 comm="syz.8.4121" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa158f9e019 code=0x0 [ 789.339885][T20866] netlink: 168 bytes leftover after parsing attributes in process `syz.9.4130'. [ 789.583829][ T4938] Bluetooth: hci5: command 0x0406 tx timeout [ 790.460803][T20896] loop9: detected capacity change from 0 to 512 [ 790.470849][T20896] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 791.003343][T20910] netlink: 'syz.9.4144': attribute type 1 has an invalid length. [ 791.148508][T20910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.256355][T20916] bond1: (slave veth3): Enslaving as an active interface with a down link [ 792.389019][ T31] audit: type=1326 audit(3933265271.082:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20945 comm="syz.4.4153" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7cbb9e019 code=0x0 [ 792.846395][T20960] netlink: 'syz.9.4156': attribute type 5 has an invalid length. [ 793.517347][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4162'. [ 793.545886][T20975] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 793.583225][T20975] overlayfs: failed to set xattr on upper [ 793.593797][T20975] overlayfs: ...falling back to redirect_dir=nofollow. [ 793.600848][T20975] overlayfs: ...falling back to index=off. [ 793.606781][T20975] overlayfs: ...falling back to uuid=null. [ 793.612749][T20975] overlayfs: ...falling back to xino=off. [ 793.785948][T20979] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 793.934566][T20993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4165'. [ 794.120494][T20982] bond2 (unregistering): (slave macvlan1): Releasing backup interface [ 794.133243][T20982] bond2 (unregistering): Released all slaves [ 794.345916][ T5283] 8021q: adding VLAN 0 to HW filter on device eth18 [ 794.703710][ T5628] Bluetooth: hci4: command 0x0406 tx timeout [ 795.633642][T13566] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 795.809236][T13566] usb 5-1: config 0 has no interfaces? [ 795.840917][T13566] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.885280][T13566] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.910947][T13566] usb 5-1: Product: syz [ 795.924783][T13566] usb 5-1: Manufacturer: syz [ 795.951325][T13566] usb 5-1: config 0 descriptor?? [ 796.229306][T13566] usb 5-1: USB disconnect, device number 21 [ 796.551742][T21058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4180'. [ 796.640151][ T5283] 8021q: adding VLAN 0 to HW filter on device eth19 [ 797.423376][T21085] loop4: detected capacity change from 0 to 128 [ 797.502220][T21085] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 797.600523][T21085] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 797.970661][T21097] loop3: detected capacity change from 0 to 64 [ 798.053048][T21097] [ 798.055422][T21097] ====================================================== [ 798.062440][T21097] WARNING: possible circular locking dependency detected [ 798.069460][T21097] syzkaller #0 Tainted: G L [ 798.075441][T21097] ------------------------------------------------------ [ 798.082460][T21097] syz.3.4189/21097 is trying to acquire lock: [ 798.088529][T21097] ffff88804b15c0a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330 [ 798.098116][T21097] [ 798.098116][T21097] but task is already holding lock: [ 798.105477][T21097] ffff88807ddd6820 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 798.116279][T21097] [ 798.116279][T21097] which lock already depends on the new lock. [ 798.116279][T21097] [ 798.126683][T21097] [ 798.126683][T21097] the existing dependency chain (in reverse order) is: [ 798.135712][T21097] [ 798.135712][T21097] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}: [ 798.144973][T21097] lock_acquire+0x1b9/0x370 [ 798.150029][T21097] __mutex_lock+0x1a4/0x1bd0 [ 798.155177][T21097] hfs_extend_file+0xa6/0xcf0 [ 798.160410][T21097] hfs_bmap_reserve+0x2ab/0x3a0 [ 798.165798][T21097] __hfs_ext_write_extent+0x3c4/0x510 [ 798.171715][T21097] hfs_ext_read_extent+0x805/0x9d0 [ 798.177398][T21097] hfs_extend_file+0x4ff/0xcf0 [ 798.182712][T21097] hfs_get_block+0x17f/0x830 [ 798.187843][T21097] __block_write_begin_int+0x57a/0x19c0 [ 798.193932][T21097] block_write_begin+0x9d/0x1d0 [ 798.199324][T21097] cont_write_begin+0x573/0xa10 [ 798.204715][T21097] hfs_write_begin+0x64/0x120 [ 798.209937][T21097] cont_write_begin+0x2b9/0xa10 [ 798.215326][T21097] hfs_write_begin+0x64/0x120 [ 798.220545][T21097] generic_perform_write+0x292/0xa40 [ 798.226363][T21097] __generic_file_write_iter+0x1f7/0x240 [ 798.232543][T21097] generic_file_write_iter+0xe1/0x390 [ 798.238460][T21097] vfs_write+0x6ac/0x1050 [ 798.243328][T21097] __x64_sys_pwrite64+0x1eb/0x250 [ 798.248894][T21097] do_syscall_64+0x115/0x870 [ 798.254028][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.260453][T21097] [ 798.260453][T21097] -> #0 (&tree->tree_lock#2/1){+.+.}-{4:4}: [ 798.268584][T21097] check_prev_add+0xeb/0xe60 [ 798.273708][T21097] __lock_acquire+0x136c/0x1a40 [ 798.279089][T21097] lock_acquire+0x1b9/0x370 [ 798.284124][T21097] __mutex_lock+0x1a4/0x1bd0 [ 798.289260][T21097] hfs_find_init+0x273/0x330 [ 798.294377][T21097] hfs_ext_read_extent+0x19d/0x9d0 [ 798.300034][T21097] hfs_extend_file+0x4ff/0xcf0 [ 798.305343][T21097] hfs_bmap_reserve+0x2ab/0x3a0 [ 798.310731][T21097] hfs_cat_create+0x348/0x980 [ 798.315943][T21097] hfs_create+0x7e/0x110 [ 798.320724][T21097] path_openat+0x341f/0x4280 [ 798.325859][T21097] do_file_open+0x20e/0x430 [ 798.330903][T21097] do_sys_openat2+0x10f/0x1e0 [ 798.336105][T21097] __x64_sys_openat+0x12d/0x210 [ 798.341485][T21097] do_syscall_64+0x115/0x870 [ 798.346619][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.353043][T21097] [ 798.353043][T21097] other info that might help us debug this: [ 798.353043][T21097] [ 798.363261][T21097] Possible unsafe locking scenario: [ 798.363261][T21097] [ 798.370722][T21097] CPU0 CPU1 [ 798.376079][T21097] ---- ---- [ 798.381432][T21097] lock(&HFS_I(tree->inode)->extents_lock); [ 798.387423][T21097] lock(&tree->tree_lock#2/1); [ 798.394855][T21097] lock(&HFS_I(tree->inode)->extents_lock); [ 798.403383][T21097] lock(&tree->tree_lock#2/1); [ 798.408275][T21097] [ 798.408275][T21097] *** DEADLOCK *** [ 798.408275][T21097] [ 798.416408][T21097] 4 locks held by syz.3.4189/21097: [ 798.421601][T21097] #0: ffff888054aaa450 (sb_writers#33){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 798.431001][T21097] #1: ffff88807ddd1f00 (&type->i_mutex_dir_key#20){+.+.}-{4:4}, at: path_openat+0x29f2/0x4280 [ 798.441435][T21097] #2: ffff8880264f00a8 (&tree->tree_lock#2){+.+.}-{4:4}, at: hfs_find_init+0x2b0/0x330 [ 798.451246][T21097] #3: ffff88807ddd6820 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0 [ 798.462449][T21097] [ 798.462449][T21097] stack backtrace: [ 798.468337][T21097] CPU: 1 UID: 0 PID: 21097 Comm: syz.3.4189 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.468390][T21097] Tainted: [L]=SOFTLOCKUP [ 798.468403][T21097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 798.468426][T21097] Call Trace: [ 798.468438][T21097] [ 798.468453][T21097] dump_stack_lvl+0x100/0x190 [ 798.468496][T21097] print_circular_bug.cold+0x178/0x1c7 [ 798.468559][T21097] check_noncircular+0x146/0x160 [ 798.468605][T21097] check_prev_add+0xeb/0xe60 [ 798.468647][T21097] __lock_acquire+0x136c/0x1a40 [ 798.468692][T21097] ? do_sys_openat2+0x10f/0x1e0 [ 798.468734][T21097] lock_acquire+0x1b9/0x370 [ 798.468774][T21097] ? hfs_find_init+0x273/0x330 [ 798.468813][T21097] ? __pfx___might_resched+0x10/0x10 [ 798.468858][T21097] __mutex_lock+0x1a4/0x1bd0 [ 798.468909][T21097] ? hfs_find_init+0x273/0x330 [ 798.468945][T21097] ? hfs_find_init+0x273/0x330 [ 798.468985][T21097] ? __pfx___mutex_lock+0x10/0x10 [ 798.469038][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469084][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469127][T21097] ? trace_kmalloc+0xeb/0x110 [ 798.469166][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469210][T21097] ? __kmalloc_noprof+0x343/0x820 [ 798.469265][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469309][T21097] ? __mutex_lock+0x26d/0x1bd0 [ 798.469359][T21097] ? hfs_find_init+0xb3/0x330 [ 798.469398][T21097] ? hfs_find_init+0x273/0x330 [ 798.469433][T21097] hfs_find_init+0x273/0x330 [ 798.469470][T21097] hfs_ext_read_extent+0x19d/0x9d0 [ 798.469521][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469565][T21097] ? rcu_is_watching+0x12/0xc0 [ 798.469618][T21097] ? __pfx_hfs_ext_read_extent+0x10/0x10 [ 798.469682][T21097] hfs_extend_file+0x4ff/0xcf0 [ 798.469738][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469784][T21097] ? __pfx_hfs_extend_file+0x10/0x10 [ 798.469837][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.469881][T21097] ? __kmalloc_noprof+0x343/0x820 [ 798.469940][T21097] hfs_bmap_reserve+0x2ab/0x3a0 [ 798.469987][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.470034][T21097] hfs_cat_create+0x348/0x980 [ 798.470084][T21097] ? __pfx_hfs_cat_create+0x10/0x10 [ 798.470134][T21097] ? find_held_lock+0x2b/0x80 [ 798.470189][T21097] ? hfs_mark_mdb_dirty+0x18e/0x210 [ 798.470225][T21097] ? hfs_mark_mdb_dirty+0x18e/0x210 [ 798.470269][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.470313][T21097] ? hfs_new_inode+0x46a/0xe20 [ 798.470370][T21097] hfs_create+0x7e/0x110 [ 798.470415][T21097] ? __pfx_hfs_create+0x10/0x10 [ 798.470462][T21097] path_openat+0x341f/0x4280 [ 798.470526][T21097] ? __pfx_path_openat+0x10/0x10 [ 798.470587][T21097] do_file_open+0x20e/0x430 [ 798.470642][T21097] ? __pfx_do_file_open+0x10/0x10 [ 798.470716][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.470761][T21097] ? alloc_fd+0x471/0x7a0 [ 798.470816][T21097] ? do_getname+0x191/0x390 [ 798.470855][T21097] do_sys_openat2+0x10f/0x1e0 [ 798.470890][T21097] ? __pfx_do_sys_openat2+0x10/0x10 [ 798.470926][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.470970][T21097] ? find_held_lock+0x2b/0x80 [ 798.471029][T21097] __x64_sys_openat+0x12d/0x210 [ 798.471065][T21097] ? __pfx___x64_sys_openat+0x10/0x10 [ 798.471107][T21097] ? srso_alias_return_thunk+0x5/0xfbef5 [ 798.471156][T21097] do_syscall_64+0x115/0x870 [ 798.471209][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.471247][T21097] RIP: 0033:0x7f8ff179e019 [ 798.471275][T21097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.471311][T21097] RSP: 002b:00007f8ff2613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 798.471347][T21097] RAX: ffffffffffffffda RBX: 00007f8ff1a25fa0 RCX: 00007f8ff179e019 [ 798.471371][T21097] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 798.471396][T21097] RBP: 00007f8ff183500c R08: 0000000000000000 R09: 0000000000000000 [ 798.471419][T21097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.471442][T21097] R13: 00007f8ff1a26038 R14: 00007f8ff1a25fa0 R15: 00007ffcf8423ed8 [ 798.471480][T21097] [ 799.007679][T18946] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 799.169185][ T5283] 8021q: adding VLAN 0 to HW filter on device eth20 [ 807.986490][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.992845][ T1310] ieee802154 phy1 wpan1: encryption failed: -22