last executing test programs: 5m46.73341081s ago: executing program 0 (id=286): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xfeff, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 5m45.451599339s ago: executing program 0 (id=288): bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m42.233026068s ago: executing program 0 (id=289): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000000000000bc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000000000000bc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 5m37.490791741s ago: executing program 0 (id=292): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file1\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c5fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x25c, &(0x7f0000002500)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) (async) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendfile(r7, r5, 0x0, 0x100000002) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r9, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x44084}, 0x140) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYRES64=r1], 0x78}, 0x1, 0x0, 0x0, 0x4008890}, 0x10) 5m33.385774635s ago: executing program 0 (id=302): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000200000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"/287], 0x254}}, 0x0) 5m28.540971443s ago: executing program 0 (id=320): unshare(0x22020600) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x10010, 0xffffffffffffffff, 0x0) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) unshare(0x20030000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000034000000090000000000000024000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}], 0x2, 0x40) syz_clone3(0x0, 0x0) 5m28.250217972s ago: executing program 32 (id=320): unshare(0x22020600) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x10010, 0xffffffffffffffff, 0x0) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) unshare(0x20030000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000034000000090000000000000024000000000000002900000032000000fe880000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}}], 0x2, 0x40) syz_clone3(0x0, 0x0) 11.24490623s ago: executing program 1 (id=1120): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000007b080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180400000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.189738238s ago: executing program 1 (id=1121): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$eJzs3QWcbXXBeP25cOkOlVREFExKykC6REQaBOmSFJBSBMQCRDFQEOnu7u7u7u7uhvdz4RLi4qrP+/zFx7XWh5lTe878zu+792bO7LnnLDXPonMMDIw98FZvn77bziuNc9AWAwudsd/G99y+8stfOG3o1SO+dTLObENPZx96OsfAwMCgofcz6K3rBs967HHDDQweGPLfu40+yqjDjT4wMOrQi0PvZ2Cmt05G2//t5d54XzzQyYZ8u+3e+nizMYbcyZsDXWH2CQYGBkZ+z9cPGdc0f/dApS01+7zzvGv1jttwQ28e9O5tb54OfutjtL0HBkbbc+CD148hy47wnq/9dzbke4596yYrPfghfO//cy01+7zzv89/yLY4/NDrZhqyjb9/GzT2/vV8tQtvXWHoFA4aOnGD37O9fBjr/f+opWafZ8GBD96OBw69Z8bT3nhzvzl4roGBwXMPDAyeZ2Bg8Lwftkf97/ShrnxVVVX1oTT7HNMPec4+3Pt+Hhj57Z9r6efCC5585uaBgcELvfU8cfAKbz8XrKqqqqqqqqr/zGafY/o54fn/2MN6/j/1CfNM3fP/qqqqqqqqqv87zT/7HNMPea7/vuf/Ewzr+f8b96+361t/+z/bTG991esf7oOoqqqqqqqqqmE2z/z4/H+yYT3/P+/Eu5/s+X9VVVVVVVXV/50WmX6eOQfe8zp7Q6+e6u3b6fn/0Y9MsvKHNd6qqqqqqqqq+td7/bGTT3/3Nd8/PvC+13t/s6G/Fxh05JlXXvmhDfQ/o0F///uQrT7sMf3/bYjzyAdPNjCw7uIf9lDqQ+j/zGvV1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/P+d1/+fcPWxHxi66JQn7vjEOu9+5Zvv/T94ofkf2/pDGvqH0X/r8f+BNQcNDAz1HXvNgYGBhWZfZLGpBgYG1nlixxOnGHjntpmH3PbVcYd/8w3i3/5nInOPw3e81eRvnQ5ZUQbGf+c+jnzz/ud/Y6/hB71vEO9pnOP322+NpV748vtPp/zgxzHc22eWPGuHPd7+tyzDvW+hkT/gi9++/7cfy/udh459qiFjn3qjddafesPNNv/imuusuPqqq6+67vTTzTDtNDNOO8s0M0y92pprrzrNW58/YM4me/PznP/MnI3+/jl7bPb3ztn7H9sHzdlkw56zN+9x+AtOGOftORv8L87ZnMOes8nWHPqNxplthIEV3pyaQQMD48w1wsCmQy5MO9LAwDhzD112giHLfm3c4QYGdnz3gQ45N9I76+CgrYYss9Q8i87x1m5qYODd03f7gPezH3HoyGcbejr70NM53vo2Yw+8uyoOnvXY44YbMhd/Mx2jjzLqcKMPDIw69OLQ+xmY5a2TUU95e7kPeJ/19w30zZdZ2e6tjzcbY2BgYLQhZ+ZacdAzQ6b+3/A+7f+j////ndfMg95ZHwcN/Ri6zFtes887/7vf681pGDJ3ww+9bqYhJv/Lb23/N/3deCcbeWCyYYx3GK+L82a0fq18/A2n/m+9Lg6Nd4JhjHcYr+P7geNd+sFlbnjrrv7Xxvu+fd2Cb36e7Z/Z1w0Me183PN3BqpdN+v593Tc/eIh/s7t8e45Get9CH7SvW3imy7cacv+zDXtft+CQsY/wN/u64QYGxpnz7X3dkB3fPCMM7DjkwnRDLsw7wsCBQy5M/+aFUQbOHHLhSyuvt/YqQ66Y7+/Xg6kG/c0faMJ2Ns/7trNB73nsg973952D3zodbe+338PpA/abg4Y+rH+4r6D1duxhjHcY7z+F8zzkurVOu/jz/1vvP0XjHXnY4/2g98v+wPFu8/KWt/8vj/ed7WyE90zXfP/MdjbZ325nQx7i8O/ZMv7Zn8NWgeXfOj/BO/e2y1hHvvMzxQjvu99/9DPFfMPezsZe831ft+2eA4OGNTfz/jNzM8nf7YO2fu/c/LM/b031qbduH34Yc3PlwHJbvj03I/6LczPvvzo3sw0M/7dzM3hg7oGBgSmG7h/m+WfmZoJhz80/u96MCsu/dX7Vd66aa5JLP/n23Lx/Lv7R3Mzzr87NZO+sN1O8edvkww2MOOLApitutNEG0771+e2L0731edjb4Fz/zFyO/b8zlxMN/qC5fHdV3Wm+5bb9B9vg3+3T377/uf7VuRx4Zy4H1nz/xlL/qfX7P3f5u8vfXf7u8neXv7v8xX3A8f93Xv9/4V3OnHHoLzdGmPiOK8b7sMf7Ifdfffx/qO/fHP8f74o7Jh5u4J3bhnl89q1l/iOPz8701slo+7+93PuPD/JAP/j47MuzbP/0v+n47P+ot7fVf+L3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4Pj/NG//HcAFlx697NADoSO8cdMlC3zY4/2Q+68+/j/U92+O/y9wyU1vDDfwzm3DPP7/1jKO4/8nvvLyy//Jx//f3lY7/l//oPzd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9wHHP+f7e2/A5jlvAuWf/vvAS66/ZFJPuzxfsj9tx7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbevx/4H1vb7lw6wUGx///b/cB/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8zi//38MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8zi/4P8MYv/BvljFv8N88cs/hvlj1n8f5g/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/j/KH7P4/zh/zOK/Rf6Yxf8n+WMW/y3zxyz+W+WPWfy3zh+z+P80f8ziv03+mMX/Z/ljFv+f549Z/H+RP2bx/2X+mMX/V8P2H/z/elj/qVn8t237xyz+2+WPWfy3zx+z+P86f8ziv0P+mMX/N/ljFv/f5o9Z/HfMH7P4/y5/zOL/+/wxi/8f8scs/n/MH7P475Q/ZvH/U/6Yxf/P+WMW/53zxyz+u+SPWfz/kj9m8d81f8zi/9f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T5T6b/0Pbrf4nyT1/0dZ/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T9X7f/Bj9zif57a/4Oz+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j9oIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxf/Ns/n+fxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+SPWfw3yB+z+G+YP2bx3yh/zOL/w/wxi//G+WMW/03yxyz+m+aPWfw3yx+z+G+eP2bx/1H+mMX/x/ljFv8t8scs/j/JH7P4b5k/ZvHfKn/M4r91/pjF/6f5Yxb/bfLHLP4/yx+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+G+bP2bx3y5/zOK/ff6Yxf/X+WMW/x3yxyz+v8kfs/j/Nn/M4r9j/pjF/3f5Yxb/3+ePWfz/kD9m8f9j/pjFf6f8MYv/n/LHLP5/zh+z+O+cP2bx3yV/zOL/l/wxi/+u+WMW/7/mj1n8d8sfs/jvnj9m8d8jf8ziv2f+mMV/r/wxi//e+WMW/33yxyz+++aPWfz3yx+z+O+fP2bxPyB/zOJ/YP6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP/xA/pjFf1D+mMV/uPwxi//w+WMW/8H5Yxb/EfLHLP4j5o9Z/EfKH7P4j5w/ZvEfJX/M4j9q/pjFf7T8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/4/kj1n8P5o/ZvH/WP6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8f9U/pjFf4r8MYv/p/PHLP6fyR+z+E+ZP2bxnyp/zOL/2fwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+X8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMX/y/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8zi/5X8MYv/V/PHLP5fyx+z+H89f8ziP2v+mMX/G/ljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+H8zf8ziv2D+mMX/W3r/kfFai/9Cen/O4v/t/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fzd/zOK/bP6YxX+5/DGL//fyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvH/fv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvH/Qf6YxX+D/DGL/4b5Yxb/jfLHLP4/zB+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/+b5Yxb/H+WPWfx/nD9m8d8if8zi/5P8MYv/lvljFv+t8scs/lvnj1n8f5o/ZvHfJn/M4v+z/DGL/8/zxyz+v8gfs/j/Mn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/H+dP2bx3yF/zOL/m/wxi/9v88cs/jvmj1n8f5c/ZvH/ff6Yxf8P+WMW/z/mj1n8d8ofs/j/KX/M4v/n/DGL/875Yxb/XfLHLP5/yR+z+O+aP2bx/2v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D8s9h9hGLdZ/B8R+w8ri/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHsgfs/gPyh+z+A+XP2bxHz5/zOI/OH/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOL/kfwxi/9H88cs/h/LH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+n8ofs/hPkT9m8f90/pjF/zP5Yxb/KfPHLP5T5Y9Z/D+bP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+H85f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfxnzR+z+H8jf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/b+aPWfwXzB+z+H8rf8ziv1D+mMX/2/ljFv+F88cs/t/JH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/kvlj1n8l84fs/gvkz9m8f9u/pjFf9n8MYv/cvljFv/v5Y9Z/JfPH7P4r5A/ZvFfMX/M4r/SB/lv+W8a139oFv+V2/4xi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL//fwxi/9a+WMW/7Xzf7f3TIzFf538MYv/uvljFv/18scs/uvnj1n8f5A/ZvHfIH/M4r9h/pjFf6P8MYv/D/PHLP4b549Z/DfJH7P4b5o/ZvHfLH/M4r95/pjF/0f5Yxb/H+ePWfy3yB+z+P8kf8ziv2X+mMV/q/wxi//W+WMW/5/mj1n8t8kfs/j/LH/M4v/z/DGL/y/yxyz+v8wfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv9f549Z/HfIH7P4/yZ/zOL/2/wxi/+O+WMW/9/lj1n8f58/ZvH/Q/6Yxf+P+WMW/53yxyz+f8ofs/j/OX/M4r9z/pjFf5f8MYv/X/LHLP675o9Z/P+aP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj/m8B88cFj+mMN/YPDh+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P2z0H7TVP15E4v+I0f+fyOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8sf9G/yWGnn2v//P5Y/+N/rT9v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9hIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yh/zOL/4/wxi/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD/2pv/r//3+F+aPWbb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/iAP5Yxb/QfljFv/h8scs/sPnj1n8B+ePWfxHyB+z+I+YP2bxHyl/zOI/cv6YxX+U/DGL/6j5Yxb/0fLH/kv9Bw0MbPU3/qPnj/2X+r/Ze/3HyB+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/D+SP2bx/2j+mMX/Y/ljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMX/4/ljFv9P5I9Z/CfLH7P4fzJ/zOI/ef6Yxf9T+WMW/ynyxyz+n84fs/h/Jn/M4j9l/pjFf6r8MYv/Z/PHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/L+ePWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/6z5Yxb/b+SPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4v/N/DGL/4L5Yxb/b+WPWfwXyh+z+H87f8ziv3D+mMX/O/ljFv9F8scs/ovmj1n8F8sfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+380fs/gvmz9m8V8uf8zi/738MYv/8vljFv8V8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMV/tfwxi//q+WMW/zXyxyz+a+aPWfy/nz9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW//Xyxyz+6+ePWfx/kD9m8d8gf8ziv2H+mMV/o/wxi/8P88cs/hvnj1n8N8kfs/hvmj9m8d8sf8ziv3n+mMX/R/ljFv8f549Z/LfIH7P4/yR/zOK/Zf6YxX+r/DGL/9b5Yxb/n2r9RxrmrRb/bbT+w87i/7P8MYv/z/PH/qv9x37n2hF/kT/2X+3/7rUj/jJ/zOL/q/wxi/+2+WMW/+3yxyz+2+ePWfx/nT9m8d8hf8zi/xuP/+b/ysIW/996/P+lLP475o9Z/H+XP2bx/33+mMX/D/ljFv8/5o9Z/HfKH7P4/yl/zOL/5/wxi//O+WMW/13yxyz+f8kfs/jvmj9m8f9r/pjFf7f8MYv/7vljFv898scs/nvmj1n898ofs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//+5D/Kv3Fc/6FZ/A9o+8cs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P/x+/1H+zeP6D83i/0jbP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/5EG8scs/oPyxyz+w+WPWfyHzx+z+A/OH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+H8kf8zi/9H8MYv/x/LHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/x/PHLP6fyB+z+E+WP2bx/2T+mMV/8vwxi/+n8scs/lPkj1n8P50/ZvH/TP6YxX/K/DGL/1T5Yxb/z+aPWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+X84fs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/1nzxyz+38gfs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6Yxf+b+WMW/wXzxyz+38ofs/gvlD9m8f92/pjFf+H8MYv/d/LHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/svkj1n8v5s/ZvFfNn/M4r9c/pjF/3v5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/mvkj1n818wfs/h/P3/M4r9W/pjFf+38MYv/OvljFv9188cs/uvlj1n8188fs/j/IH/M4r9B/pjFf8P8MYv/RvljFv8f5o9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjFf/P8MYv/j/LH3us/ysB/r/+P88cs2/8W+WMW/5/kj1n8t8wfs/hvlT9m8d86f8zi/9P8MYv/NvljFv+f5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/LfNH7P4b5c/ZvHfPn/M4v/r/DGL/w75Yxb/3+SPWfx/mz9m8d8xf8zi/7v8MYv/7/PHLP5/yB+z+P8xf8ziv1P+mMX/T/ljFv8/549Z/HfOH7P475I/ZvH/S/6YxX/X/DGL/1/zxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RPybxH3kgf8ziPyh/zOI/XP6YxX/4/DGL/+D8MYv/CPljFv8R88cs/iPlj1n8R84fs/iPkj9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/0fyxyz+H80fs/h/LH/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+H8qf8ziP0X+mMX/0/ljFv/P5I9Z/KfMH7P4T5U/ZvH/bP6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/5fwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bxnzV/zOL/jfwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/L+ZP2bxXzB/zOL/rfwxi/9C+WMW/2/nj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/gvlT9m8V86f8ziv0z+mMX/u/ljFv9l88cs/svlj1n8v5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi//388cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8P8scs/hvkj1n8N8wfs/hvlD9m8f9h/pjFf+P8MYv/JvljFv9N88cs/pvlj1n8N88fs/j/KH/M4v/j/DGL/xb5Yxb/n+SPWfy3zB+z+G+VP2bx3zp/zOL/0/wxi/82+WMW/5/lj1n8f54/ZvH/Rf6Yxf+X+WMW/1/lj1n8t80fs/hvlz9m8d8+f8zi/+v8MYv/DvljFv/f5I9Z/H+bP2bx3zF/zOL/u/wxi//v88cs/n/IH7P4/zF/zOK/U/6Yxf9P+WMW/z/nj1n8d84fs/jvkj9m8f9L/pjFf9f8MYv/X/PHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfZSB/zOI/KH/M4j9c/pjFf/j8MYv/4Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/R/LHLP4fzR+z+H8sf8ziP0H+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H88f8zi/4n8MYv/ZPljFv9P5o9Z/CfPH7P4fyp/zOI/Rf6Yxf/T+WMW/8/kj1n8p8wfs/hPlT9m8f9s/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v/l/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/Sv6Yxf+r+WMW/6/lj1n8v54/ZvGfNX/M4v+N/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8v5k/ZvFfMH/M4v+t/DGL/0L5Yxb/b+ePWfwXzh+z+H8nf8ziv0j+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf+7+WMW/2Xzxyz+y+WPWfy/lz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL//fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/w/yxyz+G+SPWfw3zB+z+G+UP2bx/2H+mMV/4/wxi/8m+WMW/03zxyz+m+WPWfw3zx+z+P8of8zi/+P8MYv/FvljFv+f5I9Z/LfMH7P4b5U/ZvHfOn/M4v/T/DGL/zb5Yxb/n+WPWfx/nj9m8f9F/pjF/5f5Yxb/X+WPWfy3zR+z+G+XP2bx3z5/zOL/6/wxi/8O+WMW/9/kj1n8f5s/ZvHfMX/M4v+7/DGL/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R91IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j9F/pjF/9P5Yxb/z+SPWfynzB+z+E+VP2bx/2z+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMX/S/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/+X8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8Z81f8zi/438MYv/bPljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfy/mT9m8V8wf8zi/638MYv/QvljFv9v549Z/BfOH7P4fyd/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/7v5Yxb/ZfPHLP7L5Y9Z/L+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/9/PHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/D/LHLP4b5I9Z/DfMH7P4b5Q/ZvH/Yf6YxX/j/DGL/yb5Yxb/TfPH3vUf/423+rBH9P+zD/DfLH/Msv1vnj9m8f9R/pjF/8f5Yxb/LXT+o/xTS1n8f6Lz/+ey+G+ZP2bx3yp/zOK/df6Yxf+n+WMW/23yxyz+P8sfs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hvmz9m8d8uf8ziv33+mMX/1/ljFv8d8scs/r/JH7P4/zZ/zOK/Y/6Yxf93+WMW/9/nj1n8/5A/ZvH/Y/6YxX+n/DGL/5/yxyz+f84fs/jvnD9m8d8lf8zi/5f8MYv/rvljFv+/5o9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I8D/0EDA1v9O4f2n5jF//i2f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9Vw/If7t8wrv/QLP5Xt/1jFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4j/aQP6YxX9Q/pjFf7j8MYv/8PljFv/B+WMW/xHyxyz+I+aPWfxHyh+z+I+cP2bxHyV/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv+P5I9Z/D+aP2bx/1j+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/3j+mMX/E/ljFv/J8scs/p/MH7P4T54/ZvH/VP6YxX+K/DGL/6fzxyz+n8kfs/hPmT9m8Z8qf8zi/9n8MYv/5/LHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjF/8v5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4j9r/pjF/xv5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/h/M3/M4r9g/pjF/1v5Yxb/hfLHLP7fzh+z+C+cP2bx/07+mMV/kfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bxXyp/zOK/dP6YxX+Z/DGL/3fzxyz+y+aPWfyXyx+z+H8vf8ziv3z+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/7+ePWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/H+T/N70x9NTiv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPH3vUfNDCw1X+v/+/yxyzb/+/zxyz+f8gfs/j/MX/M4r9T/pjF/0/5Yxb/P+ePWfx3zh+z+O+SP2bx/0v+mMV/1/wxi/9f88cs/rvlj1n8d88fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+++WPWfz3zx+z+B+QP2bxPzB/zOJ/UP6Yxf/g/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R99IH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/m/05bvue8xX/y/DGL/6fyxyz+U+SPWfw/nT9m8f9M/pjFf8r8MYv/VPljFv/P5o9Z/D+XP2bx/3z+mMX/C/ljFv8v5o9Z/L+UP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP5fzh+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/WfPHLP7fyB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjF/5v5Yxb/BfPHLP7fyh+z+C+UP2bx/3b+mMV/4fwxi/938scs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+y+SPWfy/mz9m8V82f8ziv1z+mMX/e/ljFv/l88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+H8/f8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+P8gf8ziv0H+mMV/w/wxi/9G+WMW/x/mj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/+P8scs/j/OH7P4b5E/ZvH/Sf6YxX/L/DGL/1b5Yxb/rfPHLP4/zR+z+G+TP2bx/1n+mMX/5/ljFv9f5I9Z/H+ZP2bx/1X+mMV/2/wxi/92+WMW/+3zxyz+v84fs/jvkD9m8f9N/pjF/7f5Yxb/HfPHLP6/yx+z+P8+f8zi/4f8MYv/H/PHLP475Y9Z/P+UP2bx/3P+mMV/5/wxi/8u+WMW/7/kj1n8d80fs/j/NX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X6L23/4Db7H4X6r2/+As/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT8m8R9jIH/M4j8of8ziP1z+mMV/+Pwxi//g/DGL/wj5Yxb/EfPHLP4j5Y9Z/EfOH7P4j5I/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/9H8scs/h/NH7P4fyx/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/h/Kn/M4j+F13+rYd1o8f+013+YWfw/kz9m8Z8yf8ziP1X+mMX/s/ljFv/P5Y9Z/D+fP2bx/0L+mMX/i/ljFv8v5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/l/PHLP4z5I9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9b8MYv/N/LHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8f9m/pjFf8H8MYv/t/LHLP4L5Y9Z/L+dP2bxXzh/zOL/nfwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/7+aPWfyXzR+z+C+XP2bx/17+mMV/+fwxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP7fzx+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4/yB+z+G+QP2bx3zB/zOK/Uf6Yxf+H+WMW/43zxyz+m+SPWfw3zR+z+G+WP2bx3zx/zOL/o/wxi/+P88cs/lvkj1n8f5I/ZvHfMn/M4r9V/pjFf+v8MYv/T/PHLP7b5I9Z/H+WP2bx/3n+mMX/F/ljFv9f5o9Z/H+VP2bx3zZ/zOK/Xf6YxX/7/DGL/6/zxyz+O+SPWfx/kz9m8f9t/pjFf8f8MYv/7/LHLP6/zx+z+P8hf8zi/8f8MYv/TvljFv8/5Y9Z/P+cP2bx3zl/zOK/S/6Yxf8v+WMW/13zxyz+f80fs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMR/zIH8MYv/oPwxi/9w+WMW/+Hzxyz+g/PHLP4j5I9Z/EfMH7P4j5Q/ZvEfOX/M4j9K/pjFf9T8MYv/aPljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+H8kfs/h/NH/M4v+x/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8zi/6n8MYv/FPljFv9P549Z/D+TP2bxnzJ/zOI/Vf6Yxf+z+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+X88cs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/1vwxi/838scs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bx/2b+mMV/wfwxi/+38scs/gvlj1n8v50/ZvFfOH/M4v+d/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv/v5o9Z/JfNH7P4L5c/ZvH/Xv6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/t/PH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/evljFv/188cs/j/IH7P4b5A/ZvHfMH/M4r9R/pjF/4f5Yxb/jfPHLP6b5I9Z/DfNH7P4b5Y/ZvHfPH/M4v+j/DGL/4/zxyz+W+SPWfx/kj9m8d8yf8ziv1X+mMV/6/wxi/9P88cs/tvkj1n8f5Y/ZvH/ef6Yxf8X+WMW/1/mj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/r/PHLP475I9Z/H+TP2bx/23+mMV/x/wxi//v8scs/r/PH7P4/yF/zOL/x/wxi/9O+WMW/z/lj1n8/5w/ZvHfOX/M4r9L/pjF/y/5Yxb/XfPHLP5/zR+z+O+WP2bx3z1/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH+sgfwxi/+g/DGL/3D5Yxb/4fPHLP6D88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4fyR+z+H80f8zi/7H8MYv/BPljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi//+xc+dRdtb1HcdvEoad6q9He7qIRpQCLZIFUGktBghkQcYgsiQkkSyTxSQkZoEshkRtm6YUxFJB1DaaNhXEoq0SKxqIgsWyCZTahZSKFBDbiGtTVJKem8zEZPplTudJn4fK9/X6IzP3Dt8r5H0+3MvJOb5c/1CW/q/QP5Sl/2D9Q1n6v1L/UJb+R+gfytL/VfqHsvR/tf6hLP2P1D+Upf+v6h/K0v8o/UNZ+h+tfyhL/2P0D2Xp/2v6h7L0/3X9Q1n6H6t/KEv/1+gfytL/OP1DWfoP0T+Upf9Q/UNZ+g/TP5Sl/3D9Q1n6H69/KEv/E/QPZel/ov6hLP1fq38oS//X6R/K0v/1+oey9D9J/1CW/r+hfyhL/9/UP5Sl/xv0D2Xp/1v6h7L0P1n/UJb+b9Q/lKX/CP1DWfqfon8oS/9T9Q9l6X+a/qEs/UfqH8rS/3T9Q1n6n6F/KEv/UfqHsvQfrX8oS/8x+oey9B+rfyhL/zP1D2Xp/yb9Q1n6n6V/KEv/Tv1DWfq/Wf9Qlv7j9A9l6X+2/qEs/d+ifyhL/3P0D2Xp/1b9Q1n6n6t/KEv/8/QPZel/vv6hLP0v0D+Upf94/UNZ+k/QP5Sl/4X6h7L0n6h/KEv/SfqHsvSfrH8oS/+36R/K0v8i/UNZ+k/RP5Sl/1T9Q1n6T9M/lKX/dP1DWfp36R/K0n+G/qEs/WfqH8rSf5b+oSz9Z+sfytL/7fqHsvSfo38oS/+5+oey9J+nfyhL/4v1D2XpP1//UJb+C/QPZen/Dv1DWfov1D+Upf8i/UNZ+i/WP5Sl/xL9Q1n6X6J/KEv/S/UPZem/VP9Qlv7L9A9l6b9c/1CW/iv0D2Xp/079Q1n6r9Q/lKX/ZfqHsvRfpX8oS//V+oey9H+X/qEs/d+tfyhL//foH8rS/7f1D2Xp/zv6h7L0/139Q1n6r9E/lKX/7+kfytJ/rf6hLP1/X/9Qlv6X6x/K0v8P9A9l6X+F/qEs/a/UP5Sl/3v1D2Xpf5X+oSz936d/KEv/P9Q/lKX/1fqHsvT/I/1DWfq/X/9Qlv7X6B/K0v9a/UNZ+n9A/1CW/tfpH8rS/4P6h7L0/5D+oSz9P6x/KEv/P9Y/lKX/n+gfytJ/nf6hLP0/on8oS/+P6h/K0n+9/qEs/f9U/1CW/n+mfyhL/w36h7L0/3P9Q1n6f0z/UJb+1+sfytL/Bv1DWfp/XP9Qlv436h/K0v8T+oey9P8L/UNZ+t+kfyhL/0/qH8rS/1P6h7L0/0v9Q1n6/5X+oSz9P61/KEv/z+gfytL/Zv1DWfpv1D+Upf9n9Q9l6f/X+oey9P+c/qEs/W/RP5Sl/+f1D2Xp/wX9Q1n6b9I/lKX/rfqHsvS/Tf9Qlv6b9Q9l6f9F/UNZ+n9J/1CW/rfrH8rS/w79Q1n6f1n/UJb+f6N/KEv/O/UPZen/Ff1DWfr/rf6hLP3v0j+Upf/d+oey9L9H/1CW/vfqH8rS/z79Q1n6f1X/UJb+9+sfytL/Af1DWfo/qH8oS/+/0z+Upf9D+oey9P97/UNZ+n9N/1CW/v+gfyhL/3/UP5Sl/z/pH8rS/5/1D2Xp/7D+oSz9t+gfytL/X/QPZen/iP6hLP3/Vf9Qlv5f1z+Upf+j+oey9P+G/qEs/R/TP5Sl/7/pH8rS/3H9Q1n6P6F/KEv/J/UPZen/Tf1DWfo/pX8oS/9v6R/K0v/f9Q9l6f8f+oey9N+qfyhL/2/rH8rS/2n9Q1n6f0f/UJb+39U/lKX/9/QPZen/ff1DWfr/QP9Qlv4/1D+Upf9/6h/K0n+b/qEs/f9L/1CW/s/oH8rS/0f6h7L0/7H+oSz9f6J/KEv/Z/UPZem/Xf9Qlv479A8l6f/ilv6hLP0H6B/K0n+g/qEs/QfpH8rSfz/9Q1n6d+gfytJ/f/1DWfofoH8oS/8D9Q9l6X+Q/qEs/Q/WP5Sl/yH6h7L0P1T/UJb+h+kfytL/5/QPZen/Iv1DL7j+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/98sWrZ8zpS5c7sW+sY3vvHN7m+e738zAQAA/9d++qH/+f47AQAAAAAAAAAAAAAAAAAAgLya+L8Te77/GQEAAAAAAAAAAAAA4GfdmM5Ttg4asNdTg/Z8cPi9XTu/nrDtglkbNmwsPV+7f3xm8JID93ywY8eOHecs2nR698MDWq1W+3/txd2PD+x93H791fe9btyuR2XEB6aWG1a2Om/bcMljj0z70bGbOnY+29G6aMbsuV1DB7Za5bSO1tL2g2EDWq1yRkfrqvaD4e0Hozpa17cfHL/zwUGtze0Hx02bP3d6+4nRlX/P4IViTOfq1qC9Ftva698Ge+5/9X0TlvZ87eMle15tv1b3/tc9O+6hXj/r8Rz773n9ckrv/ff7HxB4Tv3b/4yhPV/7eMn/8f5/xk+GbYp+9tz773n9cqr9Q32Cz/97bbT35/5en/8HBy+5+7589s5B7f0PP/j7M7qf2u9/8/n/p69fTuu9/4F7ff5vf44f2fP5/4BWq5y+j78dkMqYzndt7ev9v+/97/fLvW4G7Ln/tZNGv7+9/1fc/uhLup/q6Of+R/b1/r+2198r0D9jOj+6o9f7fz/23zoqeMnd+193xRfPb+9/5aibb9jjZ/3Z/+m99z9k8bwFQxYtW/6a2fOmzOya2XXx8cNPHDb0tcNOGnrikJ0fCXb9uo+/K5DDvr3/tw7udTOg1eraff/Ke142sr3/O9Y/Mbb7qQP7uf8z+nz/H+z9H0JHDGztv39r6ZTFixcO2/Vrz8Phu37d9ZcF++/Hf/+/6ujuv6znzwwHtFq/uPt+1aTW/e39v/zJB97Y/dT+/dz/qD73P2LvP6sE+mcf3/+n97rZa//lUy+6rr3/UYcMv7v7qf7+9//oPvf/Ee//sC/GdLZqfRNt73/g49dcU+26jPHnf1CfJvZ/XFlzdLXrMtb+oT5N7L9r/rG3VrsuZ9o/1KeJ/a957+izq12XN9k/1KeJ/d/z3cfurHZdzrJ/qE8T+/96x/eWVbsunfYP9Wli/zeuGP90tevyZvuH+jSx/5dd+/Q3ql2XcfYP9Wli/+c/NXJxtetytv1DfZrY/4rDz72r2nV5i/1DfZrY/9Bp2ydWuy7n2D/Up4n9P/ieD3662nV5q/1DfZrY/3XPDjuy2nU51/6hPk3s/+aDBn+o2nU5z/6hPk3sf/ullx9W7bqcb/9Qnyb2v/rWjhHVrssF9g/1aWL/d2++6WvVrst4+4f6NLH/J0+4bVa16zLB/qE+Tez/E2Nfsr3adbnQ/qE+Tey/8+MLSrXrMtH+oT5N7L/joYfXVLsuk+wf6tPE/o8ZfNdJ1a7LZPuH+jSx/6mTp3yy2nV5m/1DfZrY/6hnPnZEtetykf1DfZrY/6FrDv1Mtesyxf6hPk3sf/Ciww+udl2m2j/Up4n9zzls44erXZdp9g/1aWL/a7c+uKjadZlu/1CfJvb/pauXPV7tunTZP9Snif1/e+asC6tdlxn2D/VpYv8bfun2e6tdl5n2D/VpYv8P33/W6mrXZZb9Q32a2P9VNz3xC9Wuy2z7h/o0sf8vTNh2fbXr8nb7h/o0sf9tr554crXrMsf+oT5N7P+ld7z+gWrXZa79Q32a2P/kW64eVe26zLN/qE8T+1/Y+e5nql2Xi+0f6tPE/k8aesz8atdlvv1DfZrY/5Vb1k2tdl0W2D/Up4n9f3n9CT+odl3eYf9Qnyb2/9R5R46tdl0W2j/Up4n9rz/6yi3Vrssi+4f6NLH/EV/51vHVrsti+4f6NLH/QzaesqHadVli/1CfJvZ/1KnjfqXadbnE/qE+Tex/7ht+fEW163Kp/UN9mtj/z/9wyeZq12Wp/UN9mtj/+MsfOa/adVlm/1CfJva/ZNVXv1ntuiy3f6hPE/s/ecD0y6pdlxX2D/VpYv9bHm29r9p1eaf9Q32a2P+16248oNp1WWn/UJ8m9v/5Obd8rtp1ucz+oT5N7P87Ly1Dql2XVfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH+zAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswLEAAAAAgDB/6yB6NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+Y5I3v") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000ffffffffffffffff00000000000000000000000025000000000000000000000000000000000000000000000000000000ffffffff"]) 9.586645592s ago: executing program 1 (id=1136): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001280)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x106f) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), &(0x7f00000003c0), &(0x7f0000000000)) sendmsg$rds(r2, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c0100001000130727bd700004000000fe8000000000000000000000000000bbfe8000000000000000000000000000bb000000004e240000000000002f000000d34d1c2d31454d66151252ac84e852df6db8fc48437eb64ef536ab50698627a1ce213ecc1ee6d6fe0b397bdf1fdec93fb6c9e19bd27338db086ee1b8829264d2787e40bfa6caaf52c99600cb3760931e986802cfa9b1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r4], 0x13c}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r7, &(0x7f0000000a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029"], 0x108}}, {{&(0x7f00000000c0)=@llc={0x1a, 0x321, 0x3, 0xea, 0x6, 0x3, @multicast}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000200)="a773a344a8707ca0b31929b963194504cd8f16e1e83e140d202253aa6214b686121db37b7648c5c0b3e7f39ca6a436a91eafcd59d3118e475aa21bb06aaa3fd5705bc3e2083dd03411e27aad6a52081b29d21a4f40d0350fc17266182fcf9a", 0x5f}, {&(0x7f0000000280)="31f4ce2ba934c9ab9b150202a3e5e541c63df56f936d6bc18aa51fc3221f2c7f7787", 0x22}, {&(0x7f0000000500)="04fb60f239340eda41da0c165e4ccf29ab072378cb562d7ec4145332d4c88781d36ae719797ae1537e401042b12641f45925237c044e196a637ac8c0c435d57a98b61a74024d4bd759073f0e38c8a3643e7d37ac9064d59bcecf48e696c2ec0e0bb65e6b7cc2971d29f03f79151fe8de8a44b7aa4b68f68064567d0c5e26829eb344a3c0345b208afa2becbc4554376f0eb82ffcdf330ced2d16b845e4a4efbf5d450c4cec29b1c633445ca74be581a7", 0xb0}, {&(0x7f00000005c0)="40f3f9db6a154d8474c17041f424f91f5a9d528f14277f14b718754cf2c086f74ff7599b05deefb996ecee875bd0ed3baa1a701270f9866ddcc16e0983e64f39752db66ad0ab1d594b57de223563ef0050eaf1bb3d7f87331fc4b260717cf4e065b91060f77b3d39f2aad05e872a703d13db25e2f4a4d0f177e3820a384e0325f0d4efc1babaca40b1c6963be27bb41f0e95a8cd57f802c9ebb7f461bdcb7ad9170b2be8eab5bf0f24dce1229c4d23cec5e3d4bc4af3f8dd9e6dc8d7ebb9e49308dc020aaba45db663a4af488201c728e9dcb951", 0xd4}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x218}}], 0x3, 0xc040) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000ac0)=ANY=[@ANYBLOB='utf8,dmask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,fmask=00000000000000000000001,time_offset=0x0000000000000008,fmask=00000000000000000000007,iocharset=macroman,uid=', @ANYRESHEX=0x0, @ANYRESOCT=r5], 0x1, 0x1538, &(0x7f0000004200)="$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") lstat(&(0x7f0000003480)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x2cf2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020) 7.283287527s ago: executing program 4 (id=1141): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002e00)=""/4122, 0x101a}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000180)=""/182, 0xb6}, {&(0x7f0000000cc0)=""/242, 0xf2}], 0x4}, 0x40000142) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x800007, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000440)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x7, 0x4, "4f4288eee3714f14d4cf0bcbc9ed8f3bb1c8a671ad7d70429ba1fe3b7d26816dedd30e2f5855354556d974c4d9d08cfdbc344176b4441d8fa7ac1108363128", 0x7}, 0x60) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 6.483730839s ago: executing program 4 (id=1142): listns(&(0x7f0000000680)={0x20, 0x0, 0x1, 0x4000000, 0x0, 0x3}, &(0x7f00000006c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003680)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x404, &(0x7f0000000340)={[{@resgid}, {@usrquota}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(0x0, 0x2fffffd) sendfile(r0, r0, 0x0, 0x7fffffff) arch_prctl$ARCH_SET_GS(0x1001, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)="83a7f8c85fa74fe15227b603685f20a5383da3c4c760f4fadb825083d85674bb8a3b562948c542749466e6ec62c2d7bba51c07c1e6f494992169e83f4a6e5558e6e6d5641b533a62ad9684a50d9a1db4afee8154f4fc8456d74dbcc533512bba04e0c1", 0x63}, {0x0}], 0x2, 0x0, 0xc8}}], 0x1, 0x10044840) fsmount(0xffffffffffffffff, 0x1, 0x3) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000030000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900"], 0xc8}}, 0x0) 5.630296559s ago: executing program 1 (id=1143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xc5}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x24}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xa, 0x5, 0x102, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = semget$private(0x0, 0x4000, 0x555) semtimedop(r3, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) unshare(0x2c040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xc5}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, 0x24}, 0x94) (async) getpid() (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0xa, 0x5, 0x102, 0x7, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) semget$private(0x0, 0x4000, 0x555) (async) semtimedop(r3, &(0x7f0000000100)=[{0x4, 0x1004, 0x1800}], 0x1, 0x0) (async) unshare(0x2c040000) (async) 5.459027947s ago: executing program 3 (id=1144): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 5.232603782s ago: executing program 3 (id=1146): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000001340)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000380)=[{0x7, 0x6, 0x2, 0xeb, @tick=0x8, {0xc1, 0x2}, {0x9, 0x7}, @control={0xfe, 0xcf, 0x1}}, {0x81, 0xf, 0xf, 0x6, @time={0x800, 0x7f}, {0x1, 0x6}, {0x0, 0x5}, @raw8={"b0abb58c6bff37b09c9f9f40"}}], 0x38) readv(r1, &(0x7f0000000480), 0x0) 5.132421538s ago: executing program 3 (id=1147): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="1800000013000501000000000000000005001900ff000000"], 0x18}}, 0x20040810) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0xbb, 0x55, 0x9, 0x8, 0x6}, 0x0, 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000040)=0x2000001, 0x4) r4 = open(&(0x7f0000000280)='./file1\x00', 0x1cd142, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000140)={@broadcast, @local, @local}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r5, 0x0, 0x0, 0x8ffff) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x8042, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff", @ANYRES16=r0], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 4.454683769s ago: executing program 2 (id=1150): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000200000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 4.387184439s ago: executing program 4 (id=1151): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x4e, 0xfffffffffffffffd, 0x10100000000007, 0xdb4e, 0xe9, 0x8000000000000001, 0x5, 0x103, 0x8000000000000, 0x9, 0x4, 0xa, 0xfffffffffffffffa, 0x4, 0x0, 0x8000], 0x1}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x2210c42, &(0x7f0000001180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@map_acorn}, {@map_normal}, {@session={'session', 0x3d, 0x12}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@session={'session', 0x3d, 0x1e}}, {@overriderock}, {@unhide}, {@cruft}], [{@audit}, {@smackfsdef={'smackfsdef', 0x3d, 'iocharset'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x31, 0x62, 0x65, 0x66, 0x38, 0x65, 0x62], 0x2d, [0x39, 0x35, 0x64, 0x65], 0x2d, [0x63, 0x62, 0x0, 0x36], 0x2d, [0x33, 0x66, 0x38, 0x39], 0x2d, [0x61, 0x66, 0x37, 0x66, 0x65, 0x66, 0x57, 0x65]}}}, {@subj_user={'subj_user', 0x3d, 'session'}}]}, 0x5, 0xa41, &(0x7f0000000700)="$eJzs3U9sXNV+B/DvHduJY2gSIKUUAZmEJhhwHdspSSMWNLEnian/VLYjEXVBKHGqNG5pSSsBqkSQqq6KWqlVF+0OddVukNiULip27+3eW73Fk55YvT16m5e3eX66M2N7bI89dmLHSfh8rPHcP797zu/ec+eezGR8T3i0LB5aNbe4WH/c4/yV/34AGfMQuzD27Rdffl4+PruTfenKG8X/Jr1Jqkl3kueSntGxmenJDgXdSq4l+SYpkuxP43lLrqX45zy5Mv9Niv8s693Qvq2WTCeLfK/t9fkHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPo2J0bGhouNiX8akr71Qbkuo6o2Mz00UWF9evWdqm4esi+XXHcYUry9Wnt3dpqO/njqwEPJukejwvNOZeqA9Int588sSzh998prtSH1y8KNrkuQP2b73Y2x9/cuu9hYX5DzcOWfy0sQ87k9tD5lJtanx2enzy/KVadXx2unruzJmhU5cvzlYvjk/UZq/OztUmq6MztfNz0zPV/tFXq8Pnzp2u1gavTl+ZujQ2OFFbWnj290eGhs5U3x78k9r5mdnpqVNvD86OXh6fmBifulSPKVeXMWfLE/GPx+eqc7Xzk9XqjZsL86fX5NS19mCXQcOd9qQMGukUNDI0MjI8PDIy/Flz9OzlBWfeOPfG2aGh7qE1si5il05aHi4HNm7mHb1+w/2oNPr//MVExjOVK3kn1bY/oxnLTKYzucH6prL/T4qvT5yqbVpvo/9u9P/NXr67ZfXz5a/jeak529tb32Jd/9+aQb3i9rnt3s/tfJxPcivvZSELmc+HDzyDrf2cbB7InS73UmqZynhmM53xTOZ8fUm1uaSaczmTMxnKu7mco5lNNRcznonUMpurmc1cavUzajQzqeV85jKdmVTTn9G8mmqGcy7ncjrV1DKYq5nOlUzlUsZyvl7KjdysH/fTm+S4HDS8laCRTYLWdublKbe9/r/2uP5LkC3b2Qs43IfFZv+/r3No/+iDSAgAAADYcb/7wxw88vQPfpYUebH+ufzF8YnaW3udFgAAALCD6t+ae6F86imnXuytv/8f2uu0AAAAgB1U1P/GrkjSl6ONqaW/hPIhAAAAADwmynf+v5XU3/s3F3j/DwAAAI+ZzvfY7xhRDCzd/rd6vfF8vRnRmCv6Lo5P1AZHpyfeHM7J+l0Gkry4vrSupOip//nBaznWiDrW13juWymxrLO3jBoefHM4r+V4c0f6Xy6fXu5vEznSiHylEflKa2RXVkWeLiNb/N8vd+m4A8BeOr5Jf7zV/v+1DDQiBp6vd/ndz7fpg4fW9KwAwJ5ZHmPnV80hzdr0/82Ilzbq//9gk/f/ZcTTuXG08ZWCwbyfD7KQ6xlY+sbB0XalLo1G0PgawkCHTwP6ml9Z+PHZSgbWfR7Qu7yvrbHzGclA208EWsotlnI43Yjr2p02AIAH7fim/fDW+v+BDu//+3ylEAAeKssj2G9j4tPtBM9/eHuv9xEAWE0vDQAAAAAAAAAAAAAAAAAAAAAAAAAAADtvSzfw/9HJZGFhPtnSbf/3Z7sDCrSd6N1OhptPVLID+TwSE11J7qucg9liK6+feGv77V628X3s8v8caG7+870/8o/dxJoLxYE9uDgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw64qkq93ySrI/yVCSUw8+q91zZ68T2CnVffe0WXE3d/NRDu54PgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA33PN+/9X0nh+orEo3ZXkRJJrSf50r3PcSXf3OoHdUXQO+ctG4Mr9/ytJTxaLdDeaPUXP6NjM9GRZVLG/XP/tF19+Xj46l71+VIWygLKGVYNLNGtoWdKzequn6lv1jc3fvvW3H/x1dexC/cS8MHdxYmzy0swfrQQ+W3yVVNN4LFnK9+9P/P+/tCxuDpRQfFXuaXtr671Yr3dsfb2/027rDerdgpsL8yNlTXO1d+b+7q9uftSy6ukcS17uT/pX1/Tn5WODmo6tPZ6rFd8V/1gczL/nWr39y6NRLBZlEx2q7/+BGzcX5gff/2Dh+nJOn67K6XCOJrme9G49p6P1c7PtYBX1s67SU9Y6VD+By19HOpS3qZYShyv1atcd16fqp0zftvah2uH11eG4NzM63bal//VvnsnJbbf0yQ41tlV8V/y0uJyf5B9axv+olO1/Im1fnW2KqEe2nCmt65ovr0ZbV06s7PlIaxHvri1zw1cl23eoU8A/5c/yh8vtX2m5/jfb6sFcj1pqbP+6SLb/uvivQ+t6lBX1HunImh6pefXZaJtmnkcaURvk+dt5vVHmNq4or3fqsXfp9f8fRX9+kTvG/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5+RdLVbnklOZHkcJJD5Xw1WVwbc+ce6qv0FfeS5o65l5wfPcWGO1rczd18lIMPOiMAAAAAAAAAdseFsW+/+PLz8lH///iu/F6luaaadCc5XPxbz+jYzPRkh4J6kmtL/6Xfu70crpW/nlyZ/6ace67DRnv79QEAeKT9JgAA//8aYG/X") r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x3, 0x10000, 0x69, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xef7f0073bd895bb9, 0x7, 0x8, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) 4.215153065s ago: executing program 2 (id=1152): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e00000010000000000000000000000000a0100fc0000000000000000000000004e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x80c4) 4.080040963s ago: executing program 3 (id=1153): socket$inet6(0xa, 0x80002, 0x0) r0 = syz_open_dev$dvb_demux(0x0, 0xb, 0x44d8c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r1, 0x0, 0x8, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xfffffff9, 0x6, {r1}, {}, 0xae9, 0xe379}) fcntl$getownex(r0, 0x10, &(0x7f0000000180)) r2 = fcntl$getown(r0, 0x9) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x4) r3 = getpid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x4) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x208}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(0xffffffffffffffff, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000007940), 0x101002, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000007980)={'wg1\x00', 0x200}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) 3.97135781s ago: executing program 2 (id=1154): syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) ioctl$sock_qrtr_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000003000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x2c}, 0x94) 2.063258954s ago: executing program 2 (id=1155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="180800001200000000000000fbffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080001000080db9af0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000100b70500000800000015000000760000007b987600000000005608000002000000a500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.61609627s ago: executing program 1 (id=1156): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000001340)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000380)=[{0x7, 0x6, 0x2, 0xeb, @tick=0x8, {0xc1, 0x2}, {0x9, 0x7}, @control={0xfe, 0xcf, 0x1}}, {0x81, 0xf, 0xf, 0x6, @time={0x800, 0x7f}, {0x1, 0x6}, {0x0, 0x5}, @raw8={"b0abb58c6bff37b09c9f9f40"}}], 0x38) readv(r1, &(0x7f0000000480), 0x0) 1.243129865s ago: executing program 1 (id=1157): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0x70bd27, 0x25dfdbfe, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x5, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x369}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x70}}, 0x0) r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000180)=ANY=[], 0x0, 0x5f2, &(0x7f0000000680)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r0], 0x835, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015400000000020"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002020000ff2505a1a440000102030109025c0002058940000904000001020d00000024060001002400000000240f0100000000000000000000241a0000000905810300000000000904010000020d0000090401"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0000460000004300a7ea3163fdfa964e2c8d955275"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.242951521s ago: executing program 2 (id=1158): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a73867000000ffffbeda00", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03d8a0f4bd00", [0x0, 0x9]}}) 1.242811263s ago: executing program 4 (id=1159): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000700000000000008"], 0x68}, 0x0) 984.144632ms ago: executing program 4 (id=1160): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x94) 204.182425ms ago: executing program 4 (id=1161): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) memfd_create(&(0x7f0000001580)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\xff\a\xb4\xf9\x1f\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\x10\xbf\x90/wU\xf3\xc1\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x03\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\t\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa8\xe1\x84i\xce\xa1\xff\x95\x80\x00T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\x80\x00\x00\x00\x00\x00\x00\x00\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xae\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99e\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad\xff\x03\x00\x00\x00\x00\x00\x00\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1\f\xa5#w\xdaU\xa8>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\x0f?\xab\xe5\x13\x02\xc4\b\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\xbc\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%\x04\x00\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\f1\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8c\x16)\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}#\x1d\xc85*\xe7\n\xdf\xd4d\xf9k\xb1\xdcT1\xecH\xea\xe0\x1c\xe5;I\r\xf2;\xa1\xbfz0Ij\xddn\xe1U\xd6\xfd4\x98\fD\xe5f\x15\xf3\x8fr\x17\xd8/\xde\xaf(\xe1\xd3\xdfF\xbe\x88\xc6\xd3\tO \xbb0#\xb3\x99\xef\xb1\x00\x00\x00l\xc6\x8fi\x91N,|\xff<0\xe3\xd8\xe9(\xb9\x90\x9f1\x10/\x1b`W*\a\x00W\xe0kV\x02\x89%\xbe%\x8a\v\xbaI\x11Z\xed\xc4\xd6\xd7\xdf\xb9\xa2fS\x0510\xb3\xa9D\x9e\xa7\x06\xc82*m1\xa0\xb6\x91K\xe0\\\xd2\x8e\xb3\xcdn|\x1f3\x01\xee\xb8\x13\\q\xf6 \xa89\xeb\nN\xde\xbe2J\x1cu\xabA\x06S\xc5\x8e\xa1\xa8\xd2\xf2\xe1\xa1\x88 l-\xdb\xd9\x7f\xbe}\xee\x03\xc7\xad@\xcc\x10cxr\xb1\xcc\xa7\x84\xf0\xb4\xe6\xea\xaah\x12x\x91\x9bwU\x96\x85\xb6\xdd\'\xf1\a\xa6\xf25\xa0,:\x89\xfc8M:]U^\x9c\xbd\x1bAhB\x9e5\x16\x96\x11\x00$\xc0X\xf9\x15\xad\x87j\x93\x8ay\x10\xbft\xb9z\xcb\x8f\xfc\xaa\xdd\xfb{\x0e\x93\xaf\x80', 0xd) (async) r1 = memfd_create(&(0x7f0000001580)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\xff\a\xb4\xf9\x1f\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v2*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\x10\xbf\x90/wU\xf3\xc1\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x03\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\t\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\xc95\xcc\xb6\xf6\xe8o\xfd\x882\xb3\xa8\xe1\x84i\xce\xa1\xff\x95\x80\x00T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\x80\x00\x00\x00\x00\x00\x00\x00\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xae\xa60k2\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99e\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad\xff\x03\x00\x00\x00\x00\x00\x00\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1\f\xa5#w\xdaU\xa8>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\x0f?\xab\xe5\x13\x02\xc4\b\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\xbc\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%\x04\x00\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Lo\x12\x00\xa2\xa5$9\x05O\xfe\x0e\xd2N\x98\x84\x10\x01\x89\xaa)\x118\xcd\xf8>\xab\xd9\xbd\xcfH\xa5\x8e\x14\x12\xb0OF\x80\xbb\xb6B\x80Q \x85\'w\xc8D\xf9\xfa\f1\x9e\x83I\xe5\n\xae8\xb7\f\xab#\x85Y\xeeH\x98\x84\x8c\x16)\xdcZ<\x80\xbd\x8d~\n\x88-\xa1\x97\xaf2e\xa6\'\x8aQ\x85}\xf1\rJF\f\x8c_\x01\xbe\'\v1\xccL\x0e\x05\xbdIa\x85\xb8\x14\xe0;}\xb7\x11\xb5\xfa\xeb\x13\xd3\x92\x8a\xe47\xf9\x12\xd9\xd5\x99\xf4\t\xdf\x058\xc4]\xf7\x16J\xf9\xce\xf0zG\xe6i\xf1~\xaaL\xa5\xd5\xe5L\xban?\'\x11B\xeav\xbf|\xc6\xc9>\xfc\x14\xbe7T\x00\x05\x05\x13}#\x1d\xc85*\xe7\n\xdf\xd4d\xf9k\xb1\xdcT1\xecH\xea\xe0\x1c\xe5;I\r\xf2;\xa1\xbfz0Ij\xddn\xe1U\xd6\xfd4\x98\fD\xe5f\x15\xf3\x8fr\x17\xd8/\xde\xaf(\xe1\xd3\xdfF\xbe\x88\xc6\xd3\tO \xbb0#\xb3\x99\xef\xb1\x00\x00\x00l\xc6\x8fi\x91N,|\xff<0\xe3\xd8\xe9(\xb9\x90\x9f1\x10/\x1b`W*\a\x00W\xe0kV\x02\x89%\xbe%\x8a\v\xbaI\x11Z\xed\xc4\xd6\xd7\xdf\xb9\xa2fS\x0510\xb3\xa9D\x9e\xa7\x06\xc82*m1\xa0\xb6\x91K\xe0\\\xd2\x8e\xb3\xcdn|\x1f3\x01\xee\xb8\x13\\q\xf6 \xa89\xeb\nN\xde\xbe2J\x1cu\xabA\x06S\xc5\x8e\xa1\xa8\xd2\xf2\xe1\xa1\x88 l-\xdb\xd9\x7f\xbe}\xee\x03\xc7\xad@\xcc\x10cxr\xb1\xcc\xa7\x84\xf0\xb4\xe6\xea\xaah\x12x\x91\x9bwU\x96\x85\xb6\xdd\'\xf1\a\xa6\xf25\xa0,:\x89\xfc8M:]U^\x9c\xbd\x1bAhB\x9e5\x16\x96\x11\x00$\xc0X\xf9\x15\xad\x87j\x93\x8ay\x10\xbft\xb9z\xcb\x8f\xfc\xaa\xdd\xfb{\x0e\x93\xaf\x80', 0xd) preadv2(r1, 0x0, 0x0, 0x4, 0x2, 0x31) (async) preadv2(r1, 0x0, 0x0, 0x4, 0x2, 0x31) io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x42000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x3d}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) r5 = getpid() syz_pidfd_open(r5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000003000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) pipe(&(0x7f0000000480)) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r9 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x49801}}, 0x20}}, 0x0) splice(r7, 0x0, r9, 0x0, 0x800000000082, 0xf) (async) splice(r7, 0x0, r9, 0x0, 0x800000000082, 0xf) 154.981745ms ago: executing program 3 (id=1162): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000001020000000100180100002020782500000000cb0002017b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000006200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 46.500402ms ago: executing program 2 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18}}, 0x18}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000140), &(0x7f0000000280)=""/255}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000200000000020000000000001202000020020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x2}, 0x28) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x809d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000030000000080000000b"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 0s ago: executing program 3 (id=1164): r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x4, 0x800, 0x1, "00017555d000", '\x00', "0500", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", "000000ff0000000000000020", "0000000006000000001000"]}) kernel console output (not intermixed with test programs): p135 start 134217728 is beyond EOD, truncated [ 256.903240][ T7152] loop3: p136 size 591360 extends beyond EOD, truncated [ 256.908674][ T7152] loop3: p136 could not be added: -ENOMEM [ 256.908878][ T7152] loop3: p137 start 134217728 is beyond EOD, truncated [ 256.908931][ T7152] loop3: p138 size 591360 extends beyond EOD, truncated [ 256.909272][ T7152] loop3: p138 could not be added: -ENOMEM [ 256.909331][ T7152] loop3: p139 start 134217728 is beyond EOD, truncated [ 256.909377][ T7152] loop3: p140 size 591360 extends beyond EOD, truncated [ 256.909646][ T7152] loop3: p140 could not be added: -ENOMEM [ 256.909677][ T7152] loop3: p141 start 134217728 is beyond EOD, truncated [ 256.909741][ T7152] loop3: p142 size 591360 extends beyond EOD, truncated [ 256.910092][ T7152] loop3: p142 could not be added: -ENOMEM [ 256.920757][ T7152] loop3: p143 start 134217728 is beyond EOD, truncated [ 256.920820][ T7152] loop3: p144 size 591360 extends beyond EOD, truncated [ 256.921182][ T7152] loop3: p144 could not be added: -ENOMEM [ 256.921235][ T7152] loop3: p145 start 134217728 is beyond EOD, truncated [ 256.921289][ T7152] loop3: p146 size 591360 extends beyond EOD, truncated [ 256.921575][ T7152] loop3: p146 could not be added: -ENOMEM [ 256.921609][ T7152] loop3: p147 start 134217728 is beyond EOD, truncated [ 256.921652][ T7152] loop3: p148 size 591360 extends beyond EOD, truncated [ 256.922176][ T7152] loop3: p148 could not be added: -ENOMEM [ 256.931811][ T7152] loop3: p149 start 134217728 is beyond EOD, truncated [ 256.931873][ T7152] loop3: p150 size 591360 extends beyond EOD, truncated [ 256.932236][ T7152] loop3: p150 could not be added: -ENOMEM [ 256.932276][ T7152] loop3: p151 start 134217728 is beyond EOD, truncated [ 256.932325][ T7152] loop3: p152 size 591360 extends beyond EOD, truncated [ 256.952028][ T7152] loop3: p152 could not be added: -ENOMEM [ 256.952086][ T7152] loop3: p153 start 134217728 is beyond EOD, truncated [ 256.952134][ T7152] loop3: p154 size 591360 extends beyond EOD, truncated [ 256.954522][ T7152] loop3: p154 could not be added: -ENOMEM [ 256.954562][ T7152] loop3: p155 start 134217728 is beyond EOD, truncated [ 256.954609][ T7152] loop3: p156 size 591360 extends beyond EOD, truncated [ 256.954905][ T7152] loop3: p156 could not be added: -ENOMEM [ 256.954945][ T7152] loop3: p157 start 134217728 is beyond EOD, truncated [ 256.954987][ T7152] loop3: p158 size 591360 extends beyond EOD, truncated [ 256.955299][ T7152] loop3: p158 could not be added: -ENOMEM [ 256.955338][ T7152] loop3: p159 start 134217728 is beyond EOD, truncated [ 256.955389][ T7152] loop3: p160 size 591360 extends beyond EOD, truncated [ 256.955653][ T7152] loop3: p160 could not be added: -ENOMEM [ 256.955693][ T7152] loop3: p161 start 134217728 is beyond EOD, truncated [ 256.955742][ T7152] loop3: p162 size 591360 extends beyond EOD, truncated [ 256.972828][ T7152] loop3: p162 could not be added: -ENOMEM [ 256.972884][ T7152] loop3: p163 start 134217728 is beyond EOD, truncated [ 256.972940][ T7152] loop3: p164 size 591360 extends beyond EOD, truncated [ 256.973266][ T7152] loop3: p164 could not be added: -ENOMEM [ 256.973303][ T7152] loop3: p165 start 134217728 is beyond EOD, truncated [ 256.973349][ T7152] loop3: p166 size 591360 extends beyond EOD, truncated [ 256.973618][ T7152] loop3: p166 could not be added: -ENOMEM [ 256.973643][ T7152] loop3: p167 start 134217728 is beyond EOD, truncated [ 256.973692][ T7152] loop3: p168 size 591360 extends beyond EOD, truncated [ 256.973942][ T7152] loop3: p168 could not be added: -ENOMEM [ 256.973982][ T7152] loop3: p169 start 134217728 is beyond EOD, truncated [ 256.974054][ T7152] loop3: p170 size 591360 extends beyond EOD, truncated [ 257.001435][ T6899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.012600][ T7152] loop3: p170 could not be added: -ENOMEM [ 257.012648][ T7152] loop3: p171 start 134217728 is beyond EOD, truncated [ 257.012716][ T7152] loop3: p172 size 591360 extends beyond EOD, truncated [ 257.013230][ T7152] loop3: p172 could not be added: -ENOMEM [ 257.013275][ T7152] loop3: p173 start 134217728 is beyond EOD, truncated [ 257.013328][ T7152] loop3: p174 size 591360 extends beyond EOD, truncated [ 257.039716][ T7152] loop3: p174 could not be added: -ENOMEM [ 257.039769][ T7152] loop3: p175 start 134217728 is beyond EOD, truncated [ 257.039815][ T7152] loop3: p176 size 591360 extends beyond EOD, truncated [ 257.040216][ T7152] loop3: p176 could not be added: -ENOMEM [ 257.040249][ T7152] loop3: p177 start 134217728 is beyond EOD, truncated [ 257.040312][ T7152] loop3: p178 size 591360 extends beyond EOD, truncated [ 257.040632][ T7152] loop3: p178 could not be added: -ENOMEM [ 257.040678][ T7152] loop3: p179 start 134217728 is beyond EOD, truncated [ 257.040729][ T7152] loop3: p180 size 591360 extends beyond EOD, truncated [ 257.041020][ T7152] loop3: p180 could not be added: -ENOMEM [ 257.041059][ T7152] loop3: p181 start 134217728 is beyond EOD, truncated [ 257.062332][ T7152] loop3: p182 size 591360 extends beyond EOD, truncated [ 257.062902][ T7152] loop3: p182 could not be added: -ENOMEM [ 257.062949][ T7152] loop3: p183 start 134217728 is beyond EOD, truncated [ 257.062996][ T7152] loop3: p184 size 591360 extends beyond EOD, truncated [ 257.063270][ T7152] loop3: p184 could not be added: -ENOMEM [ 257.063307][ T7152] loop3: p185 start 134217728 is beyond EOD, truncated [ 257.063348][ T7152] loop3: p186 size 591360 extends beyond EOD, truncated [ 257.063616][ T7152] loop3: p186 could not be added: -ENOMEM [ 257.063662][ T7152] loop3: p187 start 134217728 is beyond EOD, truncated [ 257.063716][ T7152] loop3: p188 size 591360 extends beyond EOD, truncated [ 257.569755][ T6899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.845069][ T7152] loop3: p189 start 134217728 is beyond EOD, truncated [ 257.845149][ T7152] loop3: p190 size 591360 extends beyond EOD, truncated [ 258.143210][ T7177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.170784][ T7172] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 258.171843][ T7152] loop3: p191 start 134217728 is beyond EOD, truncated [ 258.171870][ T7152] loop3: p192 size 591360 extends beyond EOD, truncated [ 258.272886][ T7152] loop3: p193 start 134217728 is beyond EOD, truncated [ 258.272914][ T7152] loop3: p194 size 591360 extends beyond EOD, truncated [ 258.409129][ T7152] loop3: p195 start 134217728 is beyond EOD, truncated [ 258.409156][ T7152] loop3: p196 size 591360 extends beyond EOD, truncated [ 258.411568][ T7152] loop3: p197 start 134217728 is beyond EOD, truncated [ 258.411593][ T7152] loop3: p198 size 591360 extends beyond EOD, truncated [ 258.484256][ T7177] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 258.571195][ T7152] loop3: p199 start 134217728 is beyond EOD, truncated [ 258.571227][ T7152] loop3: p200 size 591360 extends beyond EOD, truncated [ 258.616802][ T7177] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 258.616837][ T7177] EXT4-fs (loop2): This should not happen!! Data will be lost [ 258.616837][ T7177] [ 258.616855][ T7177] EXT4-fs (loop2): Total free blocks count 0 [ 258.616871][ T7177] EXT4-fs (loop2): Free/Dirty block details [ 258.616914][ T7177] EXT4-fs (loop2): free_blocks=4096 [ 258.616951][ T7177] EXT4-fs (loop2): dirty_blocks=16 [ 258.616966][ T7177] EXT4-fs (loop2): Block reservation details [ 258.616982][ T7177] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 258.626398][ T7152] loop3: p201 start 134217728 is beyond EOD, truncated [ 258.626480][ T7152] loop3: p202 size 591360 extends beyond EOD, truncated [ 258.760262][ T7152] loop3: p203 start 134217728 is beyond EOD, truncated [ 258.760295][ T7152] loop3: p204 size 591360 extends beyond EOD, truncated [ 258.797765][ T7152] loop3: p205 start 134217728 is beyond EOD, truncated [ 258.797797][ T7152] loop3: p206 size 591360 extends beyond EOD, truncated [ 258.820000][ T7172] XFS (loop1): Ending clean mount [ 258.874566][ T7152] loop3: p207 start 134217728 is beyond EOD, truncated [ 258.874598][ T7152] loop3: p208 size 591360 extends beyond EOD, truncated [ 258.911375][ T7152] loop3: p209 start 134217728 is beyond EOD, truncated [ 258.911406][ T7152] loop3: p210 size 591360 extends beyond EOD, truncated [ 258.939221][ T7152] loop3: p211 start 134217728 is beyond EOD, truncated [ 258.939253][ T7152] loop3: p212 size 591360 extends beyond EOD, truncated [ 258.959608][ T5835] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 258.977489][ T7152] loop3: p213 start 134217728 is beyond EOD, truncated [ 258.977520][ T7152] loop3: p214 size 591360 extends beyond EOD, truncated [ 258.999660][ T7152] loop3: p215 start 134217728 is beyond EOD, truncated [ 258.999711][ T7152] loop3: p216 size 591360 extends beyond EOD, truncated [ 259.076478][ T5615] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 259.143583][ T7152] loop3: p217 start 134217728 is beyond EOD, truncated [ 259.143610][ T7152] loop3: p218 size 591360 extends beyond EOD, truncated [ 259.168486][ T5608] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 259.222623][ T7152] loop3: p219 start 134217728 is beyond EOD, truncated [ 259.222655][ T7152] loop3: p220 size 591360 extends beyond EOD, truncated [ 259.229241][ T7152] loop3: p221 start 134217728 is beyond EOD, truncated [ 259.229268][ T7152] loop3: p222 size 591360 extends beyond EOD, truncated [ 259.258513][ T67] hsr_slave_0: left promiscuous mode [ 259.318262][ T67] hsr_slave_1: left promiscuous mode [ 259.319580][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.342936][ T7152] loop3: p223 start 134217728 is beyond EOD, truncated [ 259.343009][ T7152] loop3: p224 size 591360 extends beyond EOD, truncated [ 259.380711][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.383037][ T7152] loop3: p225 start 134217728 is beyond EOD, truncated [ 259.383095][ T7152] loop3: p226 size 591360 extends beyond EOD, truncated [ 259.424097][ T7152] loop3: p227 start 134217728 is beyond EOD, truncated [ 259.424150][ T7152] loop3: p228 size 591360 extends beyond EOD, truncated [ 259.578410][ T7152] loop3: p229 start 134217728 is beyond EOD, truncated [ 259.578445][ T7152] loop3: p230 size 591360 extends beyond EOD, truncated [ 259.589098][ T7152] loop3: p231 start 134217728 is beyond EOD, truncated [ 259.589207][ T7152] loop3: p232 size 591360 extends beyond EOD, truncated [ 259.699588][ T7152] loop3: p233 start 134217728 is beyond EOD, truncated [ 259.699646][ T7152] loop3: p234 size 591360 extends beyond EOD, truncated [ 259.769936][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.769965][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.842309][ T7152] loop3: p235 start 134217728 is beyond EOD, truncated [ 259.842338][ T7152] loop3: p236 size 591360 extends beyond EOD, truncated [ 259.982977][ T7152] loop3: p237 start 134217728 is beyond EOD, truncated [ 259.983005][ T7152] loop3: p238 size 591360 extends beyond EOD, truncated [ 259.998445][ T7152] loop3: p239 start 134217728 is beyond EOD, truncated [ 259.998510][ T7152] loop3: p240 size 591360 extends beyond EOD, truncated [ 260.040777][ T7152] loop3: p241 start 134217728 is beyond EOD, truncated [ 260.040803][ T7152] loop3: p242 size 591360 extends beyond EOD, truncated [ 260.041553][ T67] veth1_macvtap: left promiscuous mode [ 260.063161][ T7152] loop3: p243 start 134217728 is beyond EOD, truncated [ 260.063189][ T7152] loop3: p244 size 591360 extends beyond EOD, truncated [ 260.067770][ T7152] loop3: p245 start 134217728 is beyond EOD, truncated [ 260.067793][ T7152] loop3: p246 size 591360 extends beyond EOD, truncated [ 260.097950][ T7152] loop3: p247 start 134217728 is beyond EOD, truncated [ 260.098016][ T7152] loop3: p248 size 591360 extends beyond EOD, truncated [ 260.136654][ T7152] loop3: p249 start 134217728 is beyond EOD, truncated [ 260.136672][ T7152] loop3: p250 size 591360 extends beyond EOD, truncated [ 260.141348][ T7152] loop3: p251 start 134217728 is beyond EOD, truncated [ 260.141373][ T7152] loop3: p252 size 591360 extends beyond EOD, truncated [ 260.151421][ T67] veth0_macvtap: left promiscuous mode [ 260.218773][ T7152] loop3: p253 start 134217728 is beyond EOD, truncated [ 260.218811][ T7152] loop3: p254 size 591360 extends beyond EOD, truncated [ 260.253482][ T7152] loop3: p255 start 134217728 is beyond EOD, truncated [ 260.360978][ T67] veth1_vlan: left promiscuous mode [ 260.446074][ T67] veth0_vlan: left promiscuous mode [ 261.370073][ T6095] udevd[6095]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 261.399169][ T6151] udevd[6151]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 261.399937][ T5809] udevd[5809]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 261.402367][ T5892] udevd[5892]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 261.422407][ T6430] udevd[6430]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory [ 261.424690][ T6428] udevd[6428]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory [ 261.453883][ T5883] udevd[5883]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 261.463767][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop3p14, 10) failed: No such file or directory [ 261.489507][ T5824] udevd[5824]: inotify_add_watch(7, /dev/loop3p18, 10) failed: No such file or directory [ 261.490748][ T5800] udevd[5800]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 263.153468][ T67] team0 (unregistering): Port device team_slave_1 removed [ 263.204508][ T67] team0 (unregistering): Port device team_slave_0 removed [ 263.378851][ T6899] team0: Port device team_slave_0 added [ 263.379028][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.4.401'. [ 263.381487][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 263.505429][ T6899] team0: Port device team_slave_1 added [ 263.945896][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.945914][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.945946][ T6899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.951675][ T6899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.951692][ T6899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.951723][ T6899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.181158][ T6899] hsr_slave_0: entered promiscuous mode [ 265.201858][ T6899] hsr_slave_1: entered promiscuous mode [ 265.217531][ T6899] debugfs: 'hsr0' already exists in 'hsr' [ 265.217556][ T6899] Cannot create hsr debugfs directory [ 267.876275][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.424'. [ 268.869686][ T7308] netlink: 56 bytes leftover after parsing attributes in process `syz.1.429'. [ 271.779482][ T7328] loop1: detected capacity change from 0 to 256 [ 271.797911][ T7328] vfat: Unknown parameter 'obj_user' [ 273.500450][ T7325] loop2: detected capacity change from 0 to 4096 [ 273.875200][ T7325] ntfs3(loop2): ino=3, mi_enum_attr [ 273.875332][ T7325] ntfs3(loop2): Failed to load $Volume (-2). [ 275.172114][ T822] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 277.208728][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 277.262660][ T822] usb 5-1: Using ep0 maxpacket: 16 [ 277.278330][ T822] usb 5-1: New USB device found, idVendor=0471, idProduct=0307, bcdDevice=61.a4 [ 277.278360][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.319055][ T822] usb 5-1: config 0 descriptor?? [ 277.336901][ T822] pwc: Philips PCVC675K (Vesta) USB webcam detected. [ 277.676468][ T7366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.757801][ T7366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.792095][ T822] pwc: send_video_command error -71 [ 277.792113][ T822] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 277.792224][ T822] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 277.875394][ T822] usb 5-1: USB disconnect, device number 4 [ 278.429410][ T6899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.551903][ T6899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 278.629075][ T6899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.755249][ T7386] overlayfs: overlapping lowerdir path [ 278.779065][ T6899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 278.797482][ T6899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.972574][ T822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 278.989952][ T6899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.819648][ T822] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 280.819682][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.948255][ T822] usb 2-1: config 0 descriptor?? [ 280.952012][ T7393] tipc: Started in network mode [ 280.952028][ T7393] tipc: Node identity , cluster identity 4711 [ 280.952140][ T7393] tipc: Failed to obtain node identity [ 280.952165][ T7393] tipc: Enabling of bearer rejected, failed to enable media [ 280.955920][ T6899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.009786][ T6899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.157353][ T822] usb 2-1: Cannot read MAC address [ 281.157633][ T822] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 281.261281][ T9] usb 2-1: USB disconnect, device number 6 [ 281.937091][ T38] audit: type=1326 audit(1780263328.555:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 281.937157][ T38] audit: type=1326 audit(1780263328.555:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 281.939214][ T38] audit: type=1326 audit(1780263328.555:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 281.947242][ T38] audit: type=1326 audit(1780263328.555:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 281.949329][ T38] audit: type=1326 audit(1780263328.575:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 281.949383][ T38] audit: type=1326 audit(1780263328.575:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 281.949433][ T38] audit: type=1326 audit(1780263328.575:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674482ce59 code=0x7ffc0000 [ 282.222023][ T7421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 282.254856][ T38] audit: type=1326 audit(1780263328.575:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7418 comm="syz.2.458" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f67447ed68e code=0x7ffc0000 [ 283.029635][ T6899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.637526][ T6899] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.731533][ T1379] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.731952][ T1379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.827790][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.827918][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.969164][ T7447] loop1: detected capacity change from 0 to 2048 [ 286.014561][ T7449] loop3: detected capacity change from 0 to 512 [ 286.114866][ T7447] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 286.115628][ T7447] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 286.164953][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.165085][ T7449] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.787425][ T38] audit: type=1800 audit(1780263333.365:73): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.467" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 286.826833][ T7462] loop2: detected capacity change from 0 to 4096 [ 286.829417][ T7462] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 286.829975][ T7462] ntfs3(loop2): It is recommended to use chkdsk. [ 288.064279][ T7475] process 'syz.4.472' launched './file2' with NULL argv: empty string added [ 289.628313][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 289.678652][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 289.692269][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 289.737803][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 289.740494][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.949045][ T7488] binder: 7487:7488 ioctl 4018620d 0 returned -22 [ 290.080896][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.233470][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.257722][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.272697][ T7497] binder: 7495:7497 ioctl c0306201 2000000001c0 returned -14 [ 290.413073][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 290.572218][ T7508] loop3: detected capacity change from 0 to 512 [ 290.599646][ T7504] loop4: detected capacity change from 0 to 1024 [ 290.607660][ T7508] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.614869][ T7504] hfsplus: Unknown parameter '/Vij' [ 290.772595][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 291.768838][ T7508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 291.768999][ T7508] System zones: 1-12 [ 292.785818][ T7508] EXT4-fs (loop3): 1 truncate cleaned up [ 292.799684][ T7508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.982067][ T5619] Bluetooth: hci5: command tx timeout [ 294.421567][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 294.421608][ T9] usb 3-1: can't read configurations, error -71 [ 294.858356][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.916579][ T7529] capability: warning: `syz.2.481' uses deprecated v2 capabilities in a way that may be insecure [ 295.383933][ T7539] loop1: detected capacity change from 0 to 1024 [ 295.410372][ T7539] EXT4-fs: Ignoring removed bh option [ 295.554326][ T7539] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 296.052003][ T5619] Bluetooth: hci5: command tx timeout [ 296.112312][ T7563] tipc: Started in network mode [ 296.112332][ T7563] tipc: Node identity , cluster identity 4711 [ 296.124195][ T7563] tipc: Failed to obtain node identity [ 296.124294][ T7563] tipc: Enabling of bearer rejected, failed to enable media [ 297.056677][ T5619] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 297.283719][ T5619] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 297.329646][ T7574] loop3: detected capacity change from 0 to 2048 [ 297.390408][ T7574] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 297.512783][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.518707][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.713455][ T5625] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 297.806683][ T7582] futex_wake_op: syz.1.495 tries to shift op by 144; fix this program [ 298.724646][ T5619] Bluetooth: hci5: command tx timeout [ 298.788219][ T5625] usb 4-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 298.788261][ T5625] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.814110][ T5625] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 298.814139][ T5625] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 298.814161][ T5625] usb 4-1: SerialNumber: syz [ 299.109486][ T7588] tmpfs: Bad value for 'mpol' [ 299.216920][ T5625] usb 4-1: 0:2 : does not exist [ 299.285237][ T7584] loop4: detected capacity change from 0 to 4096 [ 299.366947][ T5625] usb 4-1: USB disconnect, device number 11 [ 299.444853][ T7584] ntfs3(loop4): Primary boot: invalid bytes per sector 0. [ 299.592339][ T7584] ntfs3(loop4): try to read out of volume at offset 0x1ffe00 [ 299.611182][ T7601] fuseblk: fd is not a fuse device [ 299.727461][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.572614][ T1246] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 300.889118][ T5619] Bluetooth: hci5: command tx timeout [ 301.361129][ T1246] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 301.361165][ T1246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.361188][ T1246] usb 5-1: Product: syz [ 301.361204][ T1246] usb 5-1: Manufacturer: syz [ 301.361220][ T1246] usb 5-1: SerialNumber: syz [ 301.394431][ T1246] usb 5-1: config 0 descriptor?? [ 301.422013][ T1246] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 005 [ 301.758227][ T7619] dvmrp0: entered allmulticast mode [ 301.829972][ T1246] (null): failure reading functionality [ 302.035351][ T7630] futex_wake_op: syz.3.507 tries to shift op by 144; fix this program [ 303.211137][ T1246] i2c i2c-1: connected i2c-tiny-usb device [ 303.318718][ T7633] input: syz0 as /devices/virtual/input/input7 [ 303.417164][ T10] usb 5-1: USB disconnect, device number 5 [ 304.963064][ T7682] futex_wake_op: syz.4.517 tries to shift op by 144; fix this program [ 307.392322][ T7686] loop4: detected capacity change from 0 to 32768 [ 307.446483][ T7686] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 307.485084][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.522'. [ 307.626161][ T7686] XFS (loop4): Ending clean mount [ 307.929908][ T7716] loop5: detected capacity change from 0 to 7 [ 307.968459][ T7716] Dev loop5: unable to read RDB block 7 [ 307.968501][ T7716] loop5: unable to read partition table [ 307.968713][ T7716] loop5: partition table beyond EOD, truncated [ 307.971925][ T7716] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 308.057094][ T5613] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 308.296857][ T7715] tipc: Enabling of bearer rejected, failed to enable media [ 308.537693][ T7727] futex_wake_op: syz.1.528 tries to shift op by 144; fix this program [ 309.751140][ T7738] futex_wake_op: syz.2.530 tries to shift op by -1; fix this program [ 311.145950][ T7485] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.146457][ T7485] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.146740][ T7485] bridge_slave_0: entered allmulticast mode [ 311.150559][ T7485] bridge_slave_0: entered promiscuous mode [ 311.159083][ T7485] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.159432][ T7485] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.159755][ T7485] bridge_slave_1: entered allmulticast mode [ 311.163794][ T7485] bridge_slave_1: entered promiscuous mode [ 311.237811][ T7485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.246336][ T7485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.389491][ T7485] team0: Port device team_slave_0 added [ 311.401942][ T7485] team0: Port device team_slave_1 added [ 311.464018][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.464037][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.464069][ T7485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.472115][ T7485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.472131][ T7485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.472161][ T7485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.982022][ T7485] hsr_slave_0: entered promiscuous mode [ 312.011413][ T7485] hsr_slave_1: entered promiscuous mode [ 312.023041][ T7485] debugfs: 'hsr0' already exists in 'hsr' [ 312.023069][ T7485] Cannot create hsr debugfs directory [ 312.825515][ T7769] netlink: 3 bytes leftover after parsing attributes in process `syz.4.538'. [ 313.105787][ T7769] loop4: detected capacity change from 0 to 4096 [ 313.190634][ T7776] futex_wake_op: syz.3.540 tries to shift op by 144; fix this program [ 315.311444][ T7769] 9p: Bad value for 'rfdno' [ 317.078483][ T7797] loop4: detected capacity change from 0 to 1024 [ 317.097198][ T7797] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 317.171293][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.171415][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.508151][ T7797] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.550: Invalid block bitmap block 0 in block_group 0 [ 317.508192][ T7797] loop4: lost filesystem error report for type 5 error -117 [ 317.514342][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 317.514366][ C1] EXT4-fs (loop4): initial error at time 1780263365: ext4_read_block_bitmap_nowait:483 [ 317.514393][ C1] EXT4-fs (loop4): last error at time 1780263365: ext4_read_block_bitmap_nowait:483 [ 317.689903][ T7797] Quota error (device loop4): write_blk: dquota write failed [ 317.689966][ T7797] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 317.690049][ T7797] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.550: Failed to acquire dquot type 0 [ 317.690073][ T7797] loop4: lost filesystem error report for type 5 error -117 [ 317.734519][ T7797] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.550: Freeing blocks not in datazone - block = 0, count = 4096 [ 317.734603][ T7797] loop4: lost filesystem error report for type 5 error -117 [ 317.957939][ T7797] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.550: Invalid inode bitmap blk 0 in block_group 0 [ 317.957981][ T7797] loop4: lost filesystem error report for type 5 error -117 [ 317.959627][ T7797] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 317.959652][ T7797] loop4: lost filesystem error report for type 5 error -117 [ 317.971953][ T7797] EXT4-fs (loop4): 1 orphan inode deleted [ 318.029488][ T5890] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 318.029625][ T5890] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 0 [ 318.029650][ T5890] loop4: lost filesystem error report for type 5 error -117 [ 318.093638][ T7797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.367323][ T7811] tipc: Enabling of bearer rejected, failed to enable media [ 318.367971][ T7797] sch_tbf: burst 56 is lower than device lo mtu (65550) ! [ 318.677955][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.938778][ T7821] trusted_key: encrypted_key: insufficient parameters specified [ 318.962354][ T7821] syz_tun: entered allmulticast mode [ 318.970744][ T7821] pim6reg: entered allmulticast mode [ 319.251643][ T7823] loop1: detected capacity change from 0 to 512 [ 320.248584][ T7823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 320.372188][ T7823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 320.372311][ T7823] System zones: 1-12 [ 320.416435][ T7823] EXT4-fs (loop1): 1 truncate cleaned up [ 320.496689][ T7823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.081159][ T7840] netlink: 32 bytes leftover after parsing attributes in process `syz.4.563'. [ 322.147791][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.266103][ T44] bridge_slave_1: left allmulticast mode [ 322.266138][ T44] bridge_slave_1: left promiscuous mode [ 322.266431][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.466560][ T44] bridge_slave_0: left allmulticast mode [ 322.466598][ T44] bridge_slave_0: left promiscuous mode [ 322.507013][ T7846] loop1: detected capacity change from 0 to 64 [ 322.531681][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.615174][ T7846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'. [ 323.256783][ T7858] trusted_key: encrypted_key: insufficient parameters specified [ 323.287552][ T7858] afs: Unknown parameter 'measure' [ 323.813423][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.877762][ T38] audit: type=1326 audit(1780263371.503:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.2.572" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f674482ce59 code=0x0 [ 323.907821][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.944960][ T44] bond0 (unregistering): Released all slaves [ 324.385186][ T7873] loop3: detected capacity change from 0 to 512 [ 324.388687][ T7873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 324.441719][ T7873] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 324.441877][ T7873] System zones: 1-12 [ 324.744292][ T7891] loop1: detected capacity change from 0 to 128 [ 324.750078][ T7891] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 324.804018][ T7873] EXT4-fs (loop3): 1 truncate cleaned up [ 324.860784][ T7873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.164280][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.451744][ T7906] loop5: detected capacity change from 0 to 7 [ 326.461982][ T7906] Dev loop5: unable to read RDB block 7 [ 326.462022][ T7906] loop5: unable to read partition table [ 326.462215][ T7906] loop5: partition table beyond EOD, truncated [ 326.462233][ T7906] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 326.592204][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 326.613016][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 328.006751][ T7913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 328.066839][ T44] hsr_slave_0: left promiscuous mode [ 328.078407][ T7916] netlink: 56 bytes leftover after parsing attributes in process `syz.4.581'. [ 328.130560][ T44] hsr_slave_1: left promiscuous mode [ 328.131701][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.176710][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.456314][ T7920] loop4: detected capacity change from 0 to 2048 [ 328.481033][ T7920] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 328.481793][ T7920] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2) [ 329.393583][ T44] team0 (unregistering): Port device team_slave_1 removed [ 329.473633][ T44] team0 (unregistering): Port device team_slave_0 removed [ 330.444339][ T7927] tipc: Started in network mode [ 330.444359][ T7927] tipc: Node identity , cluster identity 4711 [ 330.444750][ T7927] tipc: Failed to obtain node identity [ 330.444834][ T7927] tipc: Enabling of bearer rejected, failed to enable media [ 331.034422][ T5749] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 331.052047][ T7952] loop1: detected capacity change from 0 to 512 [ 331.063524][ T7952] EXT4-fs: Ignoring removed i_version option [ 331.145714][ T7952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.183555][ T5749] usb 4-1: Using ep0 maxpacket: 16 [ 331.188184][ T7952] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.593: invalid indirect mapped block 4294967295 (level 1) [ 331.188411][ T7952] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 331.196023][ T5749] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 331.196053][ T5749] usb 4-1: config 0 has no interface number 0 [ 331.196101][ T5749] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 331.196130][ T5749] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 331.199409][ T5749] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 331.199439][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.199461][ T5749] usb 4-1: Product: syz [ 331.199477][ T5749] usb 4-1: Manufacturer: syz [ 331.199493][ T5749] usb 4-1: SerialNumber: syz [ 331.218998][ T5749] usb 4-1: config 0 descriptor?? [ 331.220027][ T7946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.220224][ T7946] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.430905][ T7944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.431069][ T7944] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.434360][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 331.434380][ C1] EXT4-fs (loop1): initial error at time 1780263378: ext4_free_branches:1023: inode 11 [ 331.434411][ C1] EXT4-fs (loop1): last error at time 1780263378: ext4_free_branches:1023: inode 11 [ 331.498506][ T7952] EXT4-fs (loop1): Remounting filesystem read-only [ 331.499968][ T7952] EXT4-fs (loop1): 2 truncates cleaned up [ 331.515443][ T7952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.632391][ T5749] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 331.643115][ T5749] asix 4-1:0.34: probe with driver asix failed with error -61 [ 331.775888][ T822] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 331.954298][ T822] usb 2-1: Using ep0 maxpacket: 8 [ 331.965656][ T822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 331.965688][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 331.965710][ T822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.965732][ T822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.965772][ T822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 331.965794][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.188503][ T7960] loop4: detected capacity change from 0 to 512 [ 332.248987][ T822] usb 2-1: GET_CAPABILITIES returned 0 [ 332.249038][ T822] usbtmc 2-1:16.0: can't read capabilities [ 332.312689][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.312816][ T7960] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.395313][ T5749] usb 4-1: USB disconnect, device number 12 [ 332.735672][ T38] audit: type=1800 audit(1780263380.293:75): pid=7960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.595" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 332.857658][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.858224][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.448487][ T5734] usb 2-1: USB disconnect, device number 7 [ 333.515783][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.706891][ T7988] loop3: detected capacity change from 0 to 256 [ 334.000799][ T7988] FAT-fs (loop3): Directory bread(block 64) failed [ 334.000838][ T7988] FAT-fs (loop3): Directory bread(block 65) failed [ 334.000951][ T7988] FAT-fs (loop3): Directory bread(block 66) failed [ 334.001120][ T7988] FAT-fs (loop3): Directory bread(block 67) failed [ 334.001252][ T7988] FAT-fs (loop3): Directory bread(block 68) failed [ 334.001279][ T7988] FAT-fs (loop3): Directory bread(block 69) failed [ 334.001385][ T7988] FAT-fs (loop3): Directory bread(block 70) failed [ 334.001411][ T7988] FAT-fs (loop3): Directory bread(block 71) failed [ 334.007347][ T7988] FAT-fs (loop3): Directory bread(block 72) failed [ 334.017361][ T7988] FAT-fs (loop3): Directory bread(block 73) failed [ 335.860402][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.073887][ T5625] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 336.229424][ T5625] usb 4-1: Using ep0 maxpacket: 32 [ 336.235316][ T5625] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 336.235386][ T5625] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 336.235437][ T5625] usb 4-1: config 0 has no interface number 0 [ 336.235454][ T5625] usb 4-1: config 0 has no interface number 1 [ 336.235624][ T5625] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 336.235725][ T5625] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 336.235820][ T5625] usb 4-1: config 0 interface 255 has no altsetting 0 [ 336.275059][ T5625] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 336.275146][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.275217][ T5625] usb 4-1: Product: syz [ 336.275276][ T5625] usb 4-1: Manufacturer: syz [ 336.275319][ T5625] usb 4-1: SerialNumber: syz [ 336.381176][ T5625] usb 4-1: config 0 descriptor?? [ 336.516918][ T5625] usb 4-1: selecting invalid altsetting 0 [ 336.516943][ T5625] usb 4-1: Could not set interface, error -22 [ 336.735372][ T5625] usb 4-1: USB disconnect, device number 13 [ 336.881991][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.609'. [ 337.131779][ T7485] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.185236][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.186472][ T7485] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.226329][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.228009][ T7485] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.369955][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.404122][ T7485] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.592087][ T8044] syz.4.605 uses obsolete (PF_INET,SOCK_PACKET) [ 337.595868][ T7485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.950035][ T8012] loop1: detected capacity change from 0 to 32768 [ 339.040960][ T8012] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 339.044359][ T8012] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 339.044880][ T8012] XFS (loop1): log mount failed [ 339.743748][ T8082] loop3: detected capacity change from 0 to 512 [ 339.758181][ T8082] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 339.789433][ T8082] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 339.789591][ T8082] System zones: 1-12 [ 339.811077][ T8082] EXT4-fs (loop3): 1 truncate cleaned up [ 339.891988][ T8082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.506507][ T38] audit: type=1326 audit(1780263388.133:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.2.618" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f674482ce59 code=0x0 [ 340.904265][ T7485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.084750][ T7485] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.126075][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.622'. [ 341.153204][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.153377][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.188226][ T8109] veth1_to_hsr: entered promiscuous mode [ 341.390168][ T8112] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 341.434005][ T8110] loop1: detected capacity change from 0 to 8192 [ 341.574976][ T8110] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 341.630759][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.630930][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.703220][ T8097] loop4: detected capacity change from 0 to 32768 [ 341.764443][ T8097] XFS (loop4): Metadata CRC error detected at xfs_sb_read_verify+0x368/0x4d0, xfs_sb block 0x0 [ 341.764502][ T8097] XFS (loop4): Unmount and run xfs_repair [ 341.764518][ T8097] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 341.764539][ T8097] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 341.764557][ T8097] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 341.764575][ T8097] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 341.764592][ T8097] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00 ................ [ 341.764609][ T8097] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02 ................ [ 341.764627][ T8097] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 341.764643][ T8097] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 341.764661][ T8097] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 341.764724][ T8097] XFS (loop4): SB validate failed with error -74. [ 341.927125][ T38] audit: type=1800 audit(1780263390.545:77): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.622" name="file2" dev="loop1" ino=1048617 res=0 errno=0 [ 342.115630][ T5892] udevd[5892]: incorrect xfs checksum on /dev/loop4 [ 343.073501][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.280093][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 343.280128][ T8144] block nbd0: Unsupported socket: should be TCP or UNIX. [ 344.808088][ T7485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.855286][ T8151] loop4: detected capacity change from 0 to 131072 [ 344.860356][ T8151] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 344.860378][ T8151] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 344.900412][ T8151] F2FS-fs (loop4): invalid crc value [ 345.023223][ T5836] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 345.159149][ T8151] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 345.188545][ T8151] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 345.188596][ T8151] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 345.206512][ T5836] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 345.206538][ T5836] usb 2-1: config 9 has no interface number 0 [ 345.206565][ T5836] usb 2-1: config 9 interface 129 has no altsetting 0 [ 345.240043][ T5836] usb 2-1: New USB device found, idVendor=154b, idProduct=f00b, bcdDevice= 9.b0 [ 345.240078][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.240100][ T5836] usb 2-1: Product: syz [ 345.240116][ T5836] usb 2-1: Manufacturer: syz [ 345.240133][ T5836] usb 2-1: SerialNumber: syz [ 345.301508][ T38] audit: type=1800 audit(1780263393.915:78): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.632" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 345.550660][ T8182] loop3: detected capacity change from 0 to 512 [ 345.568080][ T8182] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 345.569676][ T5836] usb-storage 2-1:9.129: USB Mass Storage device detected [ 345.603614][ T8182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 345.603751][ T8182] System zones: 1-12 [ 345.657141][ T8182] EXT4-fs (loop3): 1 truncate cleaned up [ 345.698174][ T8182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.735857][ T5836] usb-storage 2-1:9.129: Quirks match for vid 154b pid f00b: 2000000 [ 346.504755][ T8199] netlink: 56 bytes leftover after parsing attributes in process `syz.2.641'. [ 346.877023][ T5836] usb 2-1: USB disconnect, device number 8 [ 347.035770][ T5892] udevd[5892]: setting owner of /dev/bus/usb/002/008 to uid=0, gid=0 failed: No such file or directory [ 347.114470][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.312994][ T7485] veth0_vlan: entered promiscuous mode [ 349.096859][ T7485] veth1_vlan: entered promiscuous mode [ 349.440325][ T7485] veth0_macvtap: entered promiscuous mode [ 350.021417][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 350.078255][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 350.088688][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 350.136593][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 350.158306][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 350.622910][ T8227] loop1: detected capacity change from 0 to 256 [ 350.624022][ T8227] exfat: Deprecated parameter 'utf8' [ 351.006917][ T8227] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 351.925255][ T5734] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 352.227449][ T5619] Bluetooth: hci3: command tx timeout [ 352.726414][ T5734] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 352.726487][ T5734] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.726510][ T5734] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 352.802482][ T5734] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 352.802515][ T5734] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.802538][ T5734] usb 4-1: Product: syz [ 352.802554][ T5734] usb 4-1: Manufacturer: syz [ 352.802570][ T5734] usb 4-1: SerialNumber: syz [ 353.585849][ T8257] loop4: detected capacity change from 0 to 512 [ 353.590707][ T8257] journal_path: Lookup failure for './file/file0/..//file0' [ 353.590765][ T8257] EXT4-fs: error: could not find journal device path [ 354.615240][ T5619] Bluetooth: hci3: command tx timeout [ 354.667352][ T5734] usb 4-1: USB disconnect, device number 14 [ 355.243713][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.382131][ T5619] Bluetooth: hci3: command tx timeout [ 357.589968][ T8277] loop3: detected capacity change from 0 to 512 [ 357.647034][ T8277] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 357.685827][ T8277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 357.686002][ T8277] System zones: 1-12 [ 357.708505][ T8277] EXT4-fs (loop3): 1 truncate cleaned up [ 357.728778][ T8277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.729873][ T8286] netlink: 56 bytes leftover after parsing attributes in process `syz.4.666'. [ 358.959338][ T5749] IPVS: starting estimator thread 0... [ 359.009184][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.087027][ T8305] IPVS: using max 9 ests per chain, 21600 per kthread [ 359.402589][ T5619] Bluetooth: hci3: command tx timeout [ 359.822125][ T8300] loop4: detected capacity change from 0 to 32768 [ 360.635205][ T8300] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 360.785633][ T8300] XFS (loop4): Ending clean mount [ 360.988439][ T5613] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 360.990144][ T8334] loop1: detected capacity change from 0 to 512 [ 361.242697][ T8334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.242836][ T8334] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.324167][ T8334] fscrypt (loop1, inode 15): Error -61 getting encryption context [ 361.426875][ T8346] qrtr: Invalid version 73 [ 361.706246][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.224614][ T8366] loop4: detected capacity change from 0 to 512 [ 362.310718][ T8366] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 362.425509][ T8366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 362.425637][ T8366] System zones: 1-12 [ 362.475168][ T8366] EXT4-fs (loop4): 1 truncate cleaned up [ 362.501224][ T8366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.763962][ T8382] loop1: detected capacity change from 0 to 512 [ 363.799129][ T8382] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.799363][ T8382] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 363.799386][ T8382] EXT4-fs (loop1): group descriptors corrupted! [ 363.939466][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.941981][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'. [ 364.062895][ T38] audit: type=1326 audit(1780263412.685:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.063363][ T38] audit: type=1326 audit(1780263412.685:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.063736][ T38] audit: type=1326 audit(1780263412.685:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f935ed68e code=0x7ffc0000 [ 364.064388][ T38] audit: type=1326 audit(1780263412.685:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.064684][ T38] audit: type=1326 audit(1780263412.685:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.065018][ T38] audit: type=1326 audit(1780263412.685:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.065430][ T38] audit: type=1326 audit(1780263412.685:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.065861][ T38] audit: type=1326 audit(1780263412.685:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.066245][ T38] audit: type=1326 audit(1780263412.685:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.066778][ T38] audit: type=1326 audit(1780263412.685:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz.1.690" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 364.867470][ T8400] loop4: detected capacity change from 0 to 32768 [ 364.879946][ T8400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.693 (8400) [ 364.915835][ T8400] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.916003][ T8400] BTRFS info (device loop4): using crc32c checksum algorithm [ 365.002175][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 365.085317][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.085759][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.086103][ T8219] bridge_slave_0: entered allmulticast mode [ 365.155166][ T8219] bridge_slave_0: entered promiscuous mode [ 365.448011][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.448440][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.452729][ T8219] bridge_slave_1: entered allmulticast mode [ 365.500016][ T8219] bridge_slave_1: entered promiscuous mode [ 365.695490][ T1379] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 365.701590][ T8420] loop1: detected capacity change from 0 to 4096 [ 365.735768][ T8420] ntfs3: Unknown parameter 'dont_appraise' [ 365.767964][ T8400] BTRFS error (device loop4): failed to load root extent [ 365.768053][ T8400] BTRFS warning (device loop4): try to load backup roots slot 1 [ 365.797518][ T159] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 365.797639][ T8400] BTRFS warning (device loop4): couldn't read tree root [ 365.797661][ T8400] BTRFS warning (device loop4): try to load backup roots slot 2 [ 365.798375][ T1443] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 365.803131][ T8400] BTRFS warning (device loop4): couldn't read tree root [ 365.803155][ T8400] BTRFS warning (device loop4): try to load backup roots slot 3 [ 365.872469][ T8400] BTRFS info (device loop4): checking UUID tree [ 365.877395][ T8400] BTRFS info (device loop4): setting nodatasum [ 365.877419][ T8400] BTRFS info (device loop4): setting nodatacow [ 365.877436][ T8400] BTRFS info (device loop4): enabling ssd optimizations [ 365.877478][ T8400] BTRFS info (device loop4): turning on flush-on-commit [ 365.877497][ T8400] BTRFS info (device loop4): turning on async discard [ 365.877514][ T8400] BTRFS info (device loop4): enabling free space tree [ 365.877555][ T8400] BTRFS info (device loop4): trying to use backup root at mount time [ 365.877638][ T8400] BTRFS info (device loop4): max_inline set to 0 [ 366.103508][ T8400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 367.345158][ T8431] tipc: Enabling of bearer rejected, failed to enable media [ 367.543162][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.673987][ T5835] bridge_slave_1: left allmulticast mode [ 367.674038][ T5835] bridge_slave_1: left promiscuous mode [ 367.782123][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.808149][ T8448] loop3: detected capacity change from 0 to 512 [ 367.980715][ T8448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.980840][ T8448] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.131794][ T5835] bridge_slave_0: left allmulticast mode [ 368.182676][ T5835] bridge_slave_0: left promiscuous mode [ 368.183000][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.332980][ T5613] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.710148][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 369.099502][ T8476] futex_wake_op: syz.1.711 tries to shift op by 144; fix this program [ 370.119487][ T5619] Bluetooth: hci3: command tx timeout [ 371.512849][ T8489] loop4: detected capacity change from 0 to 512 [ 371.532382][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.540712][ T8489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 371.643370][ T8489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 371.643519][ T8489] System zones: 1-12 [ 371.706758][ T8489] EXT4-fs (loop4): 1 truncate cleaned up [ 371.710511][ T8489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.552319][ T8498] loop3: detected capacity change from 0 to 4096 [ 372.566042][ T8498] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 372.789935][ T8498] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 372.810099][ T8500] loop1: detected capacity change from 0 to 512 [ 372.821496][ T8500] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 372.861497][ T8498] ntfs3(loop3): $Secure::$SDH is corrupted. [ 372.861584][ T8498] ntfs3(loop3): Failed to initialize $Secure (-22). [ 372.879191][ T8500] EXT4-fs (loop1): 1 truncate cleaned up [ 372.882067][ T8500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.970574][ T8500] EXT4-fs error (device loop1): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.1.718: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 373.000926][ T8500] EXT4-fs error (device loop1) in ext4_delete_entry:2744: Corrupt filesystem [ 373.001479][ T8500] EXT4-fs warning (device loop1): ext4_rename_delete:3739: inode #2: comm syz.1.718: Deleting old file: nlink 4, error=-117 [ 373.110209][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.197979][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.280320][ T5835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.354582][ T5835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.418369][ T5835] bond0 (unregistering): Released all slaves [ 373.448834][ T8506] loop4: detected capacity change from 0 to 128 [ 373.468310][ T8506] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 373.669360][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.669728][ T8449] netlink: 'syz.2.705': attribute type 12 has an invalid length. [ 373.669750][ T8449] netlink: 'syz.2.705': attribute type 29 has an invalid length. [ 373.669765][ T8449] netlink: 148 bytes leftover after parsing attributes in process `syz.2.705'. [ 373.669796][ T8449] netlink: 'syz.2.705': attribute type 1 has an invalid length. [ 373.669810][ T8449] netlink: 'syz.2.705': attribute type 2 has an invalid length. [ 373.669822][ T8449] netlink: 11 bytes leftover after parsing attributes in process `syz.2.705'. [ 373.879369][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 374.111872][ T8520] hsr0: entered promiscuous mode [ 374.251995][ T8520] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 374.279473][ T8219] team0: Port device team_slave_0 added [ 374.951698][ T8504] loop3: detected capacity change from 0 to 32768 [ 375.038399][ T8219] team0: Port device team_slave_1 added [ 375.070811][ T8504] (syz.3.721,8504,0):ocfs2_slot_map_physical_size:227 ERROR: Slot map file is too small! (size 2, needed 8) [ 376.849341][ T8527] loop1: detected capacity change from 0 to 32768 [ 376.859883][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.859900][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.859931][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.152342][ T8527] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 377.340179][ T8527] XFS (loop1): Ending clean mount [ 378.184274][ T5608] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 378.263476][ T5734] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 378.365741][ T5835] hsr_slave_0: left promiscuous mode [ 378.403446][ T5835] hsr_slave_1: left promiscuous mode [ 378.404617][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.451654][ T5734] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.451719][ T5734] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.451745][ T5734] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 378.483298][ T5734] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.483396][ T5734] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 378.483458][ T5734] usb 4-1: SerialNumber: syz [ 378.526200][ T5835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.639920][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.639996][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689718][ T5734] hub 4-1:1.0: bad descriptor, ignoring hub [ 378.689745][ T5734] hub 4-1:1.0: probe with driver hub failed with error -5 [ 378.690523][ T5734] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 378.691309][ T5734] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 378.924713][ T5734] usb 4-1: USB disconnect, device number 15 [ 379.144913][ T8565] loop4: detected capacity change from 0 to 512 [ 379.151755][ T8565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.182739][ T5835] veth0_macvtap: left promiscuous mode [ 379.183053][ T5835] veth1_vlan: left promiscuous mode [ 379.183229][ T5835] veth0_vlan: left promiscuous mode [ 379.209844][ T8565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 379.209989][ T8565] System zones: 1-12 [ 379.316328][ T8565] EXT4-fs (loop4): 1 truncate cleaned up [ 379.351209][ T8565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.621174][ T8579] loop3: detected capacity change from 0 to 512 [ 380.633866][ T8579] journal_path: Lookup failure for './file/file0/..//file0' [ 380.633899][ T8579] EXT4-fs: error: could not find journal device path [ 380.928645][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.872694][ T5741] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 382.900018][ T5741] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 382.900053][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.900075][ T5741] usb 2-1: Product: syz [ 382.900090][ T5741] usb 2-1: Manufacturer: syz [ 382.900106][ T5741] usb 2-1: SerialNumber: syz [ 385.337409][ T5741] usb 2-1: can't set config #1, error -71 [ 385.364776][ T5741] usb 2-1: USB disconnect, device number 9 [ 385.427828][ T8594] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 385.531924][ T8593] loop3: detected capacity change from 0 to 512 [ 385.557472][ T8599] netlink: 56 bytes leftover after parsing attributes in process `syz.4.750'. [ 385.864700][ T8605] FAULT_INJECTION: forcing a failure. [ 385.864700][ T8605] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 385.864745][ T8605] CPU: 0 UID: 0 PID: 8605 Comm: syz.3.752 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 385.864772][ T8605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.864794][ T8605] Call Trace: [ 385.864806][ T8605] [ 385.864816][ T8605] dump_stack_lvl+0xe8/0x150 [ 385.864852][ T8605] should_fail_ex+0x46b/0x600 [ 385.864928][ T8605] _copy_from_user+0x2d/0xb0 [ 385.865010][ T8605] __sys_bpf+0x2e7/0xd90 [ 385.865096][ T8605] ? __pfx___sys_bpf+0x10/0x10 [ 385.865135][ T8605] ? lockdep_hardirqs_on+0x7a/0x110 [ 385.865185][ T8605] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 385.865268][ T8605] ? ksys_write+0x248/0x270 [ 385.865308][ T8605] ? __pfx_ksys_write+0x10/0x10 [ 385.865348][ T8605] __x64_sys_bpf+0xba/0xd0 [ 385.865374][ T8605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.865399][ T8605] do_syscall_64+0x174/0x580 [ 385.865421][ T8605] ? trace_irq_disable+0x3b/0x140 [ 385.865501][ T8605] ? clear_bhb_loop+0x40/0x90 [ 385.865530][ T8605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.865553][ T8605] RIP: 0033:0x7fc43d3ece59 [ 385.865574][ T8605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.865595][ T8605] RSP: 002b:00007fc43b646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 385.865619][ T8605] RAX: ffffffffffffffda RBX: 00007fc43d665fa0 RCX: 00007fc43d3ece59 [ 385.865636][ T8605] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 385.865650][ T8605] RBP: 00007fc43b646090 R08: 0000000000000000 R09: 0000000000000000 [ 385.865663][ T8605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.865676][ T8605] R13: 00007fc43d666038 R14: 00007fc43d665fa0 R15: 00007ffd3791f998 [ 385.865710][ T8605] [ 386.157455][ T5835] team0 (unregistering): Port device team_slave_1 removed [ 386.169460][ T8607] loop3: detected capacity change from 0 to 512 [ 386.189362][ T8607] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 386.209496][ T8607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 386.209632][ T8607] System zones: 1-12 [ 386.268651][ T8607] EXT4-fs (loop3): 1 truncate cleaned up [ 386.304928][ T8607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.519728][ T5835] team0 (unregistering): Port device team_slave_0 removed [ 390.254936][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.254954][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.255013][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.572187][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.657301][ T8219] hsr_slave_0: entered promiscuous mode [ 390.659550][ T8219] hsr_slave_1: entered promiscuous mode [ 390.661580][ T8219] debugfs: 'hsr0' already exists in 'hsr' [ 390.661602][ T8219] Cannot create hsr debugfs directory [ 392.530252][ T8645] netlink: 'syz.3.758': attribute type 2 has an invalid length. [ 392.617761][ T8645] trusted_key: encrypted_key: insufficient parameters specified [ 393.705958][ T8627] loop1: detected capacity change from 0 to 32768 [ 393.777371][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.2.764'. [ 393.848572][ T8627] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 393.852380][ T8627] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 393.861790][ T8627] XFS (loop1): log mount failed [ 394.684983][ T8670] loop1: detected capacity change from 0 to 512 [ 394.745360][ T8670] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 394.890443][ T8670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 394.890582][ T8670] System zones: 1-12 [ 394.944610][ T8670] EXT4-fs (loop1): 1 truncate cleaned up [ 394.966546][ T8670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.818726][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 398.185347][ T5608] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.026892][ T8723] loop4: detected capacity change from 0 to 64 [ 403.555737][ T8727] syz.4.781: attempt to access beyond end of device [ 403.555737][ T8727] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 403.555831][ T8727] Buffer I/O error on dev loop4, logical block 512, async page read [ 403.556279][ T8727] syz.4.781: attempt to access beyond end of device [ 403.556279][ T8727] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 403.556299][ T8727] Buffer I/O error on dev loop4, logical block 56576, async page read [ 410.250231][ T38] kauditd_printk_skb: 25 callbacks suppressed [ 410.250252][ T38] audit: type=1326 audit(1780263459.869:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8774 comm="syz.3.791" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc43d3ece59 code=0x0 [ 410.378482][ T8778] loop3: detected capacity change from 0 to 128 [ 410.501608][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.536381][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 410.545644][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 410.576921][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 410.593073][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.878851][ T5619] Bluetooth: hci5: command tx timeout [ 415.792371][ T8814] loop4: detected capacity change from 0 to 512 [ 415.818126][ T8814] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 415.837600][ T8814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 415.837739][ T8814] System zones: 1-12 [ 415.885844][ T5619] Bluetooth: hci5: command tx timeout [ 416.002670][ T8814] EXT4-fs (loop4): 1 truncate cleaned up [ 416.005648][ T8814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.428480][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.964020][ T5619] Bluetooth: hci5: command tx timeout [ 421.117351][ T8857] overlayfs: failed to clone upperpath [ 421.370932][ T5619] Bluetooth: hci5: command tx timeout [ 423.646178][ T8883] loop1: detected capacity change from 0 to 4096 [ 424.345126][ T8883] nilfs2: Unknown parameter 'lsgo[ ˳dc?-\|Oz' [ 424.442921][ T8879] block nbd1: not configured, cannot reconfigure [ 424.519533][ T8893] loop3: detected capacity change from 0 to 512 [ 424.542527][ T8893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 424.587151][ T8893] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 424.587279][ T8893] System zones: 1-12 [ 424.655525][ T8893] EXT4-fs (loop3): 1 truncate cleaned up [ 424.693052][ T8893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.703246][ T8898] loop4: detected capacity change from 0 to 2048 [ 424.840006][ T8898] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 425.435114][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.419190][ T8917] loop3: detected capacity change from 0 to 512 [ 428.497353][ T8918] loop1: detected capacity change from 0 to 512 [ 428.498388][ T8918] EXT4-fs: Ignoring removed nobh option [ 428.506052][ T8918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 428.507071][ T8918] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 428.631656][ T8917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.631753][ T8917] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.856893][ T38] audit: type=1800 audit(1780263478.469:115): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.812" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 430.265108][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.819'. [ 430.303845][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.742851][ T111] bridge_slave_1: left allmulticast mode [ 431.742886][ T111] bridge_slave_1: left promiscuous mode [ 431.747384][ T111] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.991440][ T111] bridge_slave_0: left allmulticast mode [ 431.991479][ T111] bridge_slave_0: left promiscuous mode [ 431.991765][ T111] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.017970][ T8952] loop4: detected capacity change from 0 to 64 [ 432.433535][ T8952] binder: Bad value for 'stats' [ 434.523215][ T111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.623673][ T111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.684847][ T111] bond0 (unregistering): Released all slaves [ 434.802021][ T8962] vlan2: entered promiscuous mode [ 434.958827][ T8969] loop4: detected capacity change from 0 to 1024 [ 434.962372][ T8969] EXT4-fs: Ignoring removed bh option [ 434.983959][ T8969] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 435.484280][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.484563][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.484875][ T8779] bridge_slave_0: entered allmulticast mode [ 435.516941][ T8779] bridge_slave_0: entered promiscuous mode [ 435.820099][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.206760][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.207099][ T8779] bridge_slave_1: entered allmulticast mode [ 436.245335][ T8779] bridge_slave_1: entered promiscuous mode [ 436.638292][ T111] hsr_slave_0: left promiscuous mode [ 436.666985][ T111] hsr_slave_1: left promiscuous mode [ 436.668054][ T111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.741864][ T111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.513828][ T111] team0 (unregistering): Port device team_slave_1 removed [ 439.579344][ T111] team0 (unregistering): Port device team_slave_0 removed [ 440.123492][ T9005] loop3: detected capacity change from 0 to 1024 [ 440.153078][ T9005] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 440.321168][ T8779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.367705][ T8779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.418334][ T9005] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 3: comm syz.3.842: lblock 3 mapped to illegal pblock 3 (length 1) [ 440.418377][ T9005] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.430779][ C0] EXT4-fs (loop3): initial error at time 1780263490: ext4_map_blocks:833: inode 3: block 3 [ 440.430837][ C0] EXT4-fs (loop3): last error at time 1780263490: ext4_map_blocks:833: inode 3: block 3 [ 440.527742][ T9005] Quota error (device loop3): write_blk: dquota write failed [ 440.527766][ T9005] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 440.527901][ T9005] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 440.527970][ T9005] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.842: Failed to acquire dquot type 0 [ 440.527994][ T9005] loop3: lost filesystem error report for type 5 error -117 [ 440.571941][ T9005] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 3: comm syz.3.842: lblock 3 mapped to illegal pblock 3 (length 1) [ 440.572005][ T9005] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.599713][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.599817][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.658408][ T8779] team0: Port device team_slave_0 added [ 440.692230][ T8779] team0: Port device team_slave_1 added [ 440.700169][ T9005] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 440.700252][ T9005] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.842: Failed to acquire dquot type 0 [ 440.700278][ T9005] loop3: lost filesystem error report for type 5 error -117 [ 440.739549][ T9005] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.842: Freeing blocks not in datazone - block = 0, count = 4096 [ 440.739584][ T9005] loop3: lost filesystem error report for type 5 error -117 [ 440.740686][ T9005] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 3: comm syz.3.842: lblock 3 mapped to illegal pblock 3 (length 1) [ 440.740723][ T9005] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 440.995534][ T9005] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 440.995599][ T9005] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.842: Failed to acquire dquot type 0 [ 440.995622][ T9005] loop3: lost filesystem error report for type 5 error -117 [ 441.045518][ T9005] EXT4-fs (loop3): 1 orphan inode deleted [ 441.048062][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.048077][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.048105][ T8779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.138955][ T8779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.138972][ T8779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.139001][ T8779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.251539][ T9005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.515862][ T9005] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 3: comm syz.3.842: lblock 3 mapped to illegal pblock 3 (length 1) [ 441.923988][ T9005] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 441.924066][ T9005] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.842: Failed to acquire dquot type 0 [ 442.046622][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 442.231954][ T9033] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 3: comm syz.3.842: lblock 3 mapped to illegal pblock 3 (length 1) [ 442.264831][ T9033] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 442.264891][ T9033] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.842: Failed to acquire dquot type 0 [ 442.399276][ T9008] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 442.517771][ T8779] hsr_slave_0: entered promiscuous mode [ 442.531952][ T8779] hsr_slave_1: entered promiscuous mode [ 442.538580][ T8779] debugfs: 'hsr0' already exists in 'hsr' [ 442.538605][ T8779] Cannot create hsr debugfs directory [ 442.562816][ T9037] loop1: detected capacity change from 0 to 1024 [ 442.595707][ T5614] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.129711][ T9042] loop8: detected capacity change from 0 to 7 [ 443.217303][ T9042] Dev loop8: unable to read RDB block 7 [ 443.217347][ T9042] loop8: unable to read partition table [ 443.217560][ T9042] loop8: partition table beyond EOD, truncated [ 443.217592][ T9042] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 443.883922][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 444.590852][ T5694] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 447.839954][ T5694] usb 4-1: device descriptor read/all, error -61 [ 447.884355][ T9068] overlayfs: failed to clone upperpath [ 448.014576][ T5694] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 448.232664][ T5694] usb 4-1: device descriptor read/64, error -71 [ 448.343056][ T5694] usb usb4-port1: attempt power cycle [ 448.343542][ T9072] loop4: detected capacity change from 0 to 4096 [ 448.386178][ T9072] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 448.454302][ T9072] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 448.663305][ T9072] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 448.664125][ T9072] ntfs3(loop4): ino=5, mi_enum_attr [ 448.686539][ T5694] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 448.723441][ T5694] usb 4-1: device descriptor read/8, error -71 [ 448.881306][ T9082] loop5: detected capacity change from 0 to 7 [ 448.921194][ T9082] Dev loop5: unable to read RDB block 7 [ 448.921239][ T9082] loop5: unable to read partition table [ 448.921442][ T9082] loop5: partition table beyond EOD, truncated [ 448.921461][ T9082] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 449.299765][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.861'. [ 454.213522][ T9113] overlayfs: failed to clone upperpath [ 456.841565][ T9134] loop1: detected capacity change from 0 to 4096 [ 456.912655][ T9134] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 457.007963][ T9134] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 457.114001][ T9134] ntfs3(loop1): $Secure::$SDH is corrupted. [ 457.114101][ T9134] ntfs3(loop1): Failed to initialize $Secure (-22). [ 457.647778][ T8779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 457.766045][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.768087][ T8779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 458.086599][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.123067][ T8779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 458.229279][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.231246][ T8779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 458.429482][ T8779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.152934][ T5741] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 460.269097][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 460.284097][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 460.352641][ T5741] usb 5-1: Using ep0 maxpacket: 8 [ 460.495076][ T5741] usb 5-1: device descriptor read/all, error -71 [ 461.117597][ T8779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.218413][ T9198] loop4: detected capacity change from 0 to 512 [ 461.260656][ T9198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 461.289341][ T9198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 461.289477][ T9198] System zones: 1-12 [ 461.310428][ T9198] EXT4-fs (loop4): 1 truncate cleaned up [ 461.337243][ T9198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.377990][ T8779] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.520204][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.520494][ T5835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.693978][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.744657][ T1379] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.744818][ T1379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.749735][ T5694] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 465.932745][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 465.960750][ T5694] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 465.960782][ T5694] usb 4-1: config 0 has no interface number 0 [ 465.960833][ T5694] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.057345][ T5694] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 466.057380][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.057402][ T5694] usb 4-1: Product: syz [ 466.057427][ T5694] usb 4-1: Manufacturer: syz [ 466.057442][ T5694] usb 4-1: SerialNumber: syz [ 466.186010][ T5694] usb 4-1: config 0 descriptor?? [ 466.360044][ T5694] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 466.360083][ T5694] em28xx 4-1:0.132: Video interface 132 found: [ 466.795293][ T9210] loop3: detected capacity change from 0 to 128 [ 466.805677][ T9210] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.847293][ T9210] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 467.319004][ T5694] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 467.782156][ T5694] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 467.782196][ T5694] em28xx 4-1:0.132: board has no eeprom [ 469.089474][ T5694] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 469.089636][ T5694] em28xx 4-1:0.132: analog set to bulk mode. [ 469.091317][ T10] em28xx 4-1:0.132: Registering V4L2 extension [ 470.256064][ T5694] usb 4-1: USB disconnect, device number 20 [ 470.311752][ T5694] em28xx 4-1:0.132: Disconnecting em28xx [ 472.397077][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 472.397128][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 472.397144][ T10] em28xx 4-1:0.132: No AC97 audio processor [ 472.904368][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.974677][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.980780][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 473.009163][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 473.017485][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 473.400394][ T10] usb 4-1: Decoder not found [ 473.400442][ T10] em28xx 4-1:0.132: failed to create media graph [ 473.400570][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 473.800894][ T10] em28xx 4-1:0.132: Remote control support is not available for this card. [ 473.811692][ T5694] em28xx 4-1:0.132: Closing input extension [ 475.723834][ T5626] Bluetooth: hci3: command tx timeout [ 476.078242][ T9225] syz.1.888 (9225) used greatest stack depth: 18968 bytes left [ 476.215995][ T5694] em28xx 4-1:0.132: Freeing device [ 477.363545][ T9295] Bluetooth: MGMT ver 1.23 [ 477.401521][ T9295] loop4: detected capacity change from 0 to 64 [ 477.409641][ T9295] bfs: Unknown parameter '' [ 477.805277][ T5619] Bluetooth: hci3: command tx timeout [ 478.088112][ T9306] loop4: detected capacity change from 0 to 2048 [ 478.177134][ T9306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.400135][ T9306] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 478.656088][ T9306] EXT4-fs error (device loop4) in ext4_setattr:6120: error 28 [ 478.681774][ T9317] loop5: detected capacity change from 0 to 7 [ 478.690940][ T9317] Dev loop5: unable to read RDB block 7 [ 478.690983][ T9317] loop5: unable to read partition table [ 478.691193][ T9317] loop5: partition table beyond EOD, truncated [ 478.691237][ T9317] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 478.732865][ T9319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.898'. [ 479.290182][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.940940][ T5619] Bluetooth: hci3: command tx timeout [ 481.837071][ T9355] loop1: detected capacity change from 0 to 512 [ 481.849644][ T9355] journal_path: Lookup failure for './file/file0/..//file0' [ 481.849671][ T9355] EXT4-fs: error: could not find journal device path [ 483.778014][ T9353] gretap0: entered promiscuous mode [ 483.950862][ T5619] Bluetooth: hci3: command tx timeout [ 483.978793][ T9353] macsec1: entered promiscuous mode [ 483.978985][ T9353] macsec1: entered allmulticast mode [ 483.979001][ T9353] gretap0: entered allmulticast mode [ 484.032236][ T38] audit: type=1326 audit(1780263533.649:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.4.921" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d80dbce59 code=0x7ffc0000 [ 484.069091][ T38] audit: type=1326 audit(1780263533.689:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.4.921" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d80dbce59 code=0x7ffc0000 [ 484.098682][ T38] audit: type=1326 audit(1780263533.719:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.4.921" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f5d80dbce59 code=0x7ffc0000 [ 484.254452][ T9353] gretap0: left allmulticast mode [ 484.254683][ T9353] gretap0: left promiscuous mode [ 485.487739][ T9377] loop1: detected capacity change from 0 to 256 [ 485.517829][ T9377] exfat: Unknown parameter '0xffffffffffffffff' [ 486.451338][ T9375] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 486.451358][ T9375] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 486.453106][ T9375] vhci_hcd vhci_hcd.0: Device attached [ 486.751894][ T9378] vhci_hcd: connection closed [ 486.762723][ T10] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 486.832962][ T9383] loop4: detected capacity change from 0 to 16 [ 486.862754][ T111] vhci_hcd vhci_hcd.1: stop threads [ 486.870942][ T111] vhci_hcd vhci_hcd.1: release socket [ 486.994008][ T111] vhci_hcd vhci_hcd.1: disconnect device [ 487.029125][ T9383] erofs (device loop4): mounted with root inode @ nid 36. [ 487.048568][ T9383] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 487.048596][ T9383] erofs (device loop4): readahead error at folio 1 @ nid 89 [ 487.048613][ T9383] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 487.048643][ T9383] erofs (device loop4): read error -117 @ 0 of nid 89 [ 487.048937][ T38] audit: type=1800 audit(1780263536.669:119): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.928" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 487.108389][ T9383] fuse: fd is not a fuse device [ 487.111293][ T9383] erofs (device loop4): read error -117 @ 1 of nid 89 [ 487.111340][ T9383] erofs (device loop4): read error -117 @ 1 of nid 89 [ 487.111405][ T9383] erofs (device loop4): read error -117 @ 1 of nid 89 [ 487.111451][ T9383] erofs (device loop4): read error -117 @ 1 of nid 89 [ 488.239407][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 488.538385][ T9392] loop5: detected capacity change from 0 to 127 [ 488.619014][ T9392] loop5: unable to read partition table [ 488.619179][ T9392] loop_reread_partitions: partition scan of loop5 (被x) failed (rc=-5) [ 491.796484][ T9414] netlink: 56 bytes leftover after parsing attributes in process `syz.4.939'. [ 491.954423][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 492.167943][ T9419] loop5: detected capacity change from 0 to 7 [ 492.174393][ T9419] Dev loop5: unable to read RDB block 7 [ 492.174491][ T9419] loop5: unable to read partition table [ 492.174946][ T9419] loop5: partition table beyond EOD, truncated [ 492.206492][ T9419] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 492.575726][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.943'. [ 492.693236][ T9421] loop1: detected capacity change from 0 to 2048 [ 492.709362][ T9421] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 492.723902][ T9421] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 492.750371][ T9421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 494.512262][ T9446] trusted_key: encrypted_key: insufficient parameters specified [ 495.117618][ T1379] bridge_slave_1: left allmulticast mode [ 495.117653][ T1379] bridge_slave_1: left promiscuous mode [ 495.117935][ T1379] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.291433][ T1379] bridge_slave_0: left allmulticast mode [ 495.291470][ T1379] bridge_slave_0: left promiscuous mode [ 495.291775][ T1379] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.828630][ T9453] loop4: detected capacity change from 0 to 32768 [ 495.889409][ T9453] (syz.4.948,9453,0):ocfs2_slot_map_physical_size:227 ERROR: Slot map file is too small! (size 2, needed 8) [ 496.807249][ T9473] fuse: Bad value for 'fd' [ 496.847391][ T9473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 497.053447][ T1379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.121944][ T1379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.161213][ T1379] bond0 (unregistering): Released all slaves [ 497.203505][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.203857][ T9268] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.204270][ T9268] bridge_slave_0: entered allmulticast mode [ 497.208318][ T9268] bridge_slave_0: entered promiscuous mode [ 497.413992][ T9447] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 497.437897][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 497.441982][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.442296][ T9268] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.443037][ T9268] bridge_slave_1: entered allmulticast mode [ 497.494401][ T9268] bridge_slave_1: entered promiscuous mode [ 497.630729][ T9268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.641495][ T9268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.006979][ T1379] hsr_slave_0: left promiscuous mode [ 500.176645][ T1379] hsr_slave_1: left promiscuous mode [ 500.208642][ T1379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.374231][ T1379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.593731][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.593847][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.338696][ T9532] overlay: Unknown parameter 'obj_user' [ 503.693072][ T1379] team0 (unregistering): Port device team_slave_1 removed [ 503.775545][ T1379] team0 (unregistering): Port device team_slave_0 removed [ 504.196892][ T9268] team0: Port device team_slave_0 added [ 504.311643][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 504.328159][ T9519] tipc: Started in network mode [ 504.328176][ T9519] tipc: Node identity , cluster identity 4711 [ 504.328291][ T9519] tipc: Failed to obtain node identity [ 504.328315][ T9519] tipc: Enabling of bearer rejected, failed to enable media [ 504.379128][ T9268] team0: Port device team_slave_1 added [ 504.466198][ T9536] Process accounting resumed [ 504.789390][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.789407][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.789437][ T9268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.842032][ T9268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.842045][ T9268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.842066][ T9268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.167308][ T9268] hsr_slave_0: entered promiscuous mode [ 505.167691][ T9560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.976'. [ 505.173304][ T9268] hsr_slave_1: entered promiscuous mode [ 505.176634][ T9268] debugfs: 'hsr0' already exists in 'hsr' [ 505.176653][ T9268] Cannot create hsr debugfs directory [ 505.278686][ T9555] netlink: 5 bytes leftover after parsing attributes in process `syz.4.978'. [ 505.567528][ T38] audit: type=1326 audit(1780263555.179:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.567586][ T38] audit: type=1326 audit(1780263555.179:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.570509][ T38] audit: type=1326 audit(1780263555.189:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.570560][ T38] audit: type=1326 audit(1780263555.189:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.570606][ T38] audit: type=1326 audit(1780263555.189:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.570650][ T38] audit: type=1326 audit(1780263555.189:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.572956][ T38] audit: type=1326 audit(1780263555.189:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.573008][ T38] audit: type=1326 audit(1780263555.199:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.575558][ T38] audit: type=1326 audit(1780263555.199:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.580448][ T38] audit: type=1326 audit(1780263555.199:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.1.981" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9362ce59 code=0x7ffc0000 [ 505.992868][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 506.166154][ T9570] loop1: detected capacity change from 0 to 4096 [ 506.193091][ T9570] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 506.248466][ T9570] ntfs3(loop1): ino=0, mi_enum_attr [ 506.295379][ T9570] ntfs3(loop1): ino=0, mi_enum_attr [ 506.295485][ T9570] ntfs3(loop1): Failed to load $MFT (-2). [ 506.638438][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.986'. [ 506.908455][ T9594] loop8: detected capacity change from 0 to 7 [ 506.964871][ T9594] Dev loop8: unable to read RDB block 7 [ 506.964911][ T9594] loop8: unable to read partition table [ 506.965105][ T9594] loop8: partition table beyond EOD, truncated [ 506.965122][ T9594] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 507.395844][ T9605] loop4: detected capacity change from 0 to 1024 [ 507.414905][ T9605] EXT4-fs: Ignoring removed bh option [ 507.500937][ T9605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.595507][ T9612] loop1: detected capacity change from 0 to 512 [ 507.596547][ T9612] journal_path: Lookup failure for './file/file0/..//file0' [ 507.596572][ T9612] EXT4-fs: error: could not find journal device path [ 507.831553][ T9616] fuse: fd is not a fuse device [ 508.553340][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 508.600337][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.713030][ T9659] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1005'. [ 511.621114][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1009'. [ 511.991910][ T9693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1013'. [ 513.812828][ T9744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 514.707016][ T9767] loop4: detected capacity change from 0 to 1024 [ 514.708287][ T9767] hfsplus: Unknown parameter '01777777777777777777777' [ 516.493330][ T9767] loop4: detected capacity change from 0 to 32768 [ 516.501244][ T9767] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1034 (9767) [ 516.545866][ T9268] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 516.600672][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.611393][ T9268] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 516.660205][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.661328][ T9268] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 516.708679][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.714730][ T9268] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 516.925840][ T9767] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 516.925879][ T9767] BTRFS info (device loop4): using crc32c checksum algorithm [ 517.026257][ T9268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.290856][ T5835] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 517.310530][ T9767] BTRFS warning (device loop4): couldn't read tree root [ 517.310549][ T9767] BTRFS warning (device loop4): try to load backup roots slot 1 [ 517.315141][ T5835] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 517.315333][ T9767] BTRFS warning (device loop4): couldn't read tree root [ 517.315354][ T9767] BTRFS warning (device loop4): try to load backup roots slot 2 [ 517.316348][ T5835] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 517.332566][ T9767] BTRFS warning (device loop4): couldn't read tree root [ 517.332587][ T9767] BTRFS warning (device loop4): try to load backup roots slot 3 [ 517.562025][ T9767] BTRFS info (device loop4): checking UUID tree [ 517.572666][ T9767] BTRFS info (device loop4): setting nodatasum [ 517.572692][ T9767] BTRFS info (device loop4): enabling ssd optimizations [ 517.572711][ T9767] BTRFS info (device loop4): turning on flush-on-commit [ 517.572727][ T9767] BTRFS info (device loop4): turning on async discard [ 517.572743][ T9767] BTRFS info (device loop4): enabling free space tree [ 517.572761][ T9767] BTRFS info (device loop4): trying to use backup root at mount time [ 517.572779][ T9767] BTRFS info (device loop4): max_inline set to 0 [ 518.286731][ T9268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.599976][ T9268] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.676058][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.691823][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.789420][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.789571][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.366714][ T5613] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 521.344515][ T9847] loop5: detected capacity change from 0 to 7 [ 521.345748][ T9847] Dev loop5: unable to read RDB block 7 [ 521.345785][ T9847] loop5: unable to read partition table [ 521.345960][ T9847] loop5: partition table beyond EOD, truncated [ 521.345977][ T9847] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 521.746964][ T9854] loop4: detected capacity change from 0 to 128 [ 522.011587][ T9862] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1050'. [ 526.938705][ T9886] loop4: detected capacity change from 0 to 4096 [ 526.949115][ T9899] tipc: Enabling of bearer rejected, failed to enable media [ 526.958456][ T9886] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 526.963534][ T9886] ntfs3(loop4): It is recommended to use chkdsk. [ 527.049145][ T9268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.103039][ T9929] loop4: detected capacity change from 0 to 512 [ 528.127024][ T9929] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 528.145497][ T9929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 528.145918][ T9929] System zones: 1-12 [ 528.224366][ T9929] EXT4-fs (loop4): 1 truncate cleaned up [ 528.237932][ T9929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.741085][ T9268] veth0_vlan: entered promiscuous mode [ 528.828254][ T9268] veth1_vlan: entered promiscuous mode [ 529.191941][ T9268] veth0_macvtap: entered promiscuous mode [ 529.331178][ T9268] veth1_macvtap: entered promiscuous mode [ 529.579573][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.732828][ T9268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.881897][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.902502][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.907072][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.910138][ T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.961918][ T9966] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1073'. [ 533.794151][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 533.852178][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 533.858072][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 533.870732][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 533.904665][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.150092][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.934463][ T5619] Bluetooth: hci5: command tx timeout [ 538.258852][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 538.749126][T10046] loop1: detected capacity change from 0 to 2048 [ 539.029840][T10046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.118373][ T1171] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.239454][T10057] tipc: Started in network mode [ 539.239470][T10057] tipc: Node identity , cluster identity 4711 [ 539.239604][T10057] tipc: Failed to obtain node identity [ 539.239629][T10057] tipc: Enabling of bearer rejected, failed to enable media [ 539.485208][ T1379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 539.552736][ T1379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 539.552772][ T1379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 539.552772][ T1379] [ 539.552788][ T1379] EXT4-fs (loop1): Total free blocks count 0 [ 539.552803][ T1379] EXT4-fs (loop1): Free/Dirty block details [ 539.552817][ T1379] EXT4-fs (loop1): free_blocks=66060288 [ 539.552834][ T1379] EXT4-fs (loop1): dirty_blocks=16 [ 539.552848][ T1379] EXT4-fs (loop1): Block reservation details [ 539.552861][ T1379] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 539.556838][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 539.557668][ T5608] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 539.800779][T10067] loop4: detected capacity change from 0 to 4096 [ 539.845538][T10067] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 539.944309][ T1171] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.965488][ T5619] Bluetooth: hci5: command tx timeout [ 539.984235][T10067] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 540.048268][T10067] ntfs3(loop4): $Secure::$SDH is corrupted. [ 540.048372][T10067] ntfs3(loop4): Failed to initialize $Secure (-22). [ 541.735945][ T1171] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.787871][T10090] raw_sendmsg: syz.3.1106 forgot to set AF_INET. Fix it! [ 542.045539][ T5619] Bluetooth: hci5: command tx timeout [ 542.341511][ T1171] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.426641][T10087] loop4: detected capacity change from 0 to 32768 [ 542.598885][T10087] XFS (loop4): Metadata CRC error detected at xfs_sb_read_verify+0x368/0x4d0, xfs_sb block 0x0 [ 542.598988][T10087] XFS (loop4): Unmount and run xfs_repair [ 542.599000][T10087] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 542.599019][T10087] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00 XFSB.......... . [ 542.599036][T10087] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 542.599052][T10087] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 542.599068][T10087] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00 ................ [ 542.599083][T10087] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02 ................ [ 542.599100][T10087] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00 ...... ......... [ 542.599115][T10087] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00 ................ [ 542.599132][T10087] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32 ...............2 [ 542.599184][T10087] XFS (loop4): SB validate failed with error -74. [ 543.436313][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.436754][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.437016][ T9987] bridge_slave_0: entered allmulticast mode [ 543.445266][ T9987] bridge_slave_0: entered promiscuous mode [ 543.449907][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.450257][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.450577][ T9987] bridge_slave_1: entered allmulticast mode [ 543.455403][ T9987] bridge_slave_1: entered promiscuous mode [ 543.670533][ T9127] udevd[9127]: incorrect xfs checksum on /dev/loop4 [ 543.863039][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.890703][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.103926][ T9987] team0: Port device team_slave_0 added [ 544.125932][ T5619] Bluetooth: hci5: command tx timeout [ 544.134436][ T9987] team0: Port device team_slave_1 added [ 544.605029][T10130] loop4: detected capacity change from 0 to 512 [ 544.606958][T10130] EXT4-fs: test_dummy_encryption requires encrypt feature [ 545.121543][T10130] fuse: Bad value for 'user_id' [ 545.121563][T10130] fuse: Bad value for 'user_id' [ 545.599138][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.599159][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.599188][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.739051][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.739070][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.739100][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.772568][ T5749] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 545.942644][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 545.946512][ T5749] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 545.946537][ T5749] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.946556][ T5749] usb 5-1: config 0 has no interface number 0 [ 545.946597][ T5749] usb 5-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 545.946624][ T5749] usb 5-1: config 0 interface 85 has no altsetting 0 [ 545.951807][ T5749] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 545.951835][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.951855][ T5749] usb 5-1: Product: syz [ 545.951869][ T5749] usb 5-1: Manufacturer: syz [ 545.951884][ T5749] usb 5-1: SerialNumber: syz [ 546.051482][ T5749] usb 5-1: config 0 descriptor?? [ 546.076623][ T5749] appletouch 5-1:0.85: Could not find int-in endpoint [ 546.076674][ T5749] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 546.078329][ T5749] usbhid 5-1:0.85: couldn't find an input interrupt endpoint [ 546.341214][ T9987] hsr_slave_0: entered promiscuous mode [ 546.350257][ T9987] hsr_slave_1: entered promiscuous mode [ 546.358644][ T9987] debugfs: 'hsr0' already exists in 'hsr' [ 546.358668][ T9987] Cannot create hsr debugfs directory [ 546.378004][ T5749] usb 5-1: USB disconnect, device number 8 [ 546.516617][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 546.758563][T10141] loop1: detected capacity change from 0 to 32768 [ 546.806631][T10141] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 546.870152][T10175] IPVS: set_ctl: invalid protocol: 16 224.0.0.2:20004 [ 546.931421][T10141] XFS (loop1): Ending clean mount [ 547.143563][ T5608] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 547.386961][ T1171] bridge_slave_1: left allmulticast mode [ 547.386993][ T1171] bridge_slave_1: left promiscuous mode [ 547.387230][ T1171] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.108105][ T1171] bridge_slave_0: left allmulticast mode [ 549.108139][ T1171] bridge_slave_0: left promiscuous mode [ 549.108391][ T1171] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.447114][T10200] loop1: detected capacity change from 0 to 2048 [ 549.618927][T10200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.130312][T10205] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1136'. [ 550.255057][T10207] loop4: detected capacity change from 0 to 512 [ 550.295175][T10207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.295311][T10207] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.337197][ T38] kauditd_printk_skb: 208 callbacks suppressed [ 550.337216][ T38] audit: type=1800 audit(1780263601.961:338): pid=10207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1142" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 550.414566][ T1171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.473267][ T1171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.494717][ T1171] bond0 (unregistering): Released all slaves [ 551.109433][T10187] tipc: Enabling of bearer rejected, failed to enable media [ 551.231002][ T1379] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 551.278761][ T1379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 551.278794][ T1379] EXT4-fs (loop1): This should not happen!! Data will be lost [ 551.278794][ T1379] [ 551.278811][ T1379] EXT4-fs (loop1): Total free blocks count 0 [ 551.278826][ T1379] EXT4-fs (loop1): Free/Dirty block details [ 551.278841][ T1379] EXT4-fs (loop1): free_blocks=66060288 [ 551.278858][ T1379] EXT4-fs (loop1): dirty_blocks=16 [ 551.278872][ T1379] EXT4-fs (loop1): Block reservation details [ 551.278886][ T1379] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 551.387263][ T1379] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 551.420049][ T5608] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 552.338875][ T5613] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.308925][T10243] loop4: detected capacity change from 0 to 1764 [ 553.332951][T10243] iso9660: Unknown parameter 'audit' [ 554.660886][ T5271] 8021q: adding VLAN 0 to HW filter on device eth5 [ 555.781505][T10274] loop1: detected capacity change from 0 to 1024 [ 556.287932][T10283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1157'. [ 556.287970][T10283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1157'. [ 556.575396][ T5749] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 556.818419][ T5749] usb 2-1: Using ep0 maxpacket: 8 [ 556.827488][ T5749] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.827522][ T5749] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 556.827578][ T5749] usb 2-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 556.827601][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.888110][ T5749] usb 2-1: config 0 descriptor?? [ 556.936033][ T1171] hsr_slave_0: left promiscuous mode [ 556.940811][T10274] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 556.940836][T10274] KASAN: null-ptr-deref in [ 556.940836][T10274] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 556.940857][T10274] CPU: 0 UID: 0 PID: 10274 Comm: syz.1.1157 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 556.940882][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.940895][T10274] RIP: 0010:__hfsplus_setxattr+0x1c86/0x2890 [ 556.941047][T10274] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 c8 bf 85 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 ab bf 85 ff 4d 8b 36 49 8d be 50 [ 556.941065][T10274] RSP: 0018:ffffc90002f57420 EFLAGS: 00010202 [ 556.941085][T10274] RAX: 0000000000000001 RBX: fffff520005eaea4 RCX: 0000000000080000 [ 556.941100][T10274] RDX: ffffc90005121000 RSI: 0000000000001ea2 RDI: 0000000000001ea3 [ 556.941114][T10274] RBP: ffffc90002f578f8 R08: 0000000000000000 R09: 0000000000000000 [ 556.941129][T10274] R10: dffffc0000000000 R11: fffff9400035be0f R12: dffffc0000000000 [ 556.941145][T10274] R13: ffff88806dfa2760 R14: 0000000000000008 R15: ffff88806dfa35b0 [ 556.941161][T10274] FS: 00007f4f9187e6c0(0000) GS:ffff888125ecd000(0000) knlGS:0000000000000000 [ 556.941179][T10274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.941192][T10274] CR2: 00007f6ba5c98a90 CR3: 000000003b460000 CR4: 00000000003526f0 [ 556.941212][T10274] Call Trace: [ 556.941219][T10274] [ 556.941240][T10274] ? __pfx___hfsplus_setxattr+0x10/0x10 [ 556.941277][T10274] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 556.941315][T10274] ? stack_depot_save_flags+0x3f3/0x810 [ 556.941407][T10274] ? rcu_is_watching+0x15/0xb0 [ 556.941485][T10274] ? __kasan_kmalloc+0x93/0xb0 [ 556.941559][T10274] ? hfsplus_setxattr+0x10b/0x340 [ 556.941593][T10274] hfsplus_setxattr+0x124/0x340 [ 556.941627][T10274] hfsplus_trusted_setxattr+0x40/0x60 [ 556.941648][T10274] ? __pfx_hfsplus_trusted_setxattr+0x10/0x10 [ 556.941668][T10274] __vfs_setxattr+0x43c/0x480 [ 556.941728][T10274] __vfs_setxattr_noperm+0x12d/0x660 [ 556.941759][T10274] vfs_setxattr+0x163/0x370 [ 556.941789][T10274] ? __pfx_vfs_setxattr+0x10/0x10 [ 556.941820][T10274] filename_setxattr+0x296/0x630 [ 556.941852][T10274] ? __pfx_filename_setxattr+0x10/0x10 [ 556.941883][T10274] ? do_getname+0x151/0x250 [ 556.941931][T10274] path_setxattrat+0x3eb/0x440 [ 556.941954][T10274] ? __pfx_path_setxattrat+0x10/0x10 [ 556.941972][T10274] ? do_futex+0x333/0x420 [ 556.942059][T10274] ? rcu_is_watching+0x15/0xb0 [ 556.942093][T10274] __x64_sys_setxattr+0xbc/0xe0 [ 556.942122][T10274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.942144][T10274] do_syscall_64+0x174/0x580 [ 556.942165][T10274] ? trace_irq_disable+0x3b/0x140 [ 556.942191][T10274] ? clear_bhb_loop+0x40/0x90 [ 556.942217][T10274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.942238][T10274] RIP: 0033:0x7f4f9362ce59 [ 556.942257][T10274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.942274][T10274] RSP: 002b:00007f4f9187e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 556.942295][T10274] RAX: ffffffffffffffda RBX: 00007f4f938a5fa0 RCX: 00007f4f9362ce59 [ 556.942310][T10274] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000380 [ 556.942325][T10274] RBP: 00007f4f936c2d6f R08: 0000000000000003 R09: 0000000000000000 [ 556.942339][T10274] R10: 0000000000000835 R11: 0000000000000246 R12: 0000000000000000 [ 556.942351][T10274] R13: 00007f4f938a6038 R14: 00007f4f938a5fa0 R15: 00007ffd14bd20d8 [ 556.942375][T10274] [ 556.942396][T10274] Modules linked in: [ 556.942460][T10274] ---[ end trace 0000000000000000 ]--- [ 556.955452][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 556.963079][T10274] RIP: 0010:__hfsplus_setxattr+0x1c86/0x2890 [ 556.963169][T10274] Code: 8b 36 49 83 c6 30 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 c8 bf 85 ff 4d 8b 36 49 83 c6 08 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 ab bf 85 ff 4d 8b 36 49 8d be 50 [ 556.963216][T10274] RSP: 0018:ffffc90002f57420 EFLAGS: 00010202 [ 556.963237][T10274] RAX: 0000000000000001 RBX: fffff520005eaea4 RCX: 0000000000080000 [ 556.963267][T10274] RDX: ffffc90005121000 RSI: 0000000000001ea2 RDI: 0000000000001ea3 [ 556.963310][T10274] RBP: ffffc90002f578f8 R08: 0000000000000000 R09: 0000000000000000 [ 556.963373][T10274] R10: dffffc0000000000 R11: fffff9400035be0f R12: dffffc0000000000 [ 556.963392][T10274] R13: ffff88806dfa2760 R14: 0000000000000008 R15: ffff88806dfa35b0 [ 556.963409][T10274] FS: 00007f4f9187e6c0(0000) GS:ffff888125fcd000(0000) knlGS:0000000000000000 [ 556.963460][T10274] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 556.963501][T10274] CR2: 00005555662cca48 CR3: 000000003b460000 CR4: 00000000003526f0 [ 556.963554][T10274] Kernel panic - not syncing: Fatal exception [ 556.964158][T10274] Kernel Offset: disabled