last executing test programs: 50.372987654s ago: executing program 1 (id=230): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000003c0)=0x7e) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty=0x6, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 41.272389099s ago: executing program 0 (id=260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x14, 0x10}}, 0x1c}}, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0xe22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x2c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 22.445784777s ago: executing program 1 (id=239): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x1001, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)='I', 0x1}, {0x0, 0x62}], 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4, 0x8000, 0x0, 0x4], [0x0, 0x4]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {0x80000001}], '\x00', 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(0x0, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000180)=""/111, 0x6f, 0x10001, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x10000080007, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') getpeername$unix(r5, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e) pread64(r7, &(0x7f00000002c0)=""/11, 0x18, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x27}, 0x90) 21.385754068s ago: executing program 1 (id=266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="04005b"], 0x28}}, 0x0) (fail_nth: 1) 21.240777404s ago: executing program 1 (id=267): socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = memfd_secret(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='T\x00\x00\a', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="3800330080000000ffffffffffff080211000000505050505050000000000000000000006400000000060101010101010301002503000000"], 0x54}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r2, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="9400000009060108000000000000000002000001800008800c00078005001500000000001c00079861832a8cdb86cc801800168014000240fc010000000000000000000000000001180007801400170076657468305f746f5f626f6e6400000017006d6163766c616e310000000000000000180007801400170076657468305f746f5f7465616d0000000c000780"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x5, @mcast1, @remote, 0x1, 0x7800, 0x7, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xa, 0x2}, {0xe, 0x5}, {0x2}, {0x0, 0x4}, {0xd, 0x5}, {0xca, 0x2}]}, @const={0x1, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000640)=""/25, 0x64, 0x19, 0x1, 0x10001}, 0x20) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x0, 0x2c, 0x20, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x5, 0x7}, {0x3, 0xfff2}, {0x1, 0x7}}}, 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b040000000000000000020000001800048014000180090001006d61737100000000040002800900010073797a30000000000900020073797a320000000005000740de000000140000001100010000000000000000000000000a15dfebd35cdf0beb8aa9e825ad85be91e5f2db7a7921b50add50c5a9c968ed40891c85344cea97ed9e994dc421ef27a2ef1502637cac1d57fbf8011d9ddce1bd7bb76f0983b18a28916e60527f46345e77d369732336e536a0"], 0x74}}, 0x0) 21.072746776s ago: executing program 1 (id=268): syz_usb_connect$uac1(0x0, 0x71, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x7002, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@nossd_spread}, {}, {@flushoncommit}, {@max_inline={'max_inline', 0x3d, [0x65, 0x38]}}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x70, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x7fff, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005140)={0x2020}, 0x2020) sendfile(r4, r6, 0x0, 0xd612) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x2000000000000007) 19.87423559s ago: executing program 4 (id=269): socket(0x10, 0x3, 0x0) (async) syz_usbip_server_init(0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000000)='./file0\x00', 0x98, &(0x7f0000000080), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==") (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x141, 0x0) (async, rerun: 32) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000040), 0x1, 0x3e3, &(0x7f00000004c0)="$eJzs3M1uG0UcAPD/bp20TUvtShz4uFiARCRE0qQtUAkkIi4c2hM9cMSK0xLVaVBjJFpFfAjEDSQQDwAH4BE4woF3gDNwgEoRyoGUm9Hau46J7bRpHYyS308aeWZn65nd6ax3J7MTwKFVjYiXI+JIRJyJiHK+Pc1DvN8J2X5bm+uLf2+uLybRar32ZxJJvq34riT/PJF/wXQakX6UxOMDyl27eetardFYupGnZ5srb82u3bz17PJK7erS1aXr88+dPXf+/AsX5p8f2bFurCSfPPXNxd8++7j++U9/fF/J6nsyz+s9jlGpRrV7Tna6MOrCxuxYTzwpjbEiAADsKs3v/Uvt+/9yHIntm7dyfPrjWCsHAAAAjESrVXwCAAAAB1fi2R8AAAAOuGIewNbm+mIRxjgdgf/YxkJEVDrtfycPnZxS953eiR3v945SNSJePXZpPguxT+9hAwAAABxmPyx0Fv7rH/9L45Ge/Y5HxFSxtt8IVXek+8d/0tsjLpIeGwsRL0bEnb7xv7TYpXIkTz3UHiqcSK4sN5bORMSpiJiOiaNZem6XMt594tq3w/J6x/++/PX1uaz87HN7j/R26ei//0291qw9yDGzbeODiMdKg9o/6Y759q6TeT/eWN56aVhe1v5Zexehv/3ZT62vIp4e2P+3Vy5Ndl+fdbZ9PZgtrgr9fjn59YfDyu/t/1nIyi/+FsD+y/r/1O7t314nt7te79rey/jur0s/D8u7e/sPvv5PJpfbFZzMt71TazZvzEVMJhf7t/vf1FWcj+J8Ze0//eTg3//i/i/Jf/tP9awPvRevvHf68rA8/X+8svav76n/7z3y5tSj08PKv7f+f65dmeJL3P/d3b020LjrCQAAAAAAAMBopO25fUk6042n6cxMZ57vwzGVNlbXms9cWX37er0zB7ASE2kx06vcMx90rvMaeTc9vyN9NiJOR8QX5ePt9MziaqM+7oMHAACAQ+LEkOf/zO/387IHAAAA8P9UGXcFAAAAgH3n+R8AAAAOtAdZ119EROSgRsZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA43P4JAAD//+0cwvs=") (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002004000003000000000000000000000d00000000000000000100000604000000faffffffffffffff005f00"], &(0x7f00000005c0)=""/148, 0x3b, 0x94, 0x1}, 0x20) (async, rerun: 64) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) (rerun: 64) write$sequencer(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="800357640423a8029403ff"], 0x10) (async) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "b7c913bb682eaddb954b9baa9effffffffffff36e2000000000000000000000000400100000000000000000000ed000000000010b3ab9b00"}, 0x48, r2) (async) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000900), 0x40, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @aes256, 0x0, @desc4}) renameat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file1\x00') (async) r5 = syz_open_dev$dri(&(0x7f0000000a80), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) (rerun: 64) preadv(r4, &(0x7f0000000f80)=[{&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000e00)=""/6, 0x6}, {&(0x7f0000000e40)=""/22, 0x16}, {&(0x7f0000000e80)=""/200, 0xc8}, {&(0x7f0000000c40)=""/232, 0xe8}], 0x5, 0x0, 0x1) (async, rerun: 32) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) (async) dup(r6) 19.785032054s ago: executing program 4 (id=270): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0xfffffffe, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000020"], 0x0, 0x3d}, 0x20) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 19.784884488s ago: executing program 4 (id=271): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') fchdir(r0) syz_read_part_table(0x607, &(0x7f0000000980)="$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") (fail_nth: 18) 19.671836419s ago: executing program 4 (id=272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000280)='-(]\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x109) connect$bt_l2cap(r4, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)) add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe60", 0x1f, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b"], 0xb0) getresuid(0x0, &(0x7f0000000480), 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0xe, 0x6, 0xb04, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xffffffffffffffde}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 19.495506838s ago: executing program 1 (id=273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x1001, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f00000000c0)='I', 0x1}, {0x0, 0x62}], 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8], [0x4, 0x8000, 0x0, 0x4], [0x0, 0x4]], '\x00', [{}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {0x80000001}], '\x00', 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(0x0, 0x0) futex(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000180)=""/111, 0x6f, 0x10001, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x10000080007, 0x4) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps_rollup\x00') getpeername$unix(r5, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e) pread64(r7, &(0x7f00000002c0)=""/11, 0x18, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x6, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x27}, 0x90) 18.520771518s ago: executing program 4 (id=274): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140)={[{@data_err_abort}, {@noauto_da_alloc}]}, 0x1, 0x775, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2000) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280), &(0x7f00000002c0)={0x0, 0xfb, 0x19, 0x7, 0x0, "d651fea465a306c7cc0575349455e47c", "20caf78f"}, 0x19, 0x1) lseek(r1, 0xfffffffffffffffd, 0x3) mount(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0x2012024, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 18.318526974s ago: executing program 4 (id=275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e00)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) mount$bind(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x210341b, 0x0) r3 = geteuid() quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, r3, &(0x7f0000000440)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) mount(0x0, 0x0, 0x0, 0x2024021, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000d40)=[{{&(0x7f00000002c0)=@x25, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/129, 0x81}, {&(0x7f0000000600)=""/7, 0x7}, {&(0x7f0000000640)=""/183, 0xb7}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000800)=""/150, 0x96}, {&(0x7f00000008c0)=""/151, 0x97}, {&(0x7f0000000980)=""/182, 0xb6}], 0x7}, 0xfb}, {{&(0x7f0000000ac0)=@tipc, 0x80, &(0x7f0000000c80)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/243, 0xf3}, {&(0x7f0000000c40)=""/10, 0xa}], 0x3, &(0x7f0000000cc0)=""/121, 0x79}, 0x6}], 0x2, 0x40010062, &(0x7f0000000dc0)={0x0, 0x3938700}) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080020000700029ebcf40f000064bc24eab556a705251e618294ff0051f60a84c9f4938037e786a6d0001000000e4509c5bbcd72c6c95393", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) sendfile(r6, r2, 0x0, 0x8000002b) 2.788903548s ago: executing program 0 (id=261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=6']) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x600, &(0x7f0000000100)='./file2\x00', &(0x7f0000000240), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './file2'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 2.634668803s ago: executing program 3 (id=286): syz_io_uring_setup(0xeec, &(0x7f0000000780), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000640)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x3f55, &(0x7f0000000740), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r4) syz_io_uring_setup(0x1391, &(0x7f00000004c0), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) io_uring_setup(0x671c, &(0x7f00000002c0)={0x0, 0x0, 0x1000}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0xc00, 0x0, 0x0, 0x0) 2.632944999s ago: executing program 2 (id=287): r0 = socket(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x6, 0x4) bind$inet(r0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2004000, &(0x7f0000000080)={[{@discard}, {@debug}]}, 0x64, 0x534, &(0x7f0000000f80)="$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") r1 = socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f000078f000/0x1000)=nil, 0x1000, 0x0, 0x110, r1, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x455, &(0x7f0000000a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020ab396e0c597945b1900000000000014000000110001000000000000000000e5080000"], 0x3c}}, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket(0x1e, 0x0, 0xfffffffd) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000100)=@req={0x0, 0x0, 0x0, 0x6}, 0x10) (async) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003100), 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003080), 0x1, 0x0, 0x50}, 0x7f152427dda9) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04000520"], 0x7) (async) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8413, &(0x7f0000000000), 0x2, 0x53b, &(0x7f0000000bc0)="$eJzs3ctvG3kdAPDvuHGbtukmCxwAiX2wi9oK6jQb7W7EYVkkBKeVgOVeQuJEUZy4ip3dJlrRFP4AJIQAiRNcuPAfcFmJC0eEhARHBAIEQtCFA0iog8YeOy87cRPHzuPzkaa/18x8f7+qM55XZwK4sN7Mpydpmt6OiPG8vpBPL2aFrYgXIuKDx+/NZVMSafr2P5JI8rrWutKGK3G9uUjESMRXvxTxjWR/3NrG5vJspVJey8uT9ZX7k7WNzTtLK7OL5cXy6vT01Gszr8+8OnP3OMNbuJ5nbkTEG1/4y/e/89MvvrH1mXf/eO9vt76ZNPv8MPaM4ymNHNTYHHoxRvPy7TxdO2Kw02hkZ+Zqb8s8yv+JAAAwWNlx6Yci4pONY9PxuHTw4SwAAABwBqWfG4v/Ja17d/tc7lIPAAAAnCGFiBiLpFDKn/cdi0KhVIrGM7wfiWuFSrVW//RCdX11PmuLmIhiYWGpUr6bPys8EcUkK0818tvlV/aUpyPi2Yj43vjVRrk0V63Me9YAAAAABuL6nvP/f483z/8BAACAc2ai5zkfnmg/AAAAgJPT+/k/AAAAcFY5/wcAAIBz7ctvvZVNaev71/PvbKwvV9+5M1+uLZdW1udKc9W1+6XFanWx8c6+lQNX1n6d3+r6g8l6uVafrG1s3luprq/W7y21P4ENAAAADNizz7//uyQitj57tTFlLu9o/2/+nYChdRA4Mdtf4Ejy9PL+mf7wTDP984A6BQzEpWF3ABgaX+CCi6s47A4AQ5cc0t714Z1f5emL/e0PAADQfzc/1v3+f+HAJbcObgZOPRsxXFxd7/+7MQDnXvv+/2E3AMLBApw3xd6fAHREAOfUse//H8r/IQIAgGEba0xJoZRf3huLQqFUirjR+CxAMVlYqpTvRsQzEfHb8eKVrDzVWDLp6ZIhAAAAAAAAAAAAAAAAAAAAAAAAABCRpkmkT220sSQAAABwNkQU/pr8ovku/5vjL4/llwV+/608czn5z3gjjYh3f/T2Dx7M1utrU1n9P9v19R/m9a8M7TIGAAAAsEPrPL11Hg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fTB4/fmWlOrLhlA3L9/PiImOsUfidFGOhrFiLj2ryRGdiyX9e1SH+JvPYqIj3aKn2TdaofsFP/qycePifxvoVP8632IDxfZ+9n+581O218hXmiknbe/kYhd5aPqvv+L9v7vUpft/0ZvIbJZJ7vGfxTx8ZHO+59W/GQ7/pWdK32pxzF+/Wubm93a0h9H3Oz4+5PsHkB95f5kbWPzztLK7GJ5sbw6PT312szrM6/O3J1cWKqU8z87xvjuJ37+5KDxX+sSf2L/+Hf16eXDBt76gfrNg8cfbuaKneLfeqlD/F/+JJ9jf/xCvupP5fms/WYrv9XM7/Tcz3793EHjn+8y/tH2SJvp3vHfOmz8udtf+fafepwVABiA2sbm8mylUl47UiY7RDrG4gPJZGfpp6AbMqcw83B/0/Nx5BWmaZpm29QxOpY8RfRiXzbhPZmkXTPc/RIAANB/20f/w+4JAAAAAAAAAAAAAAAAAAAAXFy9vRjseC/52x1xNLba+aQfr9AGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiL/wcAAP//o2Xd4g==") (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$netlink(r5, 0x10e, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 2.581067506s ago: executing program 0 (id=288): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000d40)={0x5}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@gid}, {@gid}, {@errors_continue}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0x6}}, {@errors_remount}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}]}, 0x1, 0x1544, &(0x7f0000000400)="$eJzs3AucTtX6OPDnWWvtMSTeJrkMa61n8yaXZZIklyS5JEklSXJLSJrkSEJiCEkakpBchiSGkFwmJo37/X5JSJImSUJyS9b/M+GvTp1fp37nd5zPmef7+eyP9dh7rf3sed733Wsv5v2my5BajWtXb0hE8Of86L3/RYjn/0gCgFgAGAAAeQEgAIDyceXjsvbnlJj0J0/C/k89kHq5M2CXE9c/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZxunFrqKt+y7/fX1/7/D6/+XFV4swJ/C9///Ipllxnyxusw1XQFi/tkuXP/sjev/Xyv4Zw7i+mdvXP/sKvZyJ8D+A/D7PzvI8Q/3cP2zN64/Y9nZ5V5/vtwbRAA2+gt3yP+AfDYezvlvzeWyvvgYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjGUbp/wlCgAuti93XowxxhhjjDHGGPvX8TkudwaMMcYYY4wxxhj7v4cgQIKCAGIgB8RCTsgFAgCuhDyQFyJwFcTB1ZAProH8UAAKQiGIh8JQBDQYsEAQQlEoBlG4ForDdVACSkIpKA0OykACXA9l4QYoBzdCebgJKsDNUBEqQWWoArdAVbgVqsFtUB1uhxpQE2pBbbgD6sCdUBfugnpwN9SHe+BeuA8awP3QEB6ARvAgNIaHoAk8DE2hGTSHFtDyL/V/DnrA89ATekES9IY+8AL0hX7QH16EAfASDISXYRC8AskwGIbAqzAUXoNh8DoMhxEwEt6AUfAmjIYxMBbGQQqMhwnwFkyEt2ESvAOTYQqkwlSYBu/CdJgBM+E9mAXvw2yYA3NhHqTBBzAfFkA6fAgL4SPIgEWwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abb4WPYAZ/ATtgFu+FT2AOf/cn+J/+uf1cEBBQoUKHCGIzBWIzFXJgLc2NuzIN5MIIRjMM4zIf5MD/mx4JYEOMxHotgETRokJCwKBbFKEaxOBbHElgCS2EpdOgwAROwLN6A5bAclsfyWAErYEWshJWwClbBqlgVq2E1rI7VsQbWwFpYC+/AO7A31sW6WA/rYX2sf3F5ChtiQ2yEjbAxNsYm2ASbYlNsjs2xJbbEVtgKW2NrbIttsR22w/bYHhMxETtgB+yIHbETdsLO2Bm7YBfsit2wW+ZzOQCfx+exF9YQvbEP9sG+mJyjP76IL+JLOBBfxpfxFUzGwTgEX8VX8TUchidwOI7AkTgSq4o3cTSOQRLjMAVTcAJOwIk4EbMSfQenYCpOxWk4DafjDJyB7+EsfB/fxzk4B+dhGqbhfFyA6ZiOC/EkZuAiXIxLcCkuw6W4AlfiClyNa3A1rsN1uAE34CbchFtwC27DbfgxKgD8BHfhLkzGPbgH9+Je3If7cD/ux0zMxAN4AA/iQTyEh/AwHsYjeBSP4VE8jsfxBJ7EU3gKz+AZPIvPxH/V6OOSq5JBZFFCiRgRI2JFrMglconcIrfII/KIiIiIOBEn8ol8Ir/ILwqKgiJexIsioogwwggSYQwAiKiIiuKiuCghSohSopRwwokEkSDKirKinCgnyoubRAVxs6goKok2roqoIqqKtq6auE1UF9VFDVFT1BK1RW1RR9QRdUVdUU/UE/VFfXGvuE80EL2xPz4gsirTWAzGJmIINhXNhLzwCdZKDMPWoo1oKx4TI3A4thetXKJ4UnQQo7Gj+JsYg0+LzmIcdhHPiq6im+gunhM9RGvXU/QSk7C36COmYF/RT/QXL4rpWFO8h7Ny1hKviGQxWAwRr4p5+JoYJl4Xw8UIMVK8IUaJN8VoMUaMFeNEihgvJoi3xETxtpgk3hGTxRSRKqaKaeJdMV3MEDPFe2KWeF/MFnPEXDFPpIkPxHyxQKSLD8VC8ZHIEIvEYrFELBXLxHKxQqwUq8RqsUasFevEerFBbBSbxGYRC1vFNrFdfCx2iE/ETrFL7Bafij3iM7FXfC72iS/EfvGlyBRfiQPia3FQfCMOiW/FYfGdOCKOimPie3Fc/CBOiJPilDgtzogfxVnxkzgnvACJUkgplQxkjMwhY2VOmUteIXPL4MJP9yoZJ6+W+eQ1Mr8sIAvKQjJeFpZFpJZGWkkylEVlMRmV18ri8jpZQpaUpWRp6WQZmSCvl2XlDbKcvFGWlzfJCvJmWVFWkpVlFXmLrCpvlRA5f44asqasJWvLO2QS3CnryrtkPXm3rC/vkffK+2QDeb9sKB+QjeSDsrF8SDaRD8umsplsLlvIlvIR2Uo+KlvLNrKtfEy2k4/L9vIJmSiflB2kv/ASeVp2ls/ILvJZ2VV2k93lT/Kc9LKn7CWhN8g+8gXZV/aT/WMBQL4kB8qX5SD5ikyWg+UQ+aocKl+Tw+TrcrgcIUfKN+Qo+aYcLcfIsXKcTJHj5QT5lpwo35aT5DtyspwiU+VU2V8O+HmkmVL+Yf+3fqf/oJ/PvkFulJvkZrlFbpXb5Hb5sdwhd8idcqfcLXfLPXKP3Cv3yn1yn9wv98tMmSkPyAPyoDwoD8lD8rA8LI/Io/K0/F4elz/IE/KkPClPyzPyjDx74WcACpVQUikVqBiVQ8WqnCqXukLlVleqPCqviqirVJy6WuVT16j8qoAqqAqpeFVYFVFaGWUVqVAVVcVUVF2LF14wqpQqrZwqoxLU9X+mvyqurlMlVMlf9b+YX9I/yK+laqlaqVaqtWqt2qq2qp1qp9qr9ipRJaoOqoPqqDqqTqqT6qw6qy6qi+qquqruqrvqoXqonqqnSlJJqo96QfVV/VR/9aIaoF5SA9VANUgNUskqWQ1RQ9RQNVQNU8PUcDVcjVQj1Sg1So1Wo9VYNValqBQ1QU1QE9VENUlNUpPVZJWqUtU0NU1NV9PVTDVTzVKz1Gw1W81Vc1WaSlPz1XyVrtLVQrVQZahFapFaopaoZWqZWqFWqFVqlVqj1qh1ap3KUBvVRrVZbVZb1Va1XW1XO9QOtVPsVLvVbrVH7VF71V61T+1T+9V+laky1QF1QB1UB9UhdUgdVofVEXVEHVPH1HF1XJ1QJ9QpdUqdUWfUWXVWnVPnsqZ9gQhEoAIVxAQxQWwQG+QKcgW5g9xBniBPEAkiQVwQF+QLrgnyBwWCgkGhID4oHBQJdGACG4gLRY8G1wbFg+uCEkHJoFRQOnBBmSAhuD4oG9wQlAtuDMoHNwUVgpuDikGloHJQJbglqBrcGlQLbguqB7cHNYKaQa2gdnBHUCe4M6gb3BXUC+4O6gf3BPcG9wUNgvuDhsEDQaPgwaBx8FDQJHg4aBo0C5oHLYKW/9LxvT9R4FHXU/fSSbq37qNf0H11P91fv6gH6Jf0QP2yHqRf0cl6sB6iX9VD9Wt6mH5dD9cj9Ej9hh6l39Sj9Rg9Vo/TKXq8nqDf0hP123qSfkdP1lN0qp6qp+l39XQ9Q8/U7+lZ+n09W8/Rc/U8naY/0PP1Ap2uP9QL9Uc6Qy/Si/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9cd6h/5E79S79G79qd6jP9N79ed6n/5C79df6kz9lT6gv9YH9Tf6kP5WH9bf6SP6qD6mv9fH9Q/6hD6pT+nT+oz+UZ/VP+lz2mdN7rNu70YZZWJMjIk1sSaXyWVym9wmj8ljIiZi4kycyWfymfwmvyloCpp4E2+KmCImCxkyRU1REzVRU9wUNyVMCVPKlDLOOJNgEkxZU9aUM+VMeVPeVDAVTEVT0VQ2lc0t5hZzq7nV3GZuM7eb201NU9PUNrVNHVPH1DV1TT1Tz9Q39c295l7TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3iSbRdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2SSTJ9TB/T1/Q1/U1/M8AMMAPNQDPIDDLJJtkMMUPMUDPUDDPDzHAzwozMmqiaN81oM8aMNeNMikkxE8wEM9FMNJPMJDPZTDapJtVMM9PMdDPdzDQzzSwzy8w2s81cM9ekmTQz38w36SbdLDQLTYbJMIvNYrPULDXLzXKz0qw0q81qsxbWmvVmvdloNprNZrPZaraa7Wa72WF2mJ1mp9ltdps9Zo/Za/aafWaf2W/2m0yTaQ6YA+agOWgOmUPmsDlsjpgj5pg5Zo6b4+aEOWFOmVPmjClw4X7pTazNaXPZK2xue6XNY/Pav48L2kI23ha2Ray2+W2BX8XGWlvClrSlbGnrbBmbYK//TVzRVrKVbRV7i61qb7XVfhPXsXfauvYuW8/ebWvbO34V17f32KzZSQNEANvMNrItbGP7kG1iH7ZNbTPb3Law7ezjtr19wibaJ20H+9Rv4vl2gV1pV9nVdo3daXfZU/a0PWi/sWfsj7an7WUH2JfsQPuyHWRfscl28G/ikfYNO8q+aUfbMXasHfebeLKdYlPtVDvNvmun2xm/idPsB3aWTbez7Rw71877Oc7KKd1+aBfaj2yGDWCxXWKX2mV2uV1xMVef166z6+0Gu8N+YjfbLXar3Wa3X5wI2112t/3U7rGf2QP2a7vPfmH320M20371c5x1fYfst/aw/c4esUftMfu9PW5/UBd7Z1379/Yne856C4QEJElRQDGUg2IpJ+WiKyg3XUl5KC9F6CqKo6spH11D+akAFaRCFE+FqQhpMmSJKKSiVIyidC1dTK8UlSZHZSiBrqeydAOVoxupPN1EFehmqkiVqDJVoVuoKt1K1eg2qk63Uw2qSbWoNt1BdehOqkt3UT26m+rTPXQv3UcN6H5qSA9QI3qQGtND1IQepqbUjJpTC2pJj1ArepRaUxtqS49RO3qc2tMTlEhPUgd6ijrS36gTPU2d6RnqQs9SV+pG3ek56kHPU0/qRUnUm/rQC9SX+lF/epEG0Es0kF6mQfQKJdNgGkKv0lB6jYbR6zScRtBIeoNG0Zs0msbQWBpHKTSeJtBbNJHepkn0Dk2mKZRKU2kavUvTaQbNpPdoFr1Ps2kOzaV5lEYf0HxaQOn0IS2kjyiDFtFiWkJLaRktpxW0klbRalpDa2kdracNtJE20WbaQltpG22nj2kHfUI7aRftpk9pD31GSJ/TPvqC9tOXlElf0QH6mg7SN3SIvvW96Ds6QkfpGH1Px+kHOkEn6RSdpjP0I52ln+gceYIQQxHKUIVBGBPmCGPDnGGu8Iowd3hlmCfMG0bCq8K48OowX3hNmD8sEBYMC4XxYeGwSKhDE9qQwjAsGhYLo+G1YfHwurBEWDIsFZYOXVgmTAivD8uGN4TlwhvD8uFNYYXw5rBiWCl86O4q4S1h1fDWsFp4W1g9vD2sEdYMa4W1wzvCOuGdYd3wrrBeeHdYLrwnvDe8L2wQ3h82DB8IG4UPho3Dh8Im4cNh07BZ2DxsEbYMHwlbhY+GrcM2YdvwsbBd+HjYPnwiTAyfDDuET/28/54F/3h/Utg77BO+EL4Qen+XnBudF02LfhCdH10QTY9+GF0Y/SiaEV0UXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEPW+dg5w6ISTTrnAxbgcLtbldLncFS63u9LlcXldxF3l4tzVLp+7xuV3BVxBV8jFu8KuiNPOOOvIha6oK+ai7lpX3F3nSriSrpQr7Zwr4xJcC9fStXSt3KOutWvj2rrH3GPucfe4e8I94Z50HdxTrqP7m+vknnad3TPuGfes6+q6ue7uOdfDjc9z/j2Z5Pq4Pq6v6+v6u/5ugBvgBrqBbpAb5JJdshvihrihbqgb5oa54W64G+lGulFulBvtRruxbqxLcSlugpvgJrqJbpKb5Ca7yS7Vpbppbpqb7qa7qjPOn2W2m+3murkuzaW5+S5rzpjuFrqFLsNluMVusVvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uJ0+7/lB3R631+11+9w+t9996TLdV+6A+9oddN+4Q+5bd9h95464o+6Y+94ddz+4E+6kO+VOuzPuR3fW/eTOOe9SIuMjEyJvRSZG3o5MirwTmRyZEkmNTI1Mi7wbmR6ZEZkZeS8yK/J+ZHZkTmRuZF4kLfJBZH5kQSQ98mFkYeSjSEZkUWRxZElkaWRZxPvCm0Nf1BfzUX+tL+6v8yV8SV/Kl/bOl/EJ/npf1t/gy/kbfXl/k6/gb/YVfSVf2T/sm/pmvrlv4Vv6R3wr/6hv7dv4tv4x384/7tv7J3yif9J38E/5jv5vvpN/2nf2z/gu/lnf1Xfz3f1zvod/3vf0vXyS7+37+Bd8X9/P9/cv+gH+JT/Qv+wH+Vd8sh/sh/hX/VD/mh/mX/fD/Qg/MuYNP+riIzKM8yl+vJ/g3/IT/dt+kn/HT/ZTfKqf6qf5d/10P8PP9O/5Wf59P9vP8XP9PJ/mP/Dz/QKf7j/0C/1HPsMvurio7Jf7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+4/9Dv+J3+l3+d3+U7/Hf+b3+s/9Pv+F3++/9Jn+K3/Af+0P+m/8If+tP+y/80f8UX/Mf++P+x/8CX/Sn/Kn/Rn/oz/rf/Ln+HfWGGOMMcb+KeMvNcWv95xfzu/9O33ELw7uAwBXbimU+cv9WTPKtfnPt/uJ+HYRAHiyV5cHLm41aiQlJV04NkNCUGwOwMV/CcoSA5fiRdAWHodEaANlfzf/fqLbGfqD8aM3AeT6RZ9YuBRfGv9zAEz6nfEfeWzk/Arhqbj/Yfw5ACWKXeqTEy7Fi6Dtz+srbaDcP8i/QKs/yD/nFykArX/RJzdcii/lnwCPwlOQ+KsjGWOMMcYYY4yx8/qJyp0uPn9e/B+fv/d8Hq8u9ckBl+I/ej5njDHGGGOMMcbY5fd0t+5PPJKY2KbTn29U++Nj1F8b+edGE/iriXHjLzW8B/j/hQOA/+WAAFkN+e+8ik3/lnMlX3jr/P2upad9AP8ZpfxXNC7zBxNjjDHGGGPsX+7SpP/Xf68uV0KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29L/9jjf4J76l73JfI2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMXa5/b8AAAD//y6u+5g=") 2.450370041s ago: executing program 3 (id=289): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x200, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0xe2, 0x81, 0x10ed, r0, 0x81, '\x00', 0x0, r1, 0x0, 0x2, 0x2, 0xd}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40), &(0x7f0000000ac0), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r2, 0x0, &(0x7f0000002240)=""/99}, 0x20) 2.410501617s ago: executing program 3 (id=290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 2.40054703s ago: executing program 0 (id=291): r0 = socket$inet6(0xa, 0x6, 0x0) syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x1010003, &(0x7f00000001c0)=ANY=[@ANYBLOB="696e746567726974792c646973636172643d3078303030303030303030303030303030302c75737271756f74612c696f636861727365743d6370383530006572726f72733d72656d6f756e742d726f2c64697363ea7353b72433e73b", @ANYRESOCT, @ANYRES32=0x0], 0x23, 0x61fb, &(0x7f0000009680)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r2, 0x1, 0x0, 0x0, {0x1b}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r9, 0x40047459, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'vlan0\x00'}}) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x2c}}, 0x0) 2.172971899s ago: executing program 2 (id=292): r0 = socket$kcm(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.swap.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000180)=0x90) renameat2(r4, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000040)='./file1\x00', 0x2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, &(0x7f0000000040)='./file1\x00', 0x2) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r7, 0x1, 0x4, 0x9d5}, 0x10) 1.5167607s ago: executing program 3 (id=293): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}]}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = add_key(&(0x7f0000000040)='trusted\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000200)='id_legacy\x00', &(0x7f0000000280)='-(]\x00') r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x109) connect$bt_l2cap(r4, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capget(0x0, &(0x7f0000000180)={0x8}) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9e23df464008c0c9a271971d60c250373ece89c53ebfabe60", 0x1f, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b"], 0xb0) getresuid(0x0, &(0x7f0000000480), 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0xe, 0x6, 0xb04, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0xffffffffffffffde}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 1.509097273s ago: executing program 2 (id=294): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg1\x00', {0x1}, 0x9}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x9, 0x0, 0x23, 0x1, 0x1}}) 1.326189382s ago: executing program 0 (id=295): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0x80049370, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, "1db5086296a6fd05"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x12, 0xffffffffffffffff, 0xd5219000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x0, 0x0, 0x0, "62ba7d8200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe80000000000000bbfe8000000000000000000000000000aa08129078000000006000081000001100fc010000000000000000000000000000000000000000000000000000000000000000000000000000052f000000000000fb584d16ca55000000000000007147cba2d20e125979f69a062f570043d540240cf80c97eb081cac13a6a6bdf1bc8cd91d2e3f29d1c4d0349f77a149a8450b8aa2d0355316fca4f947dfc65e093eab168a38779d770502472ec4073edc6ad03b15b67712076b4b70fa6a8ccac7b7f82b610f7681874bd6f4a41a4d017c9898e878"], 0x0) 633.511713ms ago: executing program 0 (id=296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}}, 0x0) 633.303133ms ago: executing program 2 (id=297): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) (fail_nth: 14) 595.341853ms ago: executing program 3 (id=298): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x23000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x17, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r0, @ANYBLOB="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"], &(0x7f00000005c0)='GPL\x00', 0x9f3, 0x41, &(0x7f0000000600)=""/65, 0x41100, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x6, 0x6, 0xe328}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x4, 0x3, 0xa}, {0x3, 0x1, 0x10, 0x8}, {0x1, 0x5, 0x1, 0xbfb161e47a95e2d5}, {0x2, 0x0, 0x10, 0xc}]}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0xfffffffe, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x90) 509.850348ms ago: executing program 3 (id=299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000640)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000030200"}}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa018102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='H', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) sendto$inet(r4, &(0x7f00000003c0)='l', 0x1, 0x0, &(0x7f00000004c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r6}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0xa5) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000c8, &(0x7f0000000780)={[{@nodots}, {@fat=@tz_utc}, {@fat=@time_offset={'time_offset', 0x3d, 0x37b}}, {@fat=@nocase}, {@fat=@check_normal}, {@fat=@allow_utime}, {@nodots}, {@dots}, {@dots}, {@fat=@check_strict}, {@fat=@discard}, {@dots}, {@fat=@nfs}, {@fat=@gid}, {@fat=@sys_immutable}, {@dots}, {@dots}, {@dots}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@dots}]}, 0x1, 0x1bf, &(0x7f0000000300)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x4, 0x2, 0x9, 0xcc4, 0x3, 0x40000000, 0x4}, &(0x7f0000000040)=0x9c) 462.107965ms ago: executing program 2 (id=300): syz_mount_image$jfs(&(0x7f0000000440), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x62ce, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000005dc0)='./file0\x00', 0x18, &(0x7f0000000000)=ANY=[], 0x4, 0x5dbd, &(0x7f0000005e00)="$eJzs3X2QHGeZGPDumVntSitZKyHwypLlNRYQ+WKQrdhB3BFtyEGACCxkZBv5dJKwV6BDloQ+LFu6nL9yxjEkpSq7zo4dUjqbIlepq8SULnG4U6qEMeaKq3JZOPzBOV/nCuSPcI7qkHxEotir3e3ene7td3p2elaWud+vane2e5953ufpeaenu3d3NgIAAOBvhRd/d/8bn7zsw997YOTsvR/94zvvj/rr4+v70oCB5PbuN6tCZtOq75/PPLK9jcHx2/y8uPRPlrwx8OD6Tzyy9iPf3/ani4ZXrBy54RvHb3zowec/+PPnH39yfdk46Xy6emo5/ss4ilb86PjjD33nzy4dWxePjR8P3BctWhQv/taiOJdi9bkoiu6YrDP7zeNn1+wYu73/y72Z9QtzScz3v936knl2ZOtnnz75heHvHB/au+YnZ67fc99USNzXNJ+i6JJtzffviaJobvIxJp1tg+mdk9sNURTNa7rf+0vquqrN+q8JLC9Pbuckt/0ledLvX5lbbrRZRyN329vm/Tp17yznz8tvv/zOaLbUkttLktvnkturZ5innn7EUS2OGpPl74qn5kjU9LjFUTw+t/sml2vjy9HkcpRfjnPLtdxyvSfX1/i4yYatx3F2fRqXW5/ujhvJ+iub99UFNgbWL01u+5In6s/S5Sj/xYT+aV9M9RE11XX6Qk2MgFrguZeunywveTD6k3X98eJp9xktkH7v9He3b379h4efGwjUET8bJ/njjvIPjzx18uu3nlg6GMq/rZbkr3WU/8X6S+e+dmZwfjD/0TR/vaP8m37x44cfuOnQkuD2OZ1un0ZH+Vd+Zf6Rs4c29g6F8h9L8/d1lP+GLSvWXn7m4F3B+len22duR/l/8Oiq81uOfvNEMH+U5p/XUf5Xn3pmeX3pY6eC+U+m26e/o/w3r3li3ceXPfhkcPu/nOZf0FH+zace2rb36RdWBefnhnT7DHSU/9y6V147P7D+mdC+Mz5WC3wHgHa8LTnGejhZ7vQ8s6qm84UnhhoTx3zzk48F3RwoJ246dwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATj227j9+sXn5Xf/3rk2n/tOKnY1kubcRRXEURa/XJ5bT9XOiKJ4bRdH+A9v3Hdi5+3NDv7Xn4L7d23cNbT8wNLL7wL57hv7e3x3aN7J31/Z7xr67+po1E/dbPJ4tihbHl0+rZXR0dDSKoqHmdel4v/+xZ///pif/6jNRtPrtr6xoBPt533977cNLCj7nxMOjG/719Y8envO/F06sGEjqGgjVNZBdl1bQP/zyn3/ouR+O1fWOVnU9/tIt/y9T0PiKqTyJWm9UG/+iN55XWMdk1VP1jG+vxo6du0ZWl2/fOLB93/PCH535D3dv+hcT27cv2Eeb23dsqzZGH/npA++570MjH7iIH/ey7d3Uwnh96fbrS7b3JUlflwT6qgX6umvo1dP/8t//l6/dF61u/PSK6WOX9dWTTICeeGkSeebJVuOmI8yLF2Xy9yXx6SOe3u99B+7c+7799xy+Zued2z838rmR3WvWXL/22jXXXrd2zfvGW5/43LX+0/Hf02b/85NM8+NlhdstvzYd94rxz/UoKTu9afoiqyfqn7id3M7Z8HzX/cn3+uPF03KNFki/d/q72ze//sPDz4WeefGzEyPOjRZM3MbLA5G7cnesTxZcNP6FeV7u+b2+Xenn9p6XZXWVzauxusrnVXNFLfZjL1318E+f/tK/uq2N/UVT6Hh9aZ3zxp4u10ZNz9vp26qorzYen+Gi7XD7Nfv+6J6dm4+W7c+bH5nmzznx8Oj/Wh5/4uD+P983seKCvF42F9Th6+Vk1VP1jG+vvuTxuFi3b29UT/rqL6xrY/z0B99z54lfmaxvzpzo7u0HDuy7duLzW7Wvv5izcMnO+5ddPq2v6yY+l+33r8gtl+73a8X9le338+NMxRfnG8ot90f1jl4nNv3ixw8/cNOhJcHXidPtvk78dmapXvF1ohZ4vj/yV18deuO2T79RNp9u3L/s3iUFn/PtDY9+8w9/9doP3HLTRyZWXJD9UHNBHe6HJqtO6km31/h+6LqLp48373HOPBHj4dErvvHum8+f/eKnJlaUbd/J6KLtu6Z8P18P9HVbzzsXPfqTZe/s3vzdv/Wvr3rvvPkX2fztS7ZvX2D7Tlad1FNv3r7vvX3Prjsmli/e47YJvSXnP+nrzv57Dn9h+65dI/v2t9dXu6+n6Tj5rdzp62n66rG4pK/08Zrqa/a+aGd7tft8S+u/I5ej0+cbQGrqdWFOZn1+/5le91txSbTpvV/69kvx0MTrZbeut6bjXJZ7Ye70emvZedI7c8uNpP0rkiqb+p4w/TxpfICy86T8OGXnSVfllsvPYx4uKiv4+PUkr7z5eqPp9TbGMoTmx2CSfzBZTo83V7w3ur7+3Ls+Fg+3Nz/aPZ5Ox/k7uQ3U6fF02fxYGRXX1e358e7cncof76OFlfUFHo+yx3tlJtHoaNXz8oFA1el5eX8Ud5R/eOSpk1+/9cTSYP5ttSR/raP8L9ZfOve1M4Pzg/mPpvkbHeVf+ZX5R84e2tgbzH8s3T59HeW/YcuKtZefOXhXKH+0Oq1/bkf5f/DoqvNbjn7zRLD+KM3f31H+m9c8se7jyx58Mpj/5TgZZ+y5G0XHz67ZMbEcRz3J/E/r6MnUFeWX49xyLbdcb16uTfysd3KAehxn16dxufVpH41k/ZVNNRbZFFifPmv7kif2z9LlKP9F6/Xp7imt63Tg9edCqTUdexStL7s+2S2v/2jw95uX05//p3OgtzHx2F2X215lrx/5vXeaL3gdNnAJo+x4YfrP3+Z19Px79alnlteXPnYqeF31ZLvXVfdmluaVXFetWm9wf3Ey3Z9W2x8NhvK/nOav9noQzJ+8HpTNs3fllkvnWU/xeGXzLH+c0h8t6Kjvzace2rb36RdWBefZhoknfPk8eyyztKB0nlX7uXRwnj0bd2V7BPNv6M5xTXCeJcc1BfMsbp42V+fuV32eZY9HP5Hc3p2L70+uEM+073PrXnnt/MD6Z4Lz7Fi78+wPMksDpfOs2vFt8HGaPL6d7ePz2Tn+jC/Q8eebdnyY/Dh3+vHh74yfgFU9PtwYWD/T48P+aV9M9RG9FY8PA/sZAGjle4/c83+al9Pz//TaTnr+/+3c/aqeV+Z/HyrVrfPKYP5j3TlfCR6nTp6vzPb51mwfZ8/u+Zbj+ED+yevIs31daHbPKy++85AkznnIjDgPAQD45XLlv/3qrzcvp+f/k7/3lvz9/wvpcu7+znMD+S/Yee5sXydxHl2Yv0u/X1F+HWy2r1O5DnDhrgPc7zoAAABvqq079o2M7N+7/faRrTt37zwwub5n/Mxp+u+p/v3kdkMuT9nvTxfFz2sR/6lg/mw97w/EhzTGf+c1ij57++ev23rHyF0z7T80Xln/RfGt+s+fX4T6XxuID6naf2i8sv6L4lv1f1Mwf7aeDwTiQ6r2HxqvrP+i+Fb9fzqYP1vPrwbiQ6r2HxqvrP+i+Kn+50yLz/89WKj/XwvEh1TtPzReWf9F8a0e/5uD+bP1fDAQH1K1/9B4Zf0Xxbfq/5Zg/mw9/yAQH1K1/9B4Zf0Xxbfq/9Zg/mw96wLxIVX7D41X1n9RfKv+PxPMn61nOBAfUrX/0Hhl/RfFt+p/czB/tp5/GIgPqdp/aLyy/oviW/V/WzB/tp4PBeJDqvYfGq+s/6L4UP9F11lD/f+j5PY3ioedpmr/ofHK+i+Kb/X4bwnmz9bz64H4kKr9h8Yr678ovlX/vxnMn63nw4H4kKr9h8Yr678ovlX/W4P5s/V8JBAfUrX/0Hhl/RfFt+p/WzB/tp5/HIgPqdp/aLyy/oviW/W/PZg/W89HA/EhVfsPjVfWf1F8q/4/G8yfredjgfiQqv2Hxivrvyi+Vf+3B/Nn6/l4ID6kav+h8cr6L4pv1X/+/Q5D/f+TQHxI1f5D45X1XxTfqv+RYP5sPesD8SFV+w+NV9Z/UXyr/ncE8y+desfRpvcNyMeHVO0/NF5Z/0Xxrfr/XDB/tp5PBuJDqvYfGq+s/6L4Vv1/Ppg/W8+NgfiQqv2Hxivrvyi+Vf87g/mz9WwIxIdU7T80Xln/RfGt+v+tYP5sPZ8KxIdU7T80Xln/RfGt+v9CMH+2no2B+JCq/YfGK+u/KL5V/7uC+bP13BSID6naf2i8sv6L4lv1f2cwf7aeTwfiQ6r2HxqvrP+i+Fb97w7mz9azKRAfUrX/0Hhl/RfFt+p/TzB/tp6bA/EhVfsPjVfWf1F8q/73BvNn67klEB9Stf/QeGX9F8W36v+LwfzZem4NxIdU7T80Xln/RfGt+t8XzJ+t5zOB+JCq/YfGK+u/KL5V//uD+bP1bA7Eh1TtPzReWf9F8a36PxDMn63ntkB8SNX+Q+OV9V8U36r/g8H82Xp+IxAfUrX/0Hhl/RfFt+r/rmD+bD1bAvEhVfsPjVfWf1F8q/4PBfNn6/nNQHxI1f5D45X1XxTfqv/8+0CG+t8aiA+Z7P/AvpGRrQf33rH9wMjW3XvuGNm/9dC+nQcOjCQHalX/riz8d0Fv8h+y0FLm+TExSXbu3j+yb/r+e27L+ds8J6Lxv3+aO3Ebv6Ot+PzbXnc6ay6W+d4TNVpur8tyywuT96NdGHjf43x8mnbZ+BfT3482P2yj5H1cy/ZP+fFD+6e4RXzR/jW0Pyt7/Zvx/q90fve17D+/ujf5w77e+O1txUeT/9/tleL6Sudrtb87Dc7Xl9ubr/n3XS+br/n4mc7X/orzNT9+aD7VWsS3Oh5qd75uDsSn2p+fcbDf0YL/GzjT/zOYpp3R/xnMfZqmg/9l0P7zodrfkQefD0nRZc+H/N9xlz0f8vEzfT7Mrfh8yI9f9nwoim91ftzu8+GWQHxI+/Oh2vsWBOfD6vbmQ/7/WJXNh3z8TOdDX8X5kB+/bD4Uxbe6XthyPpyfegA+HYhvV/vzo9r7igTnx7b25kf+/0mUzY98/EznR1xxfuTHL5sfRfGtfp7S7v7iU4H4VOb1c8f+8ZP6ndt37Tyc+wWMgeT1881+Pbwgr8t//Wt/8bOJT0kdtWl1lB1PxLk6FiWVLAr938NA3bf/13+36ds//9JXo2j12+vLw3VPlTz1KSceHl1878qv3/qOUx8aq7/Wsv7JyPT/Fpf8v+N8fNpPY9ee/Qd+Zceeg7vb/Y2r1tL3Q6lNLs/S+6EkK+ttvr9J6O8JZvo+pz3Tvrg4tf3+JgC/JBYee3ZB83L6/n/p69Fgsu+bm+wA0/XtH2dXe3+94HH20faOs1dNfTl+AFx2nL0qt5z22+5xdq3icXZ+/LLj7KL4Vr+31+5x9icD8TOVnSdjE2R8foxsPbRnX/PvxHU8T8bu1Mb/re1+vbP7f3yr1ze779vYqfbrn933hZz9+rv3f4CbfzCWXp+f/fpn9/88d+qCnS8lb0lR9v6RZedRob9Ln+l51JxpX1ycnEcBwMXvn+/70b9pXk7P/5Oz2Mnz/y8ny/Uujz/b51FVrz+UnVfO9nHyW//997t3HpTJn5wHOR9oMdhFwPkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLE/+B//+VvNy72NwfHbF393/xufvOzD33tg5Oy9H/3jO++/9E+WvDHw4PpPPLL2I9/f9qeLhlesHLnhG8dvfOjB5z/48+cff3J96UADEzdXJ4t9URT/ZRxFK350/PGHvvNnl46ti8fGjwfuixYtihd/a1Gcy7D6XBRFd0zWmf3m8bNrdozd3v/l3sz6hbkk+b6i/npaT6bO6O7SjngL6kvm2ZGtn3365BeGv3N8aO+an5y5fs99UyFxX9N8iqJLtjXfvyeKornJx5h0tg2md05uN0RRNK/pfu8vqeuqNuu/JrC8PLmdk9z2l+RJv39lbrnRZh2N3G1vm/frVG2W8+flt19+ZzRb0j4vSW6fS26vnmGeevoRR7U4akyWvyuemiNR0+MWR/H43O6bXK6NL0eTy1F+Oc4t13LL9Z5cX+PjJhu2HsfZ9Wlcbn26O24k669s3lcX2BhYvzS57UueqD9Ll6P8FxP6p30x1UfUVNfpCzUxAmqB5166frK85MHoT9b1x4un3We0QPq909/dvvn1Hx5+biBQR/xsnOSPO8o/PPLUya/femLpYCj/tlqSv9ZR/hfrL5372pnB+cH8R9P89Y7yb/rFjx9+4KZDS4Lb53S6fRod5V/5lflHzh7a2DsUyn8szd/XUf4btqxYe/mZg3cF61+dbp+5HeX/waOrzm85+s0TwfxRmn9eR/lffeqZ5fWlj50K5j+Zbp/+jvLfvOaJdR9f9uCTwe3/cpp/QUf5N596aNvep19YFZyfG9LtM9BR/nPrXnnt/MD6Z0L7zvjYhX6FBfjl8rbkGOvhZLnT88yqms4XnhhqTBzzzU8+FnRzoJy46dwFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC9ozWDzYvv3bikRs//z+3/vdGHEVx4D6jBdLv1ecMDw91UMfKr8w/cvbQxt50eWzswQ7yAAAAANMte/VLX2xeTs/Da8lyHPVFg9GheG60rPD+6TWCZelSnF2fv4YwdyqyK3lqXcpT71KeRpfy9HQpz5wu5entUp6+kjx9UXt55rbMU2u7nnldytPfpTzzu5RnQZfyXNKlPAu7lGegZZ725+GiLuVZ3KU8b+tSniVdyvP2LuV5R5fyXNqlPPlryjOdhwuSyMtCeca/qJfmacT1yW8UXU9Px7m84jj9bY6Tv2Y/03HmtjnOVRXH6WtznHdXHCduc5xVufvVZjhOrWScdN7eHeonXQqOM7HnTfPc03GeKJPncJfyHOlSnt/uUp5/2qU8v9OlPPdWzAMQ8nvPX/2Hzcvp+X96/hlHA1Fv47poXrLHyV8FSM93rxj/PP31LrRDSvMtz63vKcuXP8HO5btipvXlLyDk8r2zZb7GtPPVgnyN5nwru5QPAAAAZuKfnTuS+dHc9PP/wai3sWTy/PVdufuXnq/nf5CdSPNd3aV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDfsGuvsXHVVwLA/9cznpk1jxiUhAl5WUmWgBB5EGW1sLswirRIrBYclk14RMibBYMjTAJxAiS7q7BQNZElKtrQB68PDRRVCBWQkCJaV6KCFvVDo0aUikddg4vgCyqUvIDQTjX2vfb1PLCZlqRpfz+he+fce87//O9FQjrXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD85fvl13/3YjoeHujv7BnqGgxRqPxTV7mO5F4mVyp1NLGPD15af+1vX9u+N4krvfPZJhYCAAAAajx90ayz03EyhyejdxQKIZ9dHvJRbkJdMf4OUIzjlvbR87wlYWVm799fGpVaRuLTo9Mm1BXiukIcZ+K6vm3bb17f29u9+Qv8UelT/RzV+4lCGPl8Me/UsGbJzhf2RR2jz9E2yXO0xHVLt9xy69K+bdvP23DL+pu6b+reuGLFyguWr1h+/gUrlt64obd72egx5CdZL4RQmvheav7VnVJzBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvmA7frr3S+l4eKC/s2eoa7AtCiFqUFOuI7mXyZVKHU3s442HHp2TmXX//iSu9M5nm1gIAAAAqPGjp2ddnI6TOTwZvaNQCPlsLmTCrJF4wXhqNoRyObm+qOr6sdg7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwbB043PnrdDw80N/ZM9Q1eFIUQtSgplxHci+TK5U6mtjH2hXfuvjfZt/zYBJXehebWAcAAACo9crZrfek42QOb4njKBRCMSwMrdGsCXXJt4Ezq9arzkvWmTvFvOpvB43yFk4x76wp5p0zSd7l8fnOAAAAACeea9p/tjYdJ/N/axxHoT3ks8WQiePJ5vjku8D8qrykfrL5Pqlf0KB+srk/qa+e+wEAAOBv2XnvPvNpOq6d/4shny2Mzd+T/T39svjs7+QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCM/PnzpD9Lx8EB/Z89Q12AmCiFqUFOuI7mXyZVKHU3sY80f3tl195V3TE/iSu98tomFAAAAgBpP5v7xjnSczOHJ6B2FQshn20JrOGlk7n8rN236hv+fPTeEUBpJyOXCneu3bNl8/ugxyfuPaM+/LL5l4NyavOWjx2P/pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ9qxRO716Xj4YH+zp6hrsG/i0KIGtSU60juZXKlUkcT+3hl9zlHr7vvuYEkrvQuNrEOAAAAUGtO7/O/ScfJHJ7M/lEohGLIhVyYORKnZ/2Klqr1Gn0zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP569G3bfvP63t7uzX744YcfYz+O93+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+X7G7/2fjoeHujv7BnqGixEIUQNasp1JPcyuVKpo4l9/MN18y6Ye3Dr7Ulc6V1sYh0AAACg1rr3th5Mx8kcnsz+USiEYmgNrWFGHNcamf/bj8VuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA42l+iEL5czpj9fHeNQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFOPTqmofS8fBAf2fPUNfgKVEIUYOach3JvUyuVOpoYh/X7v/yf92658VzkrjSO59tYiEAAACgRuu7r/53Ok7m8GT0jkIh5LNzQj7Mia/0TlwgyiSJdb8LjNf974SyzJTrdlXteHRnhfg7RGFsn2Hks8N43X2fWVeMr7a0T+09AQAAwIlsxq7L/y8dJ/N/axxHoT3kszNSc/WtE+rbpjzH3z+h7pQp1313Ql37JHV/hlcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTp3tUvnZGOhwf6O3uGugajKISoQU25juReJlcqdTSxj1L3Q88/fvXArCSu9C42sQ4AAABQ68p3Cl9Nx8kcnsz+USiEYpgbTg1zR+b+0D6xPsk7qfTz11ftfe2aEJbNfHletmG/b+676v1w5J/f+mj0MBKG0DIxqSWEaXG/qEG/63/xxJoXPt35SAjLZmTmNO433mr8UCUqlU/fsejxq2fuX9VwGQAAADihFR499J10nMz/yUQdhfaQz25sOP8neZ9r/u/sm71jenyMvwBUVbS0x/1aGvTr//CRjsPr/vNwZf5/eV5h7P8VOHvhxPx0q/Sx6ptDVCrPf+astUcP3XbF6IWkf6ZB/3WtC07b/d7sBUn/Qnz9hjDV/qGqf1/XkYVL2k6+ZGL/EEJHvf7fvvTpj9c8+OE1o/0bv++lvxr+1+lh0zcKvclx9Ept/9UPr9y9Pff2tIn9owb9F7/47MGn7lxzb/Xzn5mt17/2WKXSNVvuP3D34rtWdV+Y6t/SoP/tHW988JXv/fCxSv8D89vG+i/+jOeftP++hbsO7Nn5wLqJ779Ur//1521+dtuGa++rfv62qoXTbz59rH3/b86JLtva9/rm6lsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntq6nPjmSjocH+jt7hroGW6IQogY15TqSe5lcqdTRxD5+ktn3yWMHiycncaV3sYl1AAAAgFpXrHrzpnSczOHJ7B+FQiiGXMiFtpG5//Qdix6/eub+VaE9vh+fs72b+race+OmrRtvONaPAAAAAExiz0Ufr0rHyfyfjeMotId8dlFojef/1Q+v3L099/a0ZP4PIYz8uT9744be7mVh7DtBX9eRhUvaTr4kycvE50Ilb8n1m3rjzwTJus89+U/LL7zqyrH8lnT++eN58585a+3RQ7ddUTdvxXjem3Oiy7b2vb45tc/SWN7y8bz+A3cvvmtV94XJc0TxuRA/T5K3b+GuA3t2PrAuyWuJz23xegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABACKd99Pv/ScfDA/2dPUNdgyETQtSgplxHci+TK5U6mtjHJxe/PHy0/d8fTeJK73y2iYUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD+yAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhb36CbGqiuMAfs57z+bpM3sjgjNlg5IbhUAYklyEs+kPMZUYRQnSFE2bioQoIxepQ0NUC6HA0I1otC5mIZWLSdKiILJoEa0KalUxixmJMSpm5p735+plxgsOIZ8PPM77nfvu9/7ueefdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9rj/98b62z7qn1zY/nX3/x4oM33/3V4dGZ1+775PlD6z9dd7E5NvzAmzvu+W7ky96hgc2j2z+aeGh87Oxdf589emx40Qu9sjBszcp6CPGPGMLArxNHx899vX5uLs5dPzYPht7euPaz3phL2DYbQni61Wf3wYmZwWfmxkNv9XTN35QLyd9XaFRTPwua3f1yfaln++zAE0+dnHx26NzExn2Dv0/f8cLB9kdivWM/hbBmpPP8FSGEldlrTtptfenkbNwVQljVcd6di/R12xL7v72g3pCNN2RjY5GcdHxTrq4tsY9abuxZ4nllVa5xfl5+/fIPo2sl3eeabDydjVuvMqeaXjFUYqi12n8utvdI6PjeYojze7veqivzdWjVIV/HXF3J1dUVufuav262sNUYu+fT53Lz6XFcy+Y3dT6rr2B3wXx/NtazH+pfqQ75Nwsal71p30fo6GtquTZGgUrBby/Nt9rLvoxGNteIay87598rSMemvnhyz58/vnq6WdBH/DBm+bFU/tDo8ckPHjvT31eUP1LJ8iul8s9Xv5l9f7pvdWH+kZRfLZX/yD+/vXH44f3rCtdnKq1PrVT+5rdXH5jZv7tnY1H+iZRfL5W/fe/AjlunX3q5sP9taX1Wlsr/4Z0tl/Ye+fhMYX5I+atK5f90/NSGav+7FwrzJ9P6NK4iv/2v8+jgezvvv2XsWOH6f5vybyzV/54L4yP7Tn6+pXB/7krr0yyVP7vz+18uNYdPFT0744nl/oeF/9ivYxOAQSAMowRSJlUWyLgZIeNaeMJhqVbyHlhYXft/sJcnNtYX/9HOnJV64X/PuvmuePfKQ50jtQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0JQAA///zvW71") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) 0s ago: executing program 2 (id=301): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f00000000c0)=ANY=[], 0x1, 0x5b8d, &(0x7f0000007500)="$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") quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000940)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x10b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x400448cc, &(0x7f00000000c0)={'wlan0\x00'}) kernel console output (not intermixed with test programs): tion_names [ 43.282199][ T6464] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 43.382781][ T6507] loop1: detected capacity change from 0 to 256 [ 43.391982][ T6507] FAT-fs (loop1): Unrecognized mount option "shortnwer" or missing value [ 43.838931][ C1] sched: RT throttling activated [ 43.975620][ T6464] bcachefs (loop4): alloc_read... done [ 43.977302][ T6464] bcachefs (loop4): stripes_read... done [ 43.978820][ T6464] bcachefs (loop4): snapshots_read... done [ 44.034455][ T6464] bcachefs (loop4): going read-write [ 44.049975][ T6464] bcachefs (loop4): journal_replay... [ 44.079984][ T6464] bcachefs (loop4): bch2_journal_replay(): error ERESTARTSYS [ 44.083634][ T6464] bcachefs (loop4): bch2_fs_recovery(): error ERESTARTSYS [ 44.085572][ T6464] bcachefs (loop4): bch2_fs_start(): error starting filesystem ERESTARTSYS [ 44.087907][ T6464] bcachefs (loop4): shutting down [ 44.089704][ T6341] bcachefs (loop4): going read-only [ 44.091308][ T6341] bcachefs (loop4): finished waiting for writes to stop [ 44.093156][ T6341] bcachefs (loop4): flushing journal and stopping allocators, journal seq 14 [ 44.095581][ T6341] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 44.099403][ T6341] bcachefs (loop4): unshutdown complete, journal seq 14 [ 44.101794][ T6341] bcachefs (loop4): done going read-only, filesystem not clean [ 44.115718][ T6464] bcachefs (loop4): shutdown complete [ 44.152845][ T6521] fuse: Bad value for 'fd' [ 44.180032][ T6293] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 44.182989][ T6293] Bluetooth: hci0: Injecting HCI hardware error event [ 44.186206][ T6293] Bluetooth: hci0: hardware error 0x00 [ 44.476480][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.929692][ T6533] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 44.932893][ T6533] warning: `syz.0.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 45.066896][ T6540] FAULT_INJECTION: forcing a failure. [ 45.066896][ T6540] name failslab, interval 1, probability 0, space 0, times 1 [ 45.087207][ T6540] CPU: 1 PID: 6540 Comm: syz.1.53 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 45.089887][ T6540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 45.092751][ T6540] Call trace: [ 45.093698][ T6540] dump_backtrace+0x1b8/0x1e4 [ 45.095039][ T6540] show_stack+0x2c/0x3c [ 45.096233][ T6540] dump_stack_lvl+0xe4/0x150 [ 45.097497][ T6540] dump_stack+0x1c/0x28 [ 45.098620][ T6540] should_fail_ex+0x3b0/0x50c [ 45.099896][ T6540] __should_failslab+0xc8/0x128 [ 45.101225][ T6540] should_failslab+0x10/0x28 [ 45.102538][ T6540] kmem_cache_alloc_noprof+0x84/0x350 [ 45.104036][ T6540] skb_clone+0x1c8/0x330 [ 45.105171][ T6540] __netlink_deliver_tap+0x36c/0x6e4 [ 45.106666][ T6540] netlink_deliver_tap+0x1ac/0x1b0 [ 45.108041][ T6540] netlink_unicast+0x640/0x898 [ 45.109388][ T6540] netlink_sendmsg+0x7a0/0xa84 [ 45.110677][ T6540] ____sys_sendmsg+0x4d8/0x77c [ 45.111986][ T6540] __sys_sendmsg+0x26c/0x33c [ 45.113295][ T6540] __arm64_sys_sendmsg+0x80/0x94 [ 45.114725][ T6540] invoke_syscall+0x98/0x2b8 [ 45.116030][ T6540] el0_svc_common+0x130/0x23c [ 45.117378][ T6540] do_el0_svc+0x48/0x58 [ 45.118540][ T6540] el0_svc+0x54/0x168 [ 45.119667][ T6540] el0t_64_sync_handler+0x84/0xfc [ 45.121171][ T6540] el0t_64_sync+0x190/0x194 [ 45.169418][ T6530] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 45.287507][ T6549] loop2: detected capacity change from 0 to 4096 [ 45.300098][ T6549] ntfs3: Unknown parameter ' [ 45.300098][ T6549] ' [ 45.363784][ T6394] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.487005][ T6552] loop1: detected capacity change from 0 to 256 [ 45.494567][ T6552] FAT-fs (loop1): Unrecognized mount option "shortnwer" or missing value [ 46.301694][ T6563] loop4: detected capacity change from 0 to 8 [ 46.319589][ T6549] loop2: detected capacity change from 0 to 32768 [ 46.343465][ T6549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.57 (6549) [ 46.358211][ T6563] SQUASHFS error: Failed to read block 0x62b: -5 [ 46.360969][ T6563] SQUASHFS error: Unable to read metadata cache entry [629] [ 46.455414][ T6565] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.609288][ T6563] SQUASHFS error: Unable to read inode 0x11f [ 46.739172][ T6293] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 46.957717][ T6550] loop3: detected capacity change from 0 to 32768 [ 47.030586][ T6549] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.042389][ T6549] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 47.044894][ T6549] BTRFS info (device loop2): using free-space-tree [ 47.053192][ T6550] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.131417][ T6550] XFS (loop3): Ending clean mount [ 47.208086][ T6563] loop4: detected capacity change from 0 to 32768 [ 47.314323][ T6563] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 47.318593][ T6563] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 47.360946][ T6284] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 47.378595][ T6563] bcachefs (loop4): alloc_read... done [ 47.381968][ T43] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 47.387982][ T6563] bcachefs (loop4): stripes_read... done [ 47.407683][ T6563] bcachefs (loop4): snapshots_read... done [ 47.411810][ T6563] bcachefs (loop4): journal_replay... done [ 47.418059][ T6563] bcachefs (loop4): resume_logged_ops... done [ 47.431395][ T6563] bcachefs (loop4): going read-write [ 47.443610][ T6563] bcachefs (loop4): done starting filesystem [ 47.541795][ T6298] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 47.571858][ T6294] bcachefs (loop4): shutting down [ 47.579228][ T6294] bcachefs (loop4): going read-only [ 47.580683][ T6294] bcachefs (loop4): finished waiting for writes to stop [ 47.630400][ T6294] bcachefs (loop4): flushing journal and stopping allocators, journal seq 12 [ 47.652177][ T6573] loop0: detected capacity change from 0 to 32768 [ 47.669738][ T6294] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13 [ 47.687517][ T6294] bcachefs (loop4): shutdown complete, journal seq 14 [ 47.707398][ T6294] bcachefs (loop4): marking filesystem clean [ 47.749110][ T6294] bcachefs (loop4): shutdown complete [ 47.755927][ T6573] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 47.773862][ T6573] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 47.824858][ T6559] loop1: detected capacity change from 0 to 65536 [ 47.837694][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 47.868326][ T6559] XFS (loop1): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 47.906564][ T6573] bcachefs (loop0): alloc_read... done [ 47.908230][ T6573] bcachefs (loop0): stripes_read... done [ 47.913971][ T6573] bcachefs (loop0): snapshots_read... done [ 47.916715][ T6573] bcachefs (loop0): journal_replay... done [ 47.918442][ T6573] bcachefs (loop0): resume_logged_ops... done [ 47.926493][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.65'. [ 47.945291][ T6573] bcachefs (loop0): going read-write [ 47.967796][ T6573] bcachefs (loop0): done starting filesystem [ 47.997024][ T6559] XFS (loop1): Ending clean mount [ 48.016370][ T6573] bcachefs (loop0): shutdown by ioctl type 768 [ 48.038265][ T6643] loop3: detected capacity change from 0 to 1024 [ 48.071080][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.077800][ T6647] loop4: detected capacity change from 0 to 256 [ 48.118312][ T6283] XFS (loop1): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 48.137254][ T6287] bcachefs (loop0): shutting down [ 48.138775][ T6287] bcachefs (loop0): going read-only [ 48.140531][ T6287] bcachefs (loop0): finished waiting for writes to stop [ 48.193840][ T6287] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11 [ 48.204372][ T6287] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 48.246248][ T6287] bcachefs (loop0): shutdown complete, journal seq 13 [ 48.259486][ T6287] bcachefs (loop0): marking filesystem clean [ 48.293752][ T6287] bcachefs (loop0): shutdown complete [ 48.299720][ T6653] No such timeout policy "syz0" [ 48.400220][ T6657] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 48.425504][ T6657] capability: warning: `syz.4.77' uses deprecated v2 capabilities in a way that may be insecure [ 48.498682][ T6661] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 48.508623][ T6663] loop3: detected capacity change from 0 to 8 [ 48.599834][ T6663] netlink: 104 bytes leftover after parsing attributes in process `syz.3.78'. [ 48.615678][ T6663] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 48.715210][ T6651] loop2: detected capacity change from 0 to 32768 [ 48.818207][ T6679] loop1: detected capacity change from 0 to 256 [ 48.870786][ T6651] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 48.874219][ T6651] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 48.974854][ T6651] bcachefs (loop2): alloc_read... done [ 48.976412][ T6651] bcachefs (loop2): stripes_read... done [ 48.978085][ T6651] bcachefs (loop2): snapshots_read... done [ 48.991587][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.84'. [ 49.011141][ T6651] bcachefs (loop2): journal_replay... done [ 49.013710][ T6651] bcachefs (loop2): resume_logged_ops... done [ 49.015414][ T6651] bcachefs (loop2): going read-write [ 49.024275][ T6651] bcachefs (loop2): done starting filesystem [ 49.111093][ T6284] bcachefs (loop2): shutting down [ 49.114375][ T6284] bcachefs (loop2): going read-only [ 49.121971][ T6284] bcachefs (loop2): finished waiting for writes to stop [ 49.213307][ T6284] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9 [ 49.245668][ T6284] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 49.257854][ T6284] bcachefs (loop2): shutdown complete, journal seq 11 [ 49.263153][ T6284] bcachefs (loop2): marking filesystem clean [ 49.325763][ T6284] bcachefs (loop2): shutdown complete [ 49.349636][ T6709] loop3: detected capacity change from 0 to 1024 [ 49.413932][ T6709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 49.530413][ T6711] loop1: detected capacity change from 0 to 1764 [ 49.598981][ T6711] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 49.762373][ T6715] loop3: detected capacity change from 0 to 256 [ 50.005032][ T6670] loop4: detected capacity change from 0 to 65536 [ 50.040942][ T6721] input: syz1 as /devices/virtual/input/input2 [ 50.069553][ T6670] XFS (loop4): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 50.143740][ T6733] FAULT_INJECTION: forcing a failure. [ 50.143740][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.147262][ T6733] CPU: 1 PID: 6733 Comm: syz.2.95 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 50.149833][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 50.152595][ T6733] Call trace: [ 50.153424][ T6733] dump_backtrace+0x1b8/0x1e4 [ 50.154714][ T6733] show_stack+0x2c/0x3c [ 50.155875][ T6733] dump_stack_lvl+0xe4/0x150 [ 50.157136][ T6733] dump_stack+0x1c/0x28 [ 50.158291][ T6733] should_fail_ex+0x3b0/0x50c [ 50.159568][ T6733] should_fail+0x14/0x24 [ 50.160760][ T6733] should_fail_usercopy+0x20/0x30 [ 50.162158][ T6733] put_itimerspec64+0x234/0x2a8 [ 50.163524][ T6733] __arm64_sys_timer_settime+0x1a8/0x224 [ 50.165111][ T6733] invoke_syscall+0x98/0x2b8 [ 50.166459][ T6733] el0_svc_common+0x130/0x23c [ 50.167767][ T6733] do_el0_svc+0x48/0x58 [ 50.168925][ T6733] el0_svc+0x54/0x168 [ 50.170067][ T6733] el0t_64_sync_handler+0x84/0xfc [ 50.171417][ T6733] el0t_64_sync+0x190/0x194 [ 50.172778][ C1] vkms_vblank_simulate: vblank timer overrun [ 50.203349][ T6670] XFS (loop4): Ending clean mount [ 50.260430][ T6294] XFS (loop4): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 50.365798][ T6738] loop2: detected capacity change from 0 to 256 [ 50.623606][ T6720] loop3: detected capacity change from 0 to 40427 [ 50.638108][ T30] audit: type=1326 audit(50.600:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.645376][ T6720] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 50.647494][ T6720] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 50.649757][ T30] audit: type=1326 audit(50.600:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.659701][ T6720] F2FS-fs (loop3): invalid crc value [ 50.661663][ T30] audit: type=1326 audit(50.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.678478][ T6720] F2FS-fs (loop3): Found nat_bits in checkpoint [ 50.687704][ T30] audit: type=1326 audit(50.600:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.700875][ T6749] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 50.703648][ T30] audit: type=1326 audit(50.600:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.725680][ T30] audit: type=1326 audit(50.600:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.731459][ T6720] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 50.733401][ T6720] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 50.743032][ T30] audit: type=1326 audit(50.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.748724][ T6754] loop0: detected capacity change from 0 to 256 [ 50.753874][ T6754] MINIX-fs: mounting file system with errors, running fsck is recommended [ 50.754537][ T30] audit: type=1326 audit(50.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.769660][ T30] audit: type=1326 audit(50.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.775727][ T30] audit: type=1326 audit(50.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6716 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8e341e68 code=0x7fc00000 [ 50.787139][ T6298] syz-executor: attempt to access beyond end of device [ 50.787139][ T6298] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.818513][ T6298] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 50.907012][ T6740] loop4: detected capacity change from 0 to 32768 [ 50.984436][ T6740] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 50.987924][ T6740] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 51.015145][ T6766] loop3: detected capacity change from 0 to 1024 [ 51.033984][ T6740] bcachefs (loop4): alloc_read... done [ 51.036689][ T6740] bcachefs (loop4): stripes_read... done [ 51.040560][ T6740] bcachefs (loop4): snapshots_read... done [ 51.043788][ T6766] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.047774][ T6740] bcachefs (loop4): journal_replay... done [ 51.053125][ T6740] bcachefs (loop4): resume_logged_ops... done [ 51.058484][ T6740] bcachefs (loop4): going read-write [ 51.079438][ T6740] bcachefs (loop4): done starting filesystem [ 51.108490][ T6773] loop1: detected capacity change from 0 to 256 [ 51.125247][ T6773] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 51.141393][ T6294] bcachefs (loop4): shutting down [ 51.146562][ T6294] bcachefs (loop4): going read-only [ 51.150854][ T6294] bcachefs (loop4): finished waiting for writes to stop [ 51.189472][ T6294] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 51.201917][ T6294] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 51.208850][ T6294] bcachefs (loop4): shutdown complete, journal seq 11 [ 51.213803][ T6294] bcachefs (loop4): marking filesystem clean [ 51.238884][ T6294] bcachefs (loop4): shutdown complete [ 51.426922][ T6741] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 52.453707][ T6787] loop0: detected capacity change from 0 to 256 [ 52.696798][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.135568][ T25] kernel write not supported for file 79/net/vlan/vlan0 (pid: 25 comm: kworker/1:0) [ 53.174255][ T6775] loop3: detected capacity change from 0 to 65536 [ 53.189177][ T6798] binder: 6797:6798 ioctl 541b 200001c0 returned -22 [ 53.214214][ T6775] XFS (loop3): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 53.219313][ T6293] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 53.222380][ T6293] Bluetooth: hci4: Injecting HCI hardware error event [ 53.225469][ T6293] Bluetooth: hci4: hardware error 0x00 [ 53.274621][ T6812] loop0: detected capacity change from 0 to 8 [ 53.298255][ T6775] XFS (loop3): Ending clean mount [ 53.301543][ T6812] SQUASHFS error: Failed to read block 0x62b: -5 [ 53.303335][ T6812] SQUASHFS error: Unable to read metadata cache entry [629] [ 53.305358][ T6812] SQUASHFS error: Unable to read inode 0x11f [ 53.354470][ T6394] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 53.389940][ T6298] XFS (loop3): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 53.526728][ T6800] loop1: detected capacity change from 0 to 32768 [ 53.594811][ T6800] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 53.650345][ T6800] XFS (loop1): Ending clean mount [ 53.703556][ T6813] loop4: detected capacity change from 0 to 32768 [ 53.715351][ T6813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.117 (6813) [ 53.747461][ T6813] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 53.755512][ T6813] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 53.765438][ T6813] BTRFS info (device loop4): disk space caching is enabled [ 53.775286][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 53.886511][ T6812] loop0: detected capacity change from 0 to 32768 [ 53.890542][ T6813] BTRFS info (device loop4): rebuilding free space tree [ 53.938177][ T1860] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 53.968852][ T6813] BTRFS info (device loop4): disabling free space tree [ 53.991325][ T6813] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 53.994172][ T6813] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 54.035829][ T6812] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 54.064229][ T6812] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 54.078703][ T6849] vhci_hcd: default hub control req: 0000 v0000 i0000 l2 [ 54.084828][ T6283] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 54.090033][ T6849] Illegal XDP return value 92 on prog (id 13) dev N/A, expect packet loss! [ 54.147777][ T6812] bcachefs (loop0): alloc_read... done [ 54.152285][ T6812] bcachefs (loop0): stripes_read... done [ 54.155259][ T6812] bcachefs (loop0): snapshots_read... done [ 54.158220][ T6812] bcachefs (loop0): journal_replay... done [ 54.162515][ T6812] bcachefs (loop0): resume_logged_ops... done [ 54.164391][ T6812] bcachefs (loop0): going read-write [ 54.167959][ T6812] bcachefs (loop0): done starting filesystem [ 54.306655][ T6287] bcachefs (loop0): shutting down [ 54.307842][ T6294] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 54.308322][ T6287] bcachefs (loop0): going read-only [ 54.313247][ T6287] bcachefs (loop0): finished waiting for writes to stop [ 54.335904][ T6863] FAULT_INJECTION: forcing a failure. [ 54.335904][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.340625][ T6863] CPU: 1 PID: 6863 Comm: syz.1.124 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 54.343226][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 54.346113][ T6863] Call trace: [ 54.347026][ T6863] dump_backtrace+0x1b8/0x1e4 [ 54.348339][ T6863] show_stack+0x2c/0x3c [ 54.349547][ T6863] dump_stack_lvl+0xe4/0x150 [ 54.350812][ T6863] dump_stack+0x1c/0x28 [ 54.351945][ T6863] should_fail_ex+0x3b0/0x50c [ 54.353254][ T6863] should_fail+0x14/0x24 [ 54.354431][ T6863] should_fail_usercopy+0x20/0x30 [ 54.355851][ T6863] binder_ioctl_write_read+0xc04/0x8988 [ 54.357430][ T6863] binder_ioctl+0x404/0x1fa8 [ 54.358695][ T6863] __arm64_sys_ioctl+0x14c/0x1c8 [ 54.360100][ T6863] invoke_syscall+0x98/0x2b8 [ 54.361396][ T6863] el0_svc_common+0x130/0x23c [ 54.362720][ T6863] do_el0_svc+0x48/0x58 [ 54.363926][ T6863] el0_svc+0x54/0x168 [ 54.365161][ T6863] el0t_64_sync_handler+0x84/0xfc [ 54.366500][ T6863] el0t_64_sync+0x190/0x194 [ 54.370211][ T6863] binder: 6862:6863 ioctl c0306201 200001c0 returned -14 [ 54.380807][ T6287] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 54.398898][ T6287] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 54.407072][ T6287] bcachefs (loop0): shutdown complete, journal seq 15 [ 54.429643][ T6287] bcachefs (loop0): marking filesystem clean [ 54.495650][ T6287] bcachefs (loop0): shutdown complete [ 54.518266][ T6870] loop1: detected capacity change from 0 to 2048 [ 54.542578][ T6870] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.666328][ T6875] fuse: Bad value for 'fd' [ 55.384613][ C0] vxcan0: j1939_tp_rxtimer: 0x000000004cf59916: rx timeout, send abort [ 55.388584][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x000000004cf59916: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 55.395549][ T6881] binder: 6878:6881 tried to acquire reference to desc 0, got 1 instead [ 55.403257][ T6881] binder: 6878:6881 got transaction with invalid offset (56, min 0 max 72) or object. [ 55.419667][ T6881] binder: 6878:6881 transaction call to 6878:0 failed 9/29201/-22, size 72-24 line 3369 [ 55.434596][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 55.459279][ T6293] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 55.555923][ T6885] Zero length message leads to an empty skb [ 55.674999][ T6889] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.133'. [ 55.804479][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.135'. [ 55.807206][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.135'. [ 55.810618][ T6896] FAULT_INJECTION: forcing a failure. [ 55.810618][ T6896] name failslab, interval 1, probability 0, space 0, times 0 [ 55.813986][ T6896] CPU: 1 PID: 6896 Comm: syz.4.135 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 55.816518][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 55.819250][ T6896] Call trace: [ 55.820115][ T6896] dump_backtrace+0x1b8/0x1e4 [ 55.821351][ T6896] show_stack+0x2c/0x3c [ 55.822514][ T6896] dump_stack_lvl+0xe4/0x150 [ 55.823807][ T6896] dump_stack+0x1c/0x28 [ 55.824983][ T6896] should_fail_ex+0x3b0/0x50c [ 55.826226][ T6896] __should_failslab+0xc8/0x128 [ 55.827569][ T6896] should_failslab+0x10/0x28 [ 55.828817][ T6896] kmem_cache_alloc_noprof+0x84/0x350 [ 55.830309][ T6896] skb_clone+0x1c8/0x330 [ 55.831454][ T6896] netlink_trim+0x128/0x204 [ 55.832689][ T6896] netlink_broadcast_filtered+0x7c/0x10e4 [ 55.834330][ T6896] nlmsg_notify+0xfc/0x1d8 [ 55.835508][ T6896] rtnetlink_send+0x6c/0x84 [ 55.836723][ T6896] tc_ctl_action+0x874/0xb5c [ 55.838109][ T6896] rtnetlink_rcv_msg+0x748/0xe64 [ 55.839534][ T6896] netlink_rcv_skb+0x214/0x3c4 [ 55.840814][ T6896] rtnetlink_rcv+0x28/0x38 [ 55.842016][ T6896] netlink_unicast+0x65c/0x898 [ 55.843331][ T6896] netlink_sendmsg+0x7a0/0xa84 [ 55.844641][ T6896] ____sys_sendmsg+0x4d8/0x77c [ 55.845988][ T6896] __sys_sendmsg+0x26c/0x33c [ 55.847248][ T6896] __arm64_sys_sendmsg+0x80/0x94 [ 55.848570][ T6896] invoke_syscall+0x98/0x2b8 [ 55.849807][ T6896] el0_svc_common+0x130/0x23c [ 55.851179][ T6896] do_el0_svc+0x48/0x58 [ 55.852298][ T6896] el0_svc+0x54/0x168 [ 55.853351][ T6896] el0t_64_sync_handler+0x84/0xfc [ 55.854684][ T6896] el0t_64_sync+0x190/0x194 [ 56.026223][ T6879] loop3: detected capacity change from 0 to 65536 [ 56.097846][ T6879] XFS (loop3): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 56.120558][ T6903] loop0: detected capacity change from 0 to 4096 [ 56.122863][ T6903] nilfs2: Unknown parameter '60' [ 56.136265][ T25] binder: undelivered TRANSACTION_ERROR: 29201 [ 56.153246][ T6887] loop2: detected capacity change from 0 to 32768 [ 56.297910][ T6887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.132 (6887) [ 56.703481][ T6887] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.713404][ T6887] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 56.715777][ T6887] BTRFS info (device loop2): disk space caching is enabled [ 56.758631][ T6879] XFS (loop3): Ending clean mount [ 56.780402][ T6887] BTRFS info (device loop2): rebuilding free space tree [ 56.814067][ T6887] BTRFS info (device loop2): disabling free space tree [ 56.816017][ T6887] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 56.818678][ T6887] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 56.873254][ T6298] XFS (loop3): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 57.453744][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'. [ 57.544723][ T6284] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 57.622217][ T6958] hub 1-0:1.0: USB hub found [ 57.632084][ T6958] hub 1-0:1.0: 1 port detected [ 57.716106][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 57.726612][ T6964] FAULT_INJECTION: forcing a failure. [ 57.726612][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 57.735768][ T6964] CPU: 0 PID: 6964 Comm: syz.0.148 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 57.738557][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.741495][ T6964] Call trace: [ 57.742465][ T6964] dump_backtrace+0x1b8/0x1e4 [ 57.743780][ T6964] show_stack+0x2c/0x3c [ 57.744950][ T6964] dump_stack_lvl+0xe4/0x150 [ 57.746259][ T6964] dump_stack+0x1c/0x28 [ 57.747451][ T6964] should_fail_ex+0x3b0/0x50c [ 57.748786][ T6964] __should_failslab+0xc8/0x128 [ 57.750268][ T6964] should_failslab+0x10/0x28 [ 57.751572][ T6964] __kmalloc_node_noprof+0xfc/0x4d4 [ 57.753182][ T6964] kvmalloc_node_noprof+0x88/0x24c [ 57.754636][ T6964] alloc_netdev_mqs+0x658/0xc40 [ 57.756014][ T6964] rtnl_create_link+0x2cc/0xae0 [ 57.757416][ T6964] rtnl_newlink+0x10d4/0x1bcc [ 57.758691][ T6964] rtnetlink_rcv_msg+0x748/0xe64 [ 57.760160][ T6964] netlink_rcv_skb+0x214/0x3c4 [ 57.761559][ T6964] rtnetlink_rcv+0x28/0x38 [ 57.762815][ T6964] netlink_unicast+0x65c/0x898 [ 57.764138][ T6964] netlink_sendmsg+0x7a0/0xa84 [ 57.765456][ T6964] ____sys_sendmsg+0x4d8/0x77c [ 57.766892][ T6964] __sys_sendmsg+0x26c/0x33c [ 57.768228][ T6964] __arm64_sys_sendmsg+0x80/0x94 [ 57.769668][ T6964] invoke_syscall+0x98/0x2b8 [ 57.770975][ T6964] el0_svc_common+0x130/0x23c [ 57.772273][ T6964] do_el0_svc+0x48/0x58 [ 57.773503][ T6964] el0_svc+0x54/0x168 [ 57.774598][ T6964] el0t_64_sync_handler+0x84/0xfc [ 57.776043][ T6964] el0t_64_sync+0x190/0x194 [ 57.794246][ T6967] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.145'. [ 58.133877][ T6952] loop4: detected capacity change from 0 to 32768 [ 58.304123][ T6982] loop1: detected capacity change from 0 to 32768 [ 58.311621][ T6982] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.155 (6982) [ 58.326574][ T6982] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 58.334431][ T6982] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 58.336865][ T6982] BTRFS info (device loop1): disk space caching is enabled [ 58.378239][ T6982] BTRFS info (device loop1): rebuilding free space tree [ 58.401373][ T6982] BTRFS info (device loop1): disabling free space tree [ 58.403595][ T6982] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 58.406410][ T6982] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 58.420998][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 58.624969][ T6976] loop0: detected capacity change from 0 to 65536 [ 58.636335][ T6976] XFS (loop0): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 58.689313][ T6976] XFS (loop0): Ending clean mount [ 58.715162][ T6287] XFS (loop0): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 58.910139][ T7017] loop0: detected capacity change from 0 to 4096 [ 58.965464][ T7017] netlink: 69272 bytes leftover after parsing attributes in process `syz.0.158'. [ 58.974112][ C1] vxcan0: j1939_tp_rxtimer: 0x000000001f0038a7: rx timeout, send abort [ 58.976709][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x000000001f0038a7: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 59.065822][ T7018] overlayfs: upper fs does not support tmpfile. [ 59.072545][ T7018] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 59.082275][ T7018] ntfs3: loop0: ino=22, "file1" ntfs_rename [ 59.189606][ T7015] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.214522][ T6283] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.225479][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 59.229331][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 59.366346][ T7031] loop3: detected capacity change from 0 to 16 [ 59.376843][ T7031] erofs: (device loop3): mounted with root inode @ nid 36. [ 59.383394][ T7031] process 'syz.3.164' launched './file2' with NULL argv: empty string added [ 59.391182][ T6293] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 59.441579][ T7031] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 60.136607][ T6287] ntfs3: loop0: failed to convert name for inode 1e. [ 60.263946][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 60.313203][ T7045] loop2: detected capacity change from 0 to 256 [ 60.332242][ T7045] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 60.795407][ T7052] loop1: detected capacity change from 0 to 32768 [ 60.805940][ T7052] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.172 (7052) [ 60.826855][ T7052] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 60.834931][ T7052] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 60.843590][ T7052] BTRFS info (device loop1): disk space caching is enabled [ 60.904825][ T7052] BTRFS info (device loop1): rebuilding free space tree [ 60.906310][ T7034] loop4: detected capacity change from 0 to 65536 [ 60.926552][ T7034] XFS (loop4): Mounting V5 Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 60.936638][ T7052] BTRFS info (device loop1): disabling free space tree [ 60.938744][ T7052] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.944278][ T7052] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 61.037683][ T7034] XFS (loop4): Ending clean mount [ 61.047844][ T6297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.053376][ T6297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.058443][ T6297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.066239][ T6297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.069215][ T6297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.071383][ T6297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.101116][ T6294] XFS (loop4): Unmounting Filesystem 4194cad6-cad4-4798-ac4c-c2118f686eb1 [ 61.257500][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.261913][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.336945][ T7089] loop4: detected capacity change from 0 to 256 [ 61.375401][ T6394] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.473770][ T7088] loop2: detected capacity change from 0 to 32768 [ 61.476097][ T7088] btrfs: Deprecated parameter 'usebackuproot' [ 61.477898][ T7088] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 61.484361][ T7088] BTRFS: device /dev/loop2 (7:2) using temp-fsid 979b0b68-dc8c-485a-acdb-a6401bfccdfb [ 61.492690][ T7088] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.175 (7088) [ 61.501270][ T7088] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.504325][ T7088] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 61.506781][ T7088] BTRFS info (device loop2): using free-space-tree [ 61.532534][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.174'. [ 61.560275][ T7088] BTRFS info (device loop2): rebuilding free space tree [ 61.567305][ T6283] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.573401][ T7090] netlink: 'syz.4.174': attribute type 21 has an invalid length. [ 61.589155][ T7090] netlink: 'syz.4.174': attribute type 20 has an invalid length. [ 61.772137][ T274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.913120][ C1] vxcan0: j1939_tp_rxtimer: 0x000000009f035ee8: rx timeout, send abort [ 61.915668][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x000000009f035ee8: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.917743][ T7117] loop1: detected capacity change from 0 to 8192 [ 61.931150][ T274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.018889][ T7123] loop3: detected capacity change from 0 to 164 [ 62.117123][ T274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.165210][ T6284] BTRFS info (device loop2): last unmount of filesystem 979b0b68-dc8c-485a-acdb-a6401bfccdfb [ 62.250622][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 62.924712][ T274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.926127][ T7138] FAULT_INJECTION: forcing a failure. [ 62.926127][ T7138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.945744][ T7138] CPU: 1 PID: 7138 Comm: syz.4.182 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 62.948504][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.951403][ T7138] Call trace: [ 62.952294][ T7138] dump_backtrace+0x1b8/0x1e4 [ 62.953687][ T7138] show_stack+0x2c/0x3c [ 62.954913][ T7138] dump_stack_lvl+0xe4/0x150 [ 62.956239][ T7138] dump_stack+0x1c/0x28 [ 62.957368][ T7138] should_fail_ex+0x3b0/0x50c [ 62.958707][ T7138] should_fail+0x14/0x24 [ 62.959900][ T7138] should_fail_usercopy+0x20/0x30 [ 62.961393][ T7138] simple_read_from_buffer+0xd0/0x1b0 [ 62.962862][ T7138] proc_fail_nth_read+0x134/0x1a0 [ 62.964287][ T7138] vfs_read+0x1a0/0x8b4 [ 62.965463][ T7138] ksys_read+0x15c/0x26c [ 62.966699][ T7138] __arm64_sys_read+0x7c/0x90 [ 62.968064][ T7138] invoke_syscall+0x98/0x2b8 [ 62.969338][ T7138] el0_svc_common+0x130/0x23c [ 62.970669][ T7138] do_el0_svc+0x48/0x58 [ 62.971858][ T7138] el0_svc+0x54/0x168 [ 62.973078][ T7138] el0t_64_sync_handler+0x84/0xfc [ 62.974533][ T7138] el0t_64_sync+0x190/0x194 [ 63.140551][ T7148] loop4: detected capacity change from 0 to 8 [ 63.142710][ T7148] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 63.143732][ T6293] Bluetooth: hci1: command tx timeout [ 63.154876][ T7148] cramfs: bad data blocksize 4294966945 [ 63.156795][ T7148] cramfs: Error -3 while decompressing! [ 63.158513][ T7148] cramfs: 000000000efb82f1(403)->0000000005ca9acf(4096) [ 63.174938][ T7148] cramfs: bad data blocksize 4294966945 [ 63.953641][ T7158] FAULT_INJECTION: forcing a failure. [ 63.953641][ T7158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.964737][ T7144] loop1: detected capacity change from 0 to 32768 [ 63.967561][ T7158] CPU: 0 PID: 7158 Comm: syz.2.189 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 63.970157][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.972921][ T7158] Call trace: [ 63.973798][ T7158] dump_backtrace+0x1b8/0x1e4 [ 63.975116][ T7158] show_stack+0x2c/0x3c [ 63.976180][ T7144] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.186 (7144) [ 63.976289][ T7158] dump_stack_lvl+0xe4/0x150 [ 63.981061][ T7158] dump_stack+0x1c/0x28 [ 63.982234][ T7158] should_fail_ex+0x3b0/0x50c [ 63.983574][ T7158] should_fail+0x14/0x24 [ 63.984762][ T7158] should_fail_usercopy+0x20/0x30 [ 63.986112][ T7158] video_usercopy+0x2a4/0xed0 [ 63.987431][ T7158] video_ioctl2+0x3c/0x50 [ 63.988603][ T7158] v4l2_ioctl+0x148/0x18c [ 63.989827][ T7158] __arm64_sys_ioctl+0x14c/0x1c8 [ 63.991166][ T7158] invoke_syscall+0x98/0x2b8 [ 63.992537][ T7158] el0_svc_common+0x130/0x23c [ 63.993822][ T7158] do_el0_svc+0x48/0x58 [ 63.995001][ T7158] el0_svc+0x54/0x168 [ 63.996168][ T7158] el0t_64_sync_handler+0x84/0xfc [ 63.997560][ T7158] el0t_64_sync+0x190/0x194 [ 64.017348][ T7144] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.024223][ T7144] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 64.026519][ T7144] BTRFS info (device loop1): disk space caching is enabled [ 64.153476][ T7144] BTRFS info (device loop1): rebuilding free space tree [ 64.166695][ T7144] BTRFS info (device loop1): disabling free space tree [ 64.168633][ T7144] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 64.183559][ T7144] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 64.206168][ T7183] loop2: detected capacity change from 0 to 8 [ 64.216173][ T7183] SQUASHFS error: Failed to read block 0x62b: -5 [ 64.220798][ T7183] SQUASHFS error: Unable to read metadata cache entry [629] [ 64.224837][ T7183] SQUASHFS error: Unable to read inode 0x11f [ 64.310419][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.322162][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.334091][ T7081] bridge_slave_0: entered allmulticast mode [ 64.345174][ T7081] bridge_slave_0: entered promiscuous mode [ 64.358333][ T6283] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.414311][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.427986][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.444073][ T7081] bridge_slave_1: entered allmulticast mode [ 64.454869][ T7081] bridge_slave_1: entered promiscuous mode [ 64.463629][ T7191] FAULT_INJECTION: forcing a failure. [ 64.463629][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.471192][ T7183] loop2: detected capacity change from 0 to 32768 [ 64.477773][ T7191] CPU: 1 PID: 7191 Comm: syz.3.196 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 64.480556][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 64.483274][ T7191] Call trace: [ 64.484150][ T7191] dump_backtrace+0x1b8/0x1e4 [ 64.485553][ T7191] show_stack+0x2c/0x3c [ 64.486721][ T7191] dump_stack_lvl+0xe4/0x150 [ 64.487920][ T7191] dump_stack+0x1c/0x28 [ 64.489030][ T7191] should_fail_ex+0x3b0/0x50c [ 64.490342][ T7191] should_fail+0x14/0x24 [ 64.491551][ T7191] should_fail_usercopy+0x20/0x30 [ 64.492947][ T7191] video_usercopy+0x2a4/0xed0 [ 64.494277][ T7191] video_ioctl2+0x3c/0x50 [ 64.495536][ T7191] v4l2_ioctl+0x148/0x18c [ 64.496766][ T7191] __arm64_sys_ioctl+0x14c/0x1c8 [ 64.498343][ T7191] invoke_syscall+0x98/0x2b8 [ 64.499678][ T7191] el0_svc_common+0x130/0x23c [ 64.500997][ T7191] do_el0_svc+0x48/0x58 [ 64.502184][ T7191] el0_svc+0x54/0x168 [ 64.503370][ T7191] el0t_64_sync_handler+0x84/0xfc [ 64.504786][ T7191] el0t_64_sync+0x190/0x194 [ 64.510604][ T2307] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.514715][ T2307] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.533448][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.560657][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.666084][ T7183] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 64.681327][ T7183] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 64.721640][ T7081] team0: Port device team_slave_0 added [ 64.733618][ T7081] team0: Port device team_slave_1 added [ 64.748570][ T7208] sctp: [Deprecated]: syz.3.198 (pid 7208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 64.748570][ T7208] Use struct sctp_sack_info instead [ 64.773821][ T7183] bcachefs (loop2): alloc_read... done [ 64.775630][ T7183] bcachefs (loop2): stripes_read... done [ 64.777534][ T7183] bcachefs (loop2): snapshots_read... done [ 64.782249][ T7183] bcachefs (loop2): journal_replay... done [ 64.783851][ T7183] bcachefs (loop2): resume_logged_ops... done [ 64.787603][ T7183] bcachefs (loop2): going read-write [ 64.788111][ T274] bridge_slave_1: left allmulticast mode [ 64.791012][ T274] bridge_slave_1: left promiscuous mode [ 64.795699][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.933873][ T274] bridge_slave_0: left allmulticast mode [ 64.936320][ T274] bridge_slave_0: left promiscuous mode [ 64.940882][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.084741][ T7183] bcachefs (loop2): done starting filesystem [ 65.219111][ T6293] Bluetooth: hci1: command tx timeout [ 65.430055][ T6284] bcachefs (loop2): shutting down [ 65.431500][ T6284] bcachefs (loop2): going read-only [ 65.432964][ T6284] bcachefs (loop2): finished waiting for writes to stop [ 65.433481][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000077961df8: rx timeout, send abort [ 65.437191][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x0000000077961df8: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.519667][ T6284] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 65.581794][ T6284] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 65.600082][ T6284] bcachefs (loop2): shutdown complete, journal seq 14 [ 65.602458][ T6284] bcachefs (loop2): marking filesystem clean [ 65.615655][ T6284] bcachefs (loop2): shutdown complete [ 66.393011][ T7225] loop3: detected capacity change from 0 to 65 [ 66.424215][ T7225] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 66.438022][ T7225] BFS-fs: bfs_fill_super(): Last block not available on loop3: 262208 [ 67.299063][ T6297] Bluetooth: hci1: command tx timeout [ 67.482233][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.522667][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.571430][ T274] bond0 (unregistering): Released all slaves [ 67.578319][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.580612][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.587792][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.591977][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.593884][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.601111][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.662543][ T7081] hsr_slave_0: entered promiscuous mode [ 67.689416][ T7081] hsr_slave_1: entered promiscuous mode [ 67.730088][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.732233][ T7081] Cannot create hsr debugfs directory [ 67.837705][ T7235] loop1: detected capacity change from 0 to 32768 [ 67.840813][ T7235] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.204 (7235) [ 67.847305][ T7235] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 67.850575][ T7235] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 67.853063][ T7235] BTRFS info (device loop1): disk space caching is enabled [ 67.878547][ T7235] BTRFS info (device loop1): rebuilding free space tree [ 67.886134][ T7235] BTRFS info (device loop1): disabling free space tree [ 67.888053][ T7235] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.893133][ T7235] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 68.551827][ T7255] loop2: detected capacity change from 0 to 256 [ 68.592746][ T6394] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 68.679609][ T6283] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 69.383631][ T6297] Bluetooth: hci1: command tx timeout [ 69.452606][ T7278] FAULT_INJECTION: forcing a failure. [ 69.452606][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 69.456628][ T7278] CPU: 0 PID: 7278 Comm: syz.2.211 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 69.459242][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.462145][ T7278] Call trace: [ 69.463180][ T7278] dump_backtrace+0x1b8/0x1e4 [ 69.464547][ T7278] show_stack+0x2c/0x3c [ 69.465762][ T7278] dump_stack_lvl+0xe4/0x150 [ 69.467078][ T7278] dump_stack+0x1c/0x28 [ 69.468272][ T7278] should_fail_ex+0x3b0/0x50c [ 69.469606][ T7278] __should_failslab+0xc8/0x128 [ 69.471015][ T7278] should_failslab+0x10/0x28 [ 69.472270][ T7278] kmem_cache_alloc_node_noprof+0x88/0x3a4 [ 69.473908][ T7278] __alloc_skb+0x1e0/0x420 [ 69.475299][ T7278] virtio_transport_alloc_skb+0x64/0xd90 [ 69.476950][ T7278] virtio_transport_send_pkt_info+0x404/0xc84 [ 69.478673][ T7278] virtio_transport_connect+0xd8/0x140 [ 69.480350][ T7278] vsock_connect+0xa24/0xc60 [ 69.481627][ T7278] __sys_connect+0x268/0x290 [ 69.482950][ T7278] __arm64_sys_connect+0x7c/0x94 [ 69.484398][ T7278] invoke_syscall+0x98/0x2b8 [ 69.485730][ T7278] el0_svc_common+0x130/0x23c [ 69.487075][ T7278] do_el0_svc+0x48/0x58 [ 69.488246][ T7278] el0_svc+0x54/0x168 [ 69.489372][ T7278] el0t_64_sync_handler+0x84/0xfc [ 69.490851][ T7278] el0t_64_sync+0x190/0x194 [ 69.492277][ C0] vkms_vblank_simulate: vblank timer overrun [ 69.662498][ T1430] cfg80211: failed to load regulatory.db [ 69.858484][ T7266] loop4: detected capacity change from 0 to 32768 [ 69.866124][ T7266] XFS: noikeep mount option is deprecated. [ 69.916341][ T7266] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 69.993964][ T7266] XFS (loop4): Ending clean mount [ 70.028824][ T7266] XFS (loop4): Quotacheck needed: Please wait. [ 70.110655][ T7266] XFS (loop4): Quotacheck: Done. [ 70.200209][ T7295] loop1: detected capacity change from 0 to 40427 [ 70.232648][ T7295] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.263848][ T6294] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 70.277225][ T7295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.374592][ T7308] f2fs_ckpt-7:1: attempt to access beyond end of device [ 70.374592][ T7308] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 70.411371][ T7308] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 70.433926][ T7308] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 70.547736][ T6283] syz-executor: attempt to access beyond end of device [ 70.547736][ T6283] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 70.569412][ T6283] syz-executor: attempt to access beyond end of device [ 70.569412][ T6283] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 70.602502][ T7317] loop4: detected capacity change from 0 to 128 [ 70.656127][ T7317] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz.4.215: iget: checksum invalid [ 70.672876][ T7317] EXT4-fs (loop4): get root inode failed [ 70.674597][ T7317] EXT4-fs (loop4): mount failed [ 70.735784][ T274] hsr_slave_0: left promiscuous mode [ 70.756459][ T6654] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 70.779642][ T274] hsr_slave_1: left promiscuous mode [ 70.845084][ T7330] netlink: 96 bytes leftover after parsing attributes in process `syz.4.218'. [ 70.862401][ T7327] loop2: detected capacity change from 0 to 2048 [ 70.869230][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.871327][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.887375][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.901614][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.939223][ T7327] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.217: bad orphan inode 8192 [ 70.946696][ T274] veth1_macvtap: left promiscuous mode [ 70.948579][ T274] veth0_macvtap: left promiscuous mode [ 70.958549][ T7327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.975032][ T274] veth1_vlan: left promiscuous mode [ 70.977497][ T274] veth0_vlan: left promiscuous mode [ 70.982205][ T7344] FAULT_INJECTION: forcing a failure. [ 70.982205][ T7344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.986207][ T7344] CPU: 0 PID: 7344 Comm: syz.4.220 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 70.988982][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.992021][ T7344] Call trace: [ 70.992952][ T7344] dump_backtrace+0x1b8/0x1e4 [ 70.994498][ T7344] show_stack+0x2c/0x3c [ 70.995678][ T7344] dump_stack_lvl+0xe4/0x150 [ 70.997058][ T7344] dump_stack+0x1c/0x28 [ 70.998369][ T7344] should_fail_ex+0x3b0/0x50c [ 70.999679][ T7344] should_fail+0x14/0x24 [ 71.001271][ T7344] should_fail_usercopy+0x20/0x30 [ 71.002754][ T7344] bpf_verifier_vlog+0x424/0x940 [ 71.004174][ T7344] __btf_verifier_log+0xe0/0x12c [ 71.005636][ T7344] btf_new_fd+0x5bc/0xfb0 [ 71.006866][ T7344] bpf_btf_load+0xf0/0x190 [ 71.008189][ T7344] __sys_bpf+0x3d8/0x5f0 [ 71.009484][ T7344] __arm64_sys_bpf+0x80/0x98 [ 71.010827][ T7344] invoke_syscall+0x98/0x2b8 [ 71.012172][ T7344] el0_svc_common+0x130/0x23c [ 71.013722][ T7344] do_el0_svc+0x48/0x58 [ 71.014984][ T7344] el0_svc+0x54/0x168 [ 71.016206][ T7344] el0t_64_sync_handler+0x84/0xfc [ 71.017639][ T7344] el0t_64_sync+0x190/0x194 [ 71.258869][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000f0729767: rx timeout, send abort [ 71.266037][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x00000000f0729767: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.329661][ T7365] loop4: detected capacity change from 0 to 40427 [ 72.356831][ T7365] F2FS-fs (loop4): Found nat_bits in checkpoint [ 72.371086][ T7365] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 72.399958][ T7366] f2fs_ckpt-7:4: attempt to access beyond end of device [ 72.399958][ T7366] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 72.404247][ T7366] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 72.406663][ T7366] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 73.362934][ T274] team0 (unregistering): Port device team_slave_1 removed [ 73.541396][ T274] team0 (unregistering): Port device team_slave_0 removed [ 75.860485][ T6284] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.918854][ T7376] binder: 7374:7376 tried to acquire reference to desc 0, got 1 instead [ 75.924723][ T7376] binder: 7374:7376 got transaction with invalid parent offset [ 75.926822][ T7376] binder: 7376:7374 failed to fixup parent [ 75.927882][ T7081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.928465][ T7376] binder: 7374:7376 transaction call to 7374:0 failed 14/29201/-22, size 104-24 line 3562 [ 75.935871][ T6294] syz-executor: attempt to access beyond end of device [ 75.935871][ T6294] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 75.943423][ T6294] syz-executor: attempt to access beyond end of device [ 75.943423][ T6294] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 75.950038][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 75.961906][ T7081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.985139][ T7081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.012011][ T7081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.060417][ T3716] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.135819][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.200551][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.212037][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.214903][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.231924][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.233963][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.402645][ T7381] loop2: detected capacity change from 0 to 32768 [ 76.410635][ T7381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.226 (7381) [ 76.436456][ T7381] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.447987][ T7381] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 76.456828][ T7381] BTRFS info (device loop2): using free-space-tree [ 76.533084][ T6293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.548144][ T6293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.564080][ T6293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.573952][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.577602][ T6293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.599458][ T6293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.601872][ T6293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.635076][ T7081] veth0_vlan: entered promiscuous mode [ 76.678497][ T7081] veth1_vlan: entered promiscuous mode [ 76.697745][ T7383] loop3: detected capacity change from 0 to 32768 [ 76.713844][ T7383] BTRFS: device /dev/loop3 (7:3) using temp-fsid 7fef25b8-583c-4890-84b4-e1427e0c3bd0 [ 76.718492][ T7383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.229 (7383) [ 76.725446][ T7383] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.728136][ T7383] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 76.738004][ T7383] BTRFS info (device loop3): using free-space-tree [ 76.954565][ T6297] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.964592][ T6297] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.967780][ T6297] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.971151][ T6297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.974124][ T6297] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.976341][ T6297] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.052317][ T6284] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.277547][ T6298] BTRFS info (device loop3): last unmount of filesystem 7fef25b8-583c-4890-84b4-e1427e0c3bd0 [ 77.363335][ T274] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.477036][ T7479] loop3: detected capacity change from 0 to 1024 [ 77.489415][ T7479] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.495091][ T7479] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 77.526849][ T7479] loop3: detected capacity change from 0 to 256 [ 77.544470][ T7479] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfff32d8b, utbl_chksum : 0xe619d30d) [ 77.545948][ T274] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.605416][ T7081] veth0_macvtap: entered promiscuous mode [ 77.661145][ T274] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.690548][ T7081] veth1_macvtap: entered promiscuous mode [ 77.698254][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.713594][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.716497][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.729103][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.731916][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.738864][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.742129][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.745036][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.758167][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.796087][ T7492] FAULT_INJECTION: forcing a failure. [ 77.796087][ T7492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.807019][ T7492] CPU: 0 PID: 7492 Comm: syz.2.236 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 77.809665][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 77.812449][ T7492] Call trace: [ 77.813376][ T7492] dump_backtrace+0x1b8/0x1e4 [ 77.814753][ T7492] show_stack+0x2c/0x3c [ 77.816038][ T7492] dump_stack_lvl+0xe4/0x150 [ 77.817364][ T7492] dump_stack+0x1c/0x28 [ 77.818522][ T7492] should_fail_ex+0x3b0/0x50c [ 77.819852][ T7492] should_fail+0x14/0x24 [ 77.821143][ T7492] should_fail_usercopy+0x20/0x30 [ 77.822656][ T7492] simple_read_from_buffer+0xd0/0x1b0 [ 77.824117][ T7492] proc_fail_nth_read+0x134/0x1a0 [ 77.825525][ T7492] vfs_read+0x1a0/0x8b4 [ 77.826687][ T7492] ksys_read+0x15c/0x26c [ 77.827808][ T7492] __arm64_sys_read+0x7c/0x90 [ 77.829166][ T7492] invoke_syscall+0x98/0x2b8 [ 77.830461][ T7492] el0_svc_common+0x130/0x23c [ 77.831826][ T7492] do_el0_svc+0x48/0x58 [ 77.832990][ T7492] el0_svc+0x54/0x168 [ 77.834081][ T7492] el0t_64_sync_handler+0x84/0xfc [ 77.835478][ T7492] el0t_64_sync+0x190/0x194 [ 77.890979][ T274] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.935860][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.956753][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.959967][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.963038][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.965948][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.973674][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.976442][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.980583][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.984958][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.008362][ T7081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.020338][ T7081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.023449][ T7081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.025855][ T7081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.145528][ T1884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.149598][ T1884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.166991][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 78.217092][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.219300][ T7399] chnl_net:caif_netlink_parms(): no params data found [ 78.226948][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.281125][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.283927][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.286074][ T7494] loop2: detected capacity change from 0 to 40427 [ 78.286091][ T7445] bridge_slave_0: entered allmulticast mode [ 78.299949][ T7445] bridge_slave_0: entered promiscuous mode [ 78.310326][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.312313][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.319848][ T7445] bridge_slave_1: entered allmulticast mode [ 78.322225][ T7445] bridge_slave_1: entered promiscuous mode [ 78.327041][ T7494] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.366081][ T7494] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.418542][ T7504] f2fs_ckpt-7:2: attempt to access beyond end of device [ 78.418542][ T7504] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 78.429246][ T7504] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 78.431731][ T7504] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 78.445126][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.487235][ T6284] syz-executor: attempt to access beyond end of device [ 78.487235][ T6284] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 78.495788][ T6284] syz-executor: attempt to access beyond end of device [ 78.495788][ T6284] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 78.524957][ T274] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.558618][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.613517][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.629550][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.634119][ T7399] bridge_slave_0: entered allmulticast mode [ 78.639563][ T7399] bridge_slave_0: entered promiscuous mode [ 78.659096][ T6293] Bluetooth: hci0: command tx timeout [ 78.720661][ T274] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.753781][ T7445] team0: Port device team_slave_0 added [ 78.772985][ T7445] team0: Port device team_slave_1 added [ 78.774980][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.789236][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.791313][ T7399] bridge_slave_1: entered allmulticast mode [ 78.804104][ T7399] bridge_slave_1: entered promiscuous mode [ 78.946127][ T7520] loop0: detected capacity change from 0 to 32768 [ 78.967581][ T7520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.242 (7520) [ 79.013828][ T7520] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.016793][ T7520] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 79.026850][ T7520] BTRFS info (device loop0): using free-space-tree [ 79.059093][ T6293] Bluetooth: hci3: command tx timeout [ 79.070313][ T274] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.141037][ T7399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.144181][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.146309][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.189119][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.312057][ T274] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.326776][ T7399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.347184][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.353694][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.364008][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.399762][ T6297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.414836][ T6297] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.419427][ T6297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.423499][ T6297] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.425854][ T6297] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.428071][ T6297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.516117][ T7081] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.518522][ T7558] FAULT_INJECTION: forcing a failure. [ 79.518522][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 79.523901][ T7399] team0: Port device team_slave_0 added [ 79.526393][ T7558] CPU: 0 PID: 7558 Comm: syz.3.247 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 79.526869][ T7399] team0: Port device team_slave_1 added [ 79.528958][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.528974][ T7558] Call trace: [ 79.528978][ T7558] dump_backtrace+0x1b8/0x1e4 [ 79.528996][ T7558] show_stack+0x2c/0x3c [ 79.529005][ T7558] dump_stack_lvl+0xe4/0x150 [ 79.529020][ T7558] dump_stack+0x1c/0x28 [ 79.529029][ T7558] should_fail_ex+0x3b0/0x50c [ 79.529040][ T7558] __should_failslab+0xc8/0x128 [ 79.529060][ T7558] should_failslab+0x10/0x28 [ 79.529071][ T7558] kmem_cache_alloc_noprof+0x84/0x350 [ 79.529082][ T7558] skb_clone+0x1c8/0x330 [ 79.529096][ T7558] __netlink_deliver_tap+0x36c/0x6e4 [ 79.529107][ T7558] netlink_deliver_tap+0x1ac/0x1b0 [ 79.529117][ T7558] netlink_sendskb+0x78/0x164 [ 79.549663][ T7558] netlink_unicast+0x31c/0x898 [ 79.550960][ T7558] netlink_ack+0x590/0x89c [ 79.552269][ T7558] netlink_rcv_skb+0x1f4/0x3c4 [ 79.553658][ T7558] nfnetlink_rcv+0x21c/0x20d8 [ 79.555034][ T7558] netlink_unicast+0x65c/0x898 [ 79.556386][ T7558] netlink_sendmsg+0x7a0/0xa84 [ 79.557871][ T7558] ____sys_sendmsg+0x4d8/0x77c [ 79.559273][ T7558] __sys_sendmsg+0x26c/0x33c [ 79.560578][ T7558] __arm64_sys_sendmsg+0x80/0x94 [ 79.561942][ T7558] invoke_syscall+0x98/0x2b8 [ 79.563214][ T7558] el0_svc_common+0x130/0x23c [ 79.564622][ T7558] do_el0_svc+0x48/0x58 [ 79.565786][ T7558] el0_svc+0x54/0x168 [ 79.566894][ T7558] el0t_64_sync_handler+0x84/0xfc [ 79.568297][ T7558] el0t_64_sync+0x190/0x194 [ 79.707683][ T7445] hsr_slave_0: entered promiscuous mode [ 79.775098][ T7445] hsr_slave_1: entered promiscuous mode [ 79.815772][ T7445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.817968][ T7445] Cannot create hsr debugfs directory [ 79.823448][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.825429][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.848624][ T7399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.858999][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.860960][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.879028][ T7399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.915897][ T7565] loop0: detected capacity change from 0 to 32768 [ 80.009781][ T7564] loop3: detected capacity change from 0 to 40427 [ 80.030700][ T7399] hsr_slave_0: entered promiscuous mode [ 80.036308][ T7565] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 80.040818][ T7564] F2FS-fs (loop3): Found nat_bits in checkpoint [ 80.048065][ T7565] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 80.060634][ T7399] hsr_slave_1: entered promiscuous mode [ 80.066319][ T7564] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 80.084394][ T7573] f2fs_ckpt-7:3: attempt to access beyond end of device [ 80.084394][ T7573] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 80.089515][ T7573] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 80.091677][ T7573] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 80.099823][ T7399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.101847][ T7399] Cannot create hsr debugfs directory [ 80.116507][ T7565] bcachefs (loop0): alloc_read... done [ 80.118149][ T7565] bcachefs (loop0): stripes_read... done [ 80.126183][ T7565] bcachefs (loop0): snapshots_read... done [ 80.133266][ T7565] bcachefs (loop0): journal_replay... done [ 80.134912][ T7565] bcachefs (loop0): resume_logged_ops... done [ 80.136613][ T7565] bcachefs (loop0): going read-write [ 80.143506][ T7565] bcachefs (loop0): done starting filesystem [ 80.191700][ T7081] bcachefs (loop0): shutting down [ 80.193247][ T7081] bcachefs (loop0): going read-only [ 80.196618][ T6298] syz-executor: attempt to access beyond end of device [ 80.196618][ T6298] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 80.201473][ T7081] bcachefs (loop0): finished waiting for writes to stop [ 80.201971][ T6298] syz-executor: attempt to access beyond end of device [ 80.201971][ T6298] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 80.213214][ T274] bridge_slave_1: left allmulticast mode [ 80.214851][ T274] bridge_slave_1: left promiscuous mode [ 80.216506][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.230515][ T274] bridge_slave_0: left allmulticast mode [ 80.232300][ T274] bridge_slave_0: left promiscuous mode [ 80.234031][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.237471][ T7081] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 80.245388][ T274] bridge_slave_1: left allmulticast mode [ 80.247056][ T274] bridge_slave_1: left promiscuous mode [ 80.248756][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.254343][ T7081] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 80.259899][ T7081] bcachefs (loop0): shutdown complete, journal seq 11 [ 80.262306][ T7081] bcachefs (loop0): marking filesystem clean [ 80.263987][ T274] bridge_slave_0: left allmulticast mode [ 80.265523][ T274] bridge_slave_0: left promiscuous mode [ 80.267104][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.279420][ T7081] bcachefs (loop0): shutdown complete [ 80.584914][ T7585] FAULT_INJECTION: forcing a failure. [ 80.584914][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 80.588523][ T7585] CPU: 1 PID: 7585 Comm: syz.0.250 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 80.591271][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 80.594207][ T7585] Call trace: [ 80.595101][ T7585] dump_backtrace+0x1b8/0x1e4 [ 80.596419][ T7585] show_stack+0x2c/0x3c [ 80.597656][ T7585] dump_stack_lvl+0xe4/0x150 [ 80.598968][ T7585] dump_stack+0x1c/0x28 [ 80.600145][ T7585] should_fail_ex+0x3b0/0x50c [ 80.601547][ T7585] __should_failslab+0xc8/0x128 [ 80.602913][ T7585] should_failslab+0x10/0x28 [ 80.604198][ T7585] __kmalloc_noprof+0xf8/0x494 [ 80.605529][ T7585] ethnl_default_start+0x118/0x4b0 [ 80.606987][ T7585] genl_start+0x440/0x618 [ 80.608212][ T7585] __netlink_dump_start+0x398/0x71c [ 80.609672][ T7585] genl_rcv_msg+0x6c8/0xbb0 [ 80.610876][ T7585] netlink_rcv_skb+0x214/0x3c4 [ 80.612149][ T7585] genl_rcv+0x38/0x50 [ 80.613280][ T7585] netlink_unicast+0x65c/0x898 [ 80.614612][ T7585] netlink_sendmsg+0x7a0/0xa84 [ 80.615890][ T7585] ____sys_sendmsg+0x4d8/0x77c [ 80.617190][ T7585] __sys_sendmsg+0x26c/0x33c [ 80.618475][ T7585] __arm64_sys_sendmsg+0x80/0x94 [ 80.619805][ T7585] invoke_syscall+0x98/0x2b8 [ 80.621030][ T7585] el0_svc_common+0x130/0x23c [ 80.622320][ T7585] do_el0_svc+0x48/0x58 [ 80.623431][ T7585] el0_svc+0x54/0x168 [ 80.624546][ T7585] el0t_64_sync_handler+0x84/0xfc [ 80.625917][ T7585] el0t_64_sync+0x190/0x194 [ 80.740898][ T6297] Bluetooth: hci0: command tx timeout [ 81.149210][ T6293] Bluetooth: hci3: command tx timeout [ 81.469195][ T6297] Bluetooth: hci2: command tx timeout [ 82.673951][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.722081][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.781623][ T274] bond0 (unregistering): Released all slaves [ 82.819264][ T6297] Bluetooth: hci0: command tx timeout [ 83.219405][ T6297] Bluetooth: hci3: command tx timeout [ 83.494529][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.531882][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.539078][ T6297] Bluetooth: hci2: command tx timeout [ 83.582562][ T274] bond0 (unregistering): Released all slaves [ 84.036344][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 84.079250][ T6293] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.083476][ T6293] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.086354][ T6293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.090928][ T6293] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.093323][ T6293] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.095575][ T6293] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.350756][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.353295][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.355482][ T7551] bridge_slave_0: entered allmulticast mode [ 84.357775][ T7551] bridge_slave_0: entered promiscuous mode [ 84.555059][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.557143][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.559466][ T7551] bridge_slave_1: entered allmulticast mode [ 84.561661][ T7551] bridge_slave_1: entered promiscuous mode [ 84.580820][ T7639] loop0: detected capacity change from 0 to 40427 [ 84.597935][ T7639] F2FS-fs (loop0): Found nat_bits in checkpoint [ 84.626860][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.629717][ T7639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.642224][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.662579][ T7642] f2fs_ckpt-7:0: attempt to access beyond end of device [ 84.662579][ T7642] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 84.666963][ T7642] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 84.670211][ T7642] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 84.757442][ T7081] syz-executor: attempt to access beyond end of device [ 84.757442][ T7081] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 84.761800][ T7081] syz-executor: attempt to access beyond end of device [ 84.761800][ T7081] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 84.803912][ T7551] team0: Port device team_slave_0 added [ 84.858166][ T7551] team0: Port device team_slave_1 added [ 84.872966][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.874914][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.882403][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.899468][ T6293] Bluetooth: hci0: command tx timeout [ 84.905276][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.907244][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.915541][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.210870][ T7551] hsr_slave_0: entered promiscuous mode [ 85.249490][ T7551] hsr_slave_1: entered promiscuous mode [ 85.289462][ T7551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.291660][ T7551] Cannot create hsr debugfs directory [ 85.299299][ T6293] Bluetooth: hci3: command tx timeout [ 85.307854][ T274] hsr_slave_0: left promiscuous mode [ 85.349832][ T274] hsr_slave_1: left promiscuous mode [ 85.378281][ T6297] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.383987][ T6297] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.387333][ T6297] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.391682][ T6297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.394566][ T6297] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.396774][ T6297] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.421155][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.423380][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.425927][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.427988][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.434803][ T274] hsr_slave_0: left promiscuous mode [ 85.479525][ T274] hsr_slave_1: left promiscuous mode [ 85.559219][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.561475][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.565544][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.567698][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.588854][ T274] veth1_macvtap: left promiscuous mode [ 85.590968][ T274] veth0_macvtap: left promiscuous mode [ 85.592635][ T274] veth1_vlan: left promiscuous mode [ 85.594153][ T274] veth0_vlan: left promiscuous mode [ 85.596366][ T274] veth1_macvtap: left promiscuous mode [ 85.597820][ T274] veth0_macvtap: left promiscuous mode [ 85.600905][ T274] veth1_vlan: left promiscuous mode [ 85.602333][ T274] veth0_vlan: left promiscuous mode [ 85.619078][ T6297] Bluetooth: hci2: command tx timeout [ 86.179253][ T6297] Bluetooth: hci4: command tx timeout [ 87.447368][ T274] team0 (unregistering): Port device team_slave_1 removed [ 87.459670][ T6297] Bluetooth: hci1: command tx timeout [ 87.642680][ T274] team0 (unregistering): Port device team_slave_0 removed [ 87.699607][ T6297] Bluetooth: hci2: command tx timeout [ 88.259069][ T6297] Bluetooth: hci4: command tx timeout [ 89.549073][ T6297] Bluetooth: hci1: command tx timeout [ 90.339195][ T6297] Bluetooth: hci4: command tx timeout [ 91.617104][ T274] team0 (unregistering): Port device team_slave_1 removed [ 91.619490][ T6297] Bluetooth: hci1: command tx timeout [ 91.823772][ T274] team0 (unregistering): Port device team_slave_0 removed [ 92.419095][ T6297] Bluetooth: hci4: command tx timeout [ 93.699106][ T6297] Bluetooth: hci1: command tx timeout [ 94.198704][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 94.212448][ T7445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.222613][ T7445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.231551][ T7445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.291120][ T7445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.409633][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.411844][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.413953][ T7621] bridge_slave_0: entered allmulticast mode [ 94.416200][ T7621] bridge_slave_0: entered promiscuous mode [ 94.420588][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.422588][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.424596][ T7621] bridge_slave_1: entered allmulticast mode [ 94.426981][ T7621] bridge_slave_1: entered promiscuous mode [ 94.468021][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.516414][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.588725][ T7621] team0: Port device team_slave_0 added [ 94.596650][ T7621] team0: Port device team_slave_1 added [ 94.626068][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.638478][ T7651] chnl_net:caif_netlink_parms(): no params data found [ 94.656371][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.658352][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.666152][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.673738][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.675756][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.688115][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.734774][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.793340][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.795311][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.830854][ T7621] hsr_slave_0: entered promiscuous mode [ 94.869885][ T7621] hsr_slave_1: entered promiscuous mode [ 94.909070][ T7621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.911126][ T7621] Cannot create hsr debugfs directory [ 94.955610][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.957554][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.969333][ T7445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.972366][ T7445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.006810][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.008849][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.013028][ T7651] bridge_slave_0: entered allmulticast mode [ 95.015401][ T7651] bridge_slave_0: entered promiscuous mode [ 95.054960][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.056979][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.059846][ T7651] bridge_slave_1: entered allmulticast mode [ 95.061978][ T7651] bridge_slave_1: entered promiscuous mode [ 95.082628][ T7651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.087031][ T7651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.104810][ T7399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.203851][ T7551] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.212076][ T7399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.229590][ T7651] team0: Port device team_slave_0 added [ 95.233191][ T7651] team0: Port device team_slave_1 added [ 95.266489][ T7399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.271113][ T7399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.364631][ T7551] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.387123][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.393083][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.401769][ T7651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.472743][ T7551] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.481684][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.490844][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.492911][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.500873][ T7651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.051739][ T7551] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.353277][ T274] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.421254][ T7651] hsr_slave_0: entered promiscuous mode [ 96.439430][ T7651] hsr_slave_1: entered promiscuous mode [ 96.489121][ T7651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.491224][ T7651] Cannot create hsr debugfs directory [ 96.531011][ T274] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.609990][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.662699][ T274] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.733839][ T7399] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.805078][ T274] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.815283][ T7445] veth0_vlan: entered promiscuous mode [ 96.877610][ T7621] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.887953][ T3716] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.890076][ T3716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.900790][ T3716] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.902817][ T3716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.914444][ T7445] veth1_vlan: entered promiscuous mode [ 96.919720][ T7551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.940492][ T7399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.943343][ T7399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.969853][ T7551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.975212][ T7551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.052665][ T7621] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.066885][ T7445] veth0_macvtap: entered promiscuous mode [ 97.072879][ T7551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.080148][ T7445] veth1_macvtap: entered promiscuous mode [ 97.087154][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.093422][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.096371][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.104467][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.107193][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.110641][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.120138][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.202366][ T7621] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.207608][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.211549][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.214286][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.217116][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.220800][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.223568][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.227294][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.246833][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.264700][ T7445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.267063][ T7445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.270668][ T7445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.273043][ T7445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.351481][ T7621] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.427650][ T7399] veth0_vlan: entered promiscuous mode [ 97.481387][ T7399] veth1_vlan: entered promiscuous mode [ 97.513014][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.515230][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.537809][ T274] bridge_slave_1: left allmulticast mode [ 97.539926][ T274] bridge_slave_1: left promiscuous mode [ 97.541541][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.545275][ T274] bridge_slave_0: left allmulticast mode [ 97.546905][ T274] bridge_slave_0: left promiscuous mode [ 97.548588][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.553297][ T274] bridge_slave_1: left allmulticast mode [ 97.554874][ T274] bridge_slave_1: left promiscuous mode [ 97.556601][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.561590][ T274] bridge_slave_0: left allmulticast mode [ 97.563126][ T274] bridge_slave_0: left promiscuous mode [ 97.564861][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.574905][ T274] bridge_slave_1: left allmulticast mode [ 97.576566][ T274] bridge_slave_1: left promiscuous mode [ 97.578217][ T274] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.581515][ T274] bridge_slave_0: left allmulticast mode [ 97.583125][ T274] bridge_slave_0: left promiscuous mode [ 97.584627][ T274] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.914615][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.972675][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.031631][ T274] bond0 (unregistering): Released all slaves [ 101.713715][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.751902][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.821861][ T274] bond0 (unregistering): Released all slaves [ 102.523013][ T274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.561678][ T274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.601554][ T274] bond0 (unregistering): Released all slaves [ 102.608499][ T274] bond1 (unregistering): Released all slaves [ 102.624826][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.627300][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.647841][ T7399] veth0_macvtap: entered promiscuous mode [ 102.682761][ T7399] veth1_macvtap: entered promiscuous mode [ 102.740230][ T7621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.743821][ T7621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.747301][ T7621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.754920][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.766403][ T7621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.803107][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.806402][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.809739][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.813236][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.816266][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.820466][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.823437][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.826335][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.830950][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.837852][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.859784][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.862731][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.865350][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.868188][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.878078][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.881344][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.884084][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.886881][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.891428][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.904291][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.906267][ T6334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.922605][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.924545][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.957239][ T7399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.964280][ T7399] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.966706][ T7399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.969323][ T7399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.136412][ T7551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.145889][ T7551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.372959][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 103.392002][ T7621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.405948][ T7621] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.503225][ T7766] netlink: 'syz.4.263': attribute type 10 has an invalid length. [ 103.506314][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.508278][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.515853][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.517879][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.736386][ T1860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.738408][ T1860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.814583][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.838892][ T7651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.847247][ T7651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.872474][ T7651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.876235][ T7651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.005276][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.007529][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.061452][ T7551] veth0_vlan: entered promiscuous mode [ 104.066568][ T7551] veth1_vlan: entered promiscuous mode [ 104.090978][ T7771] loop4: detected capacity change from 0 to 40427 [ 104.098826][ T7771] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 104.102658][ T7771] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 104.105900][ T7771] F2FS-fs (loop4): invalid crc value [ 104.113382][ T7771] F2FS-fs (loop4): Found nat_bits in checkpoint [ 104.127568][ T7771] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 104.130228][ T7771] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 104.180981][ T7551] veth0_macvtap: entered promiscuous mode [ 104.184974][ T7551] veth1_macvtap: entered promiscuous mode [ 104.227892][ T7621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.274170][ T1860] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 104.285365][ T1860] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 104.305566][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.308525][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.317954][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.323500][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.326289][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.330118][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.333203][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.336078][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.338779][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.342596][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.347513][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.383681][ T7651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.411625][ T7651] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.461128][ T7651] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.464396][ T7651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.636651][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.638636][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.803643][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.805823][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.234722][ T7792] FAULT_INJECTION: forcing a failure. [ 105.234722][ T7792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.238480][ T7792] CPU: 1 PID: 7792 Comm: syz.1.266 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 105.241124][ T7792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.243806][ T7792] Call trace: [ 105.244705][ T7792] dump_backtrace+0x1b8/0x1e4 [ 105.245994][ T7792] show_stack+0x2c/0x3c [ 105.247161][ T7792] dump_stack_lvl+0xe4/0x150 [ 105.248502][ T7792] dump_stack+0x1c/0x28 [ 105.249625][ T7792] should_fail_ex+0x3b0/0x50c [ 105.250940][ T7792] should_fail+0x14/0x24 [ 105.252105][ T7792] should_fail_usercopy+0x20/0x30 [ 105.253538][ T7792] copy_msghdr_from_user+0xb8/0x518 [ 105.255112][ T7792] __sys_sendmsg+0x200/0x33c [ 105.256410][ T7792] __arm64_sys_sendmsg+0x80/0x94 [ 105.257752][ T7792] invoke_syscall+0x98/0x2b8 [ 105.259071][ T7792] el0_svc_common+0x130/0x23c [ 105.260374][ T7792] do_el0_svc+0x48/0x58 [ 105.261516][ T7792] el0_svc+0x54/0x168 [ 105.262642][ T7792] el0t_64_sync_handler+0x84/0xfc [ 105.264031][ T7792] el0t_64_sync+0x190/0x194 [ 105.266472][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.269388][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.272033][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.274900][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.277510][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.288542][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.294562][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.297405][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.300728][ T7551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.309596][ T7551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.313393][ T7551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.367936][ T7621] veth0_vlan: entered promiscuous mode [ 105.374664][ T7551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.377109][ T7551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.380713][ T7551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.383362][ T7551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.407576][ T7621] veth1_vlan: entered promiscuous mode [ 105.554616][ T7651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.599858][ T274] hsr_slave_0: left promiscuous mode [ 106.629628][ T274] hsr_slave_1: left promiscuous mode [ 106.676821][ C0] vxcan0: j1939_tp_rxtimer: 0x00000000b467ec30: rx timeout, send abort [ 106.679301][ C0] vxcan0: j1939_xtp_rx_abort_one: 0x00000000b467ec30: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.737197][ T7803] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 106.739378][ T7803] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 106.748144][ T7803] vhci_hcd vhci_hcd.0: Device attached [ 106.750461][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.752713][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.755281][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.757577][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.763677][ T7806] vhci_hcd: connection closed [ 106.765763][ T274] hsr_slave_0: left promiscuous mode [ 106.777184][ T1884] vhci_hcd: stop threads [ 106.779434][ T1884] vhci_hcd: release socket [ 106.780796][ T1884] vhci_hcd: disconnect device [ 106.812129][ T7814] FAULT_INJECTION: forcing a failure. [ 106.812129][ T7814] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 106.816266][ T7814] CPU: 1 PID: 7814 Comm: syz.4.271 Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 106.818969][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 106.821847][ T7814] Call trace: [ 106.822773][ T7814] dump_backtrace+0x1b8/0x1e4 [ 106.824182][ T7814] show_stack+0x2c/0x3c [ 106.825356][ T7814] dump_stack_lvl+0xe4/0x150 [ 106.826628][ T7814] dump_stack+0x1c/0x28 [ 106.827782][ T7814] should_fail_ex+0x3b0/0x50c [ 106.829095][ T7814] __should_fail_alloc_page+0x104/0x124 [ 106.830585][ T7814] should_fail_alloc_page+0x10/0x20 [ 106.832008][ T7814] prepare_alloc_pages+0x1b4/0x508 [ 106.833493][ T7814] __alloc_pages_noprof+0x150/0x6c0 [ 106.834904][ T7814] alloc_pages_mpol_noprof+0x33c/0x5f0 [ 106.836459][ T7814] vma_alloc_folio_noprof+0x104/0x378 [ 106.837969][ T7814] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 106.839621][ T7814] folio_prealloc+0x3c/0x1c4 [ 106.840921][ T7814] do_wp_page+0x1138/0x3a40 [ 106.842303][ T7814] handle_pte_fault+0xca8/0x5714 [ 106.843703][ T7814] handle_mm_fault+0xe84/0x15cc [ 106.845115][ T7814] do_page_fault+0x38c/0xb1c [ 106.846396][ T7814] do_mem_abort+0x74/0x200 [ 106.847604][ T7814] el0_da+0x60/0x178 [ 106.848659][ T7814] el0t_64_sync_handler+0xcc/0xfc [ 106.850060][ T7814] el0t_64_sync+0x190/0x194 [ 106.851883][ T274] hsr_slave_1: left promiscuous mode [ 106.852323][ T7814] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 106.864213][ T7814] loop4: detected capacity change from 0 to 2048 [ 106.900272][ T7814] loop4: p1 < > p4 [ 106.904103][ T7814] loop4: p4 size 8388608 extends beyond EOD, truncated [ 106.922006][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.924425][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.939621][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.941882][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.963501][ T274] hsr_slave_0: left promiscuous mode [ 107.081024][ T274] hsr_slave_1: left promiscuous mode [ 107.310794][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.412481][ T274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.031984][ T274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.034065][ T274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.063093][ T7825] loop4: detected capacity change from 0 to 2048 [ 108.077029][ T7825] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 1688849860263940)! [ 108.090642][ T7825] EXT4-fs (loop4): group descriptors corrupted! [ 108.143011][ T274] veth1_macvtap: left promiscuous mode [ 108.144992][ T274] veth0_macvtap: left promiscuous mode [ 108.146719][ T274] veth1_vlan: left promiscuous mode [ 108.148298][ T274] veth0_vlan: left promiscuous mode [ 108.154349][ T274] veth1_macvtap: left promiscuous mode [ 108.156094][ T274] veth0_macvtap: left promiscuous mode [ 108.157684][ T274] veth1_vlan: left promiscuous mode [ 108.160524][ T274] veth0_vlan: left promiscuous mode [ 108.167178][ T274] veth1_macvtap: left promiscuous mode [ 108.168743][ T274] veth0_macvtap: left promiscuous mode [ 108.185983][ T274] veth1_vlan: left promiscuous mode [ 108.194157][ T274] veth0_vlan: left promiscuous mode [ 110.353732][ T274] team0 (unregistering): Port device team_slave_1 removed [ 110.532984][ T274] team0 (unregistering): Port device team_slave_0 removed [ 114.785362][ T274] team0 (unregistering): Port device team_slave_1 removed [ 115.030937][ T274] team0 (unregistering): Port device team_slave_0 removed [ 117.350164][ T6293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.353838][ T6293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.360722][ T6293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.364135][ T6293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.366459][ T6293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 117.369757][ T6293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.367415][ T6297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.372566][ T6297] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.375951][ T6297] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.380293][ T6297] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.387122][ T6297] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 118.389488][ T6297] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.334436][ T274] team0 (unregistering): Port device team_slave_1 removed [ 119.379280][ T6293] Bluetooth: hci5: command tx timeout [ 119.530169][ T274] team0 (unregistering): Port device team_slave_0 removed [ 120.419182][ T6293] Bluetooth: hci6: command tx timeout [ 121.459303][ T6297] Bluetooth: hci5: command tx timeout [ 121.809000][ T7621] veth0_macvtap: entered promiscuous mode [ 121.814161][ T7621] veth1_macvtap: entered promiscuous mode [ 121.848481][ T7827] netlink: 'syz.4.275': attribute type 32 has an invalid length. [ 121.853196][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'. [ 121.955099][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.957991][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.964508][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.967236][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.971881][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.974689][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.978684][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.982804][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.985590][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.988214][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.991161][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.993871][ T7621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.996613][ T7621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.000658][ T7621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.082843][ T7621] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.085270][ T7621] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.087739][ T7621] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.091059][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.093234][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.094727][ T7621] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.159640][ T7651] veth0_vlan: entered promiscuous mode [ 122.259223][ T7651] veth1_vlan: entered promiscuous mode [ 122.270947][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.275025][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.300296][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.302454][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.313624][ T7651] veth0_macvtap: entered promiscuous mode [ 122.321074][ T7651] veth1_macvtap: entered promiscuous mode [ 122.327791][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.331007][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.333644][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.336383][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.346601][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.349596][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.352299][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.355091][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.361024][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.382579][ T7830] chnl_net:caif_netlink_parms(): no params data found [ 122.386553][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.392093][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.394949][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.397784][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.399027][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.411628][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.414404][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.417218][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.421563][ T7651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.424273][ T7651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.427835][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.450095][ T7651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.452485][ T7651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.455899][ T7651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.458306][ T7651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.499230][ T6293] Bluetooth: hci6: command tx timeout [ 122.580507][ T7830] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.582612][ T7830] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.584703][ T7830] bridge_slave_0: entered allmulticast mode [ 122.586863][ T7830] bridge_slave_0: entered promiscuous mode [ 122.630316][ T7830] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.632238][ T7830] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.646687][ T7854] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 122.650412][ T7830] bridge_slave_1: entered allmulticast mode [ 122.652795][ T7830] bridge_slave_1: entered promiscuous mode [ 122.664865][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 122.696124][ T7854] netlink: 'syz.3.257': attribute type 10 has an invalid length. [ 122.703179][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.705519][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.716124][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.718138][ T7854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.720229][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.722076][ T7854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.747538][ T7854] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 122.761947][ T7854] netlink: 'syz.3.257': attribute type 1 has an invalid length. [ 122.764034][ T7854] netlink: 224 bytes leftover after parsing attributes in process `syz.3.257'. [ 122.771770][ T7859] loop2: detected capacity change from 0 to 256 [ 122.886406][ T7830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.894326][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.896674][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.903743][ T7840] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 122.923175][ T7830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.994155][ T7830] team0: Port device team_slave_0 added [ 123.010503][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.3.280'. [ 123.018410][ T7830] team0: Port device team_slave_1 added [ 123.068525][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.084801][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.086931][ T7834] bridge_slave_0: entered allmulticast mode [ 123.116790][ T7834] bridge_slave_0: entered promiscuous mode [ 123.134966][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.136881][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.142997][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.146251][ T7868] netlink: 40 bytes leftover after parsing attributes in process `syz.3.282'. [ 123.148274][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.157515][ T7830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.163157][ T7830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.164986][ T7830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.179462][ T7830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.183562][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.185789][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.187833][ T7834] bridge_slave_1: entered allmulticast mode [ 123.190877][ T7834] bridge_slave_1: entered promiscuous mode [ 123.550821][ T6293] Bluetooth: hci5: command tx timeout [ 123.776415][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.787897][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.843293][ T7830] hsr_slave_0: entered promiscuous mode [ 123.909726][ T7830] hsr_slave_1: entered promiscuous mode [ 124.018585][ T7887] loop0: detected capacity change from 0 to 256 [ 124.036509][ T7885] loop2: detected capacity change from 0 to 512 [ 124.057274][ T7887] exfat: Deprecated parameter 'namecase' [ 124.059465][ T7887] exfat: Deprecated parameter 'utf8' [ 124.065542][ T7887] exFAT-fs (loop0): failed to read boot sector [ 124.069487][ T7887] exFAT-fs (loop0): failed to recognize exfat type [ 124.084862][ T7885] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c018, mo2=0002] [ 124.087222][ T7885] System zones: 0-2, 18-18, 34-34 [ 124.091917][ T7885] __quota_error: 56 callbacks suppressed [ 124.091933][ T7885] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 124.096545][ T7885] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 124.107047][ T7885] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.287: Failed to acquire dquot type 1 [ 124.133715][ T7839] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 124.135960][ T7834] team0: Port device team_slave_0 added [ 124.176415][ T7885] EXT4-fs (loop2): 1 truncate cleaned up [ 124.178449][ T7885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.522304][ T7551] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.606707][ T6293] Bluetooth: hci6: command tx timeout [ 124.834253][ T7834] team0: Port device team_slave_1 added [ 124.988094][ T7900] loop0: detected capacity change from 0 to 32768 [ 125.012442][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.014407][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.036248][ T7834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.043305][ T7834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.045345][ T7834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.061407][ T7834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.281469][ T7834] hsr_slave_0: entered promiscuous mode [ 125.467386][ T7834] hsr_slave_1: entered promiscuous mode [ 125.629573][ T6293] Bluetooth: hci5: command tx timeout [ 125.684369][ T7834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.734887][ T7834] Cannot create hsr debugfs directory [ 125.942813][ T2307] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.944668][ T2307] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.066660][ T7929] sctp: [Deprecated]: syz.3.299 (pid 7929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.066660][ T7929] Use struct sctp_sack_info instead [ 126.078569][ T7929] sctp: [Deprecated]: syz.3.299 (pid 7929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.078569][ T7929] Use struct sctp_sack_info instead [ 126.094042][ T7929] loop3: detected capacity change from 0 to 256 [ 126.103376][ T7830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.115403][ T7929] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 126.334727][ T7931] loop2: detected capacity change from 0 to 32768 [ 126.346031][ T7931] [ 126.346031][ T7931] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 126.346031][ T7931] [ 126.356248][ T7931] ialloc: diAlloc returned -5! [ 126.560880][ T7931] ialloc: diAlloc returned -5! [ 126.571788][ T7931] find_entry called with index = 0 [ 126.575030][ T7931] read_mapping_page failed! [ 126.576399][ T7931] ERROR: (device loop2): txAbort: [ 126.576399][ T7931] [ 126.582077][ T7931] ERROR: (device loop2): remounting filesystem as read-only [ 126.598043][ T7551] ------------[ cut here ]------------ [ 126.600019][ T7551] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:886:2 [ 126.602069][ T7551] index -134217728 is out of range for type 'struct mutex[128]' [ 126.604139][ T7551] CPU: 1 PID: 7551 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 126.606650][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 126.609463][ T7551] Call trace: [ 126.610389][ T7551] dump_backtrace+0x1b8/0x1e4 [ 126.611720][ T7551] show_stack+0x2c/0x3c [ 126.612887][ T7551] dump_stack_lvl+0xe4/0x150 [ 126.614177][ T7551] dump_stack+0x1c/0x28 [ 126.615328][ T7551] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 126.616884][ T7551] diFree+0x197c/0x2648 [ 126.618096][ T7551] jfs_evict_inode+0x2d0/0x3f4 [ 126.619415][ T7551] evict+0x260/0x68c [ 126.620517][ T7551] iput+0x74c/0x830 [ 126.621615][ T7551] dentry_unlink_inode+0x394/0x4d4 [ 126.622986][ T7551] __dentry_kill+0x178/0x5e8 [ 126.624254][ T7551] shrink_kill+0xd4/0x2cc [ 126.625481][ T7551] shrink_dentry_list+0x31c/0x768 [ 126.626909][ T7551] shrink_dcache_parent+0xc4/0x374 [ 126.628263][ T7551] do_one_tree+0x30/0xfc [ 126.629431][ T7551] shrink_dcache_for_umount+0x80/0x12c [ 126.630919][ T7551] generic_shutdown_super+0x68/0x2b8 [ 126.632384][ T7551] kill_block_super+0x44/0x90 [ 126.633657][ T7551] deactivate_locked_super+0xc4/0x12c [ 126.635159][ T7551] deactivate_super+0xe0/0x100 [ 126.636503][ T7551] cleanup_mnt+0x34c/0x3dc [ 126.637793][ T7551] __cleanup_mnt+0x20/0x30 [ 126.639049][ T7551] task_work_run+0x230/0x2e0 [ 126.640319][ T7551] do_notify_resume+0x178/0x1f4 [ 126.641589][ T7551] el0_svc+0xac/0x168 [ 126.642698][ T7551] el0t_64_sync_handler+0x84/0xfc [ 126.644108][ T7551] el0t_64_sync+0x190/0x194 [ 126.646780][ T7551] ---[ end trace ]--- [ 126.647905][ T7551] Unable to handle kernel paging request at virtual address ffff5fff8ce9b123 [ 126.659407][ T6293] Bluetooth: hci6: command tx timeout [ 126.663515][ T7551] KASAN: maybe wild-memory-access in range [0xfffefffc674d8918-0xfffefffc674d891f] [ 126.666347][ T7551] Mem abort info: [ 126.667438][ T7551] ESR = 0x0000000096000004 [ 126.668663][ T7551] EC = 0x25: DABT (current EL), IL = 32 bits [ 126.671194][ T7551] SET = 0, FnV = 0 [ 126.672249][ T7551] EA = 0, S1PTW = 0 [ 126.673287][ T7551] FSC = 0x04: level 0 translation fault [ 126.674830][ T7551] Data abort info: [ 126.675846][ T7551] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 126.677614][ T7551] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 126.679403][ T7551] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 126.681029][ T7551] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ace37000 [ 126.683032][ T7551] [ffff5fff8ce9b123] pgd=0000000000000000, p4d=0000000000000000 [ 126.685306][ T7551] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 126.687174][ T7551] Modules linked in: [ 126.688224][ T7551] CPU: 1 PID: 7551 Comm: syz-executor Not tainted 6.10.0-rc7-syzkaller-gc912bf709078 #0 [ 126.690907][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 126.693637][ T7551] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 126.695732][ T7551] pc : __mutex_lock_common+0xf4/0x21a0 [ 126.697253][ T7551] lr : __mutex_lock_common+0xcc/0x21a0 [ 126.698778][ T7551] sp : ffff8000a0727260 [ 126.699882][ T7551] x29: ffff8000a07273f0 x28: dfff800000000000 x27: 1ffff0001273d2b0 [ 126.702063][ T7551] x26: ffff8000939e9000 x25: ffff7000140e4e68 x24: 0000000000000000 [ 126.704235][ T7551] x23: 0000000000000000 x22: ffff800081a336bc x21: 0000000000000000 [ 126.706362][ T7551] x20: 0000000000000000 x19: fffefffc674d88b8 x18: 0000000000000008 [ 126.708562][ T7551] x17: 0000000000000000 x16: ffff80008032b884 x15: 0000000000000005 [ 126.710719][ T7551] x14: 1ffff000140e4e6c x13: 0000000000000000 x12: 0000000000000000 [ 126.712934][ T7551] x11: ffff7000140e4e71 x10: 0000000000ff0100 x9 : 0000000000000003 [ 126.715144][ T7551] x8 : 1fffdfff8ce9b123 x7 : 0000000000000000 x6 : 0000000000000000 [ 126.717339][ T7551] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 126.719491][ T7551] x2 : 0000000000000000 x1 : 0000000000000080 x0 : fffefffc674d8918 [ 126.721696][ T7551] Call trace: [ 126.722628][ T7551] __mutex_lock_common+0xf4/0x21a0 [ 126.724056][ T7551] mutex_lock_nested+0x2c/0x38 [ 126.725316][ T7551] diFree+0x2cc/0x2648 [ 126.726424][ T7551] jfs_evict_inode+0x2d0/0x3f4 [ 126.727716][ T7551] evict+0x260/0x68c [ 126.728788][ T7551] iput+0x74c/0x830 [ 126.729802][ T7551] dentry_unlink_inode+0x394/0x4d4 [ 126.731187][ T7551] __dentry_kill+0x178/0x5e8 [ 126.732411][ T7551] shrink_kill+0xd4/0x2cc [ 126.733640][ T7551] shrink_dentry_list+0x31c/0x768 [ 126.735045][ T7551] shrink_dcache_parent+0xc4/0x374 [ 126.736393][ T7551] do_one_tree+0x30/0xfc [ 126.737568][ T7551] shrink_dcache_for_umount+0x80/0x12c [ 126.739097][ T7551] generic_shutdown_super+0x68/0x2b8 [ 126.740495][ T7551] kill_block_super+0x44/0x90 [ 126.741779][ T7551] deactivate_locked_super+0xc4/0x12c [ 126.743313][ T7551] deactivate_super+0xe0/0x100 [ 126.744644][ T7551] cleanup_mnt+0x34c/0x3dc [ 126.745830][ T7551] __cleanup_mnt+0x20/0x30 [ 126.747034][ T7551] task_work_run+0x230/0x2e0 [ 126.748288][ T7551] do_notify_resume+0x178/0x1f4 [ 126.749679][ T7551] el0_svc+0xac/0x168 [ 126.750744][ T7551] el0t_64_sync_handler+0x84/0xfc [ 126.752170][ T7551] el0t_64_sync+0x190/0x194 [ 126.753415][ T7551] Code: b9458348 35000128 91018260 d343fc08 (387c6908) [ 126.755302][ T7551] ---[ end trace 0000000000000000 ]--- [ 127.430337][ T7551] Kernel panic - not syncing: Oops: Fatal exception [ 127.432261][ T7551] SMP: stopping secondary CPUs [ 127.433597][ T7551] Kernel Offset: disabled [ 127.434771][ T7551] CPU features: 0x00,00000103,80100128,42017203 [ 127.436542][ T7551] Memory Limit: none [ 128.056093][ T7551] Rebooting in 86400 seconds..