last executing test programs: 1m49.460163364s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "10ba2ca9dea5103f580b17a3473f94ae8873b0475ffa23a6b7fa578b8c3198b0", "2637084f4c720f9d1764077630303de0b484a3ea7dca9a693a0027da33103728", "1bc49f9c66127c6e89415e8df5ca73f44788523229ed9b1915b290ae082663c3", "3ef467b45dd9c61fda6ef01ac8ec37b45097c4a3052c1430c89f6171140c7af3", "98eaec215978891b6b7665c38dc3ffb7f93979e493aa6982c3a429d4d5dc9f80", "4e2de84ae20a46cbb9c33212"}}) 1m49.080190175s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) 1m48.149866905s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r3 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@empty}, 0x0, @in6=@private2}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1m47.87001599s ago: executing program 2: syz_io_uring_setup(0xfb, &(0x7f00000003c0), 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 1m21.633026699s ago: executing program 2: syz_io_uring_setup(0xfb, &(0x7f00000003c0), 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 1m2.855782586s ago: executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) epoll_create1(0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x11}, 0x14) socket(0x0, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r2, r0, 0x11, 0x0, r2}, 0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r5, r3, 0x11, 0x0, r5}, 0x14) 1m2.427669459s ago: executing program 0: io_uring_setup(0x7bda, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCFLSH(r0, 0x40204706, 0x20000010) 1m2.095182328s ago: executing program 0: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f00000012c0)='./file0\x00', 0x0, &(0x7f0000001540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYRES32=r2, @ANYRES16=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYBLOB="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", @ANYBLOB="cceda19c6ae7"], 0x42, 0x1cb, &(0x7f0000000300)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4f}, [@call, @exit]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0xe0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f00000001c0), &(0x7f0000000240)) mount$9p_xen(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=xen,', {[{@access_uid={'access', 0x3d, r1}}], [{@flag='silent'}, {@obj_user={'obj_user', 0x3d, '$]'}}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r6}}, {@obj_user}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fowner_gt={'fowner>', r1}}]}}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x103002) dup2(r7, r7) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) write$char_usb(r7, &(0x7f0000000040)="e2", 0x1068) ftruncate(r5, 0x2007ffb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x12, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000000000000e6000000631134001b00000095000000000000009f5e1d40247ed7d30e5bd676c9c86ff996e938ada85d547c109f91d1c638d8a3eb171029b2a90e875e71ba313f83d93771372b2aec728e8b63fbf4408e65b16b2e8cc5c1989ffb0647784499d534679852e60077cc44c21abadf4ae3746d5960db3a2a523e2e4e6a066716bf0dc41abd6d86b9b64a12"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xff8, &(0x7f0000000200)=""/4088, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd6}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r9 = open(&(0x7f0000000100)='./bus\x00', 0x1eb142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2800007, 0x11, r9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001800)=ANY=[@ANYBLOB="18d618a3ac350836584b58da7c00000000000000", @ANYBLOB="2b2a078e617521246b96b50d13f04bddc299d14991c1b4c348324bfd45827c4fedb6950bb513d75cd8a527d64dd8605ec8674a60721593f3300061529d5fdb2f4e781b57c20291acfa9f9e1d4d1fb86ca2265e80d3fadc4e520e721bc603324e6ecd06a844f3f3adca048d2848a5201effbd1dba9863b39d274d7029e16e61e2ec45d4bee1db56c1baacd594321328f423dd448f1fb1af", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ftruncate(r8, 0x4) 1m1.171589313s ago: executing program 0: syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) 1m0.520779369s ago: executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) 1m0.188060784s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 58.811322752s ago: executing program 2: syz_io_uring_setup(0xfb, &(0x7f00000003c0), 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) 41.15365562s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0xa0, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x84}}]}, 0xa0}}, 0x0) 40.567979024s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85512, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0xe) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x18, 0x28, 0x1}, 0x18}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) socket$nl_xfrm(0x10, 0x3, 0x6) 39.187088821s ago: executing program 3: syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000004c0), 0x4, 0x9606, &(0x7f0000012cc0)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 35.051625591s ago: executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 34.936902644s ago: executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) 34.813333666s ago: executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "5f730000a9003f00"}) poll(&(0x7f0000000080)=[{r0}], 0x1, 0xfff) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x5f) 34.78210888s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85512, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0xe) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x18, 0x28, 0x1}, 0x18}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) socket$nl_xfrm(0x10, 0x3, 0x6) 33.57054858s ago: executing program 3: creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000fee000), 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) 33.336767499s ago: executing program 3: r0 = syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', 0x800400, &(0x7f0000000340)=ANY=[], 0x0, 0x19d, &(0x7f0000000000)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='dyn']) r1 = dup(0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$afs(&(0x7f0000000180)=ANY=[@ANYBLOB="232e79fa3167114a2d41d337da747152746c2118e624c5d1b8fc5432ae12"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) ftruncate(r2, 0x81) sendfile(r1, r0, 0x0, 0x8000fffffffe) chdir(&(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xe3b, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000380), 0x45, 0x7ac, &(0x7f0000000f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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") 32.758098434s ago: executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) 32.627960302s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.084334197s ago: executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000400", 0x33fe0}], 0x1}, 0x0) 31.776056419s ago: executing program 4: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001980)='./file0\x00', 0x1000000, &(0x7f00000019c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,dmask=00000000000000000000011,discard,namecase=1,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303032322c757466382c696f636861727365743d64656661756c742c00b3f745934550b4fafd14dd4644ff2e5e5f46", @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES64], 0x3, 0x1507, &(0x7f0000000440)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) dup(0xffffffffffffffff) r2 = open(&(0x7f0000000280)='.\x00', 0x347102, 0x0) renameat2(r2, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 25.796177748s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) openat2(r0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x20}, 0x18) 25.795592076s ago: executing program 4: syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0\x00', 0xa00010, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@uid_forget}, {@noadinicb}, {@unhide}, {@longad}, {@undelete}, {@unhide}, {@unhide}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r2, 0x2088002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) read(r0, &(0x7f0000000000), 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 25.794438528s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$inet6(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85512, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0xe) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x18, 0x28, 0x1}, 0x18}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000032000000", 0xfe60) socket$nl_xfrm(0x10, 0x3, 0x6) 2.586242369s ago: executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) write$sequencer(r0, &(0x7f0000000340)=[@e={0xff, 0x0, 0x0, 0x0, @generic}], 0x8) 0s ago: executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) kernel console output (not intermixed with test programs): 4] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.189857][T10970] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 536.198491][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.248379][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.266719][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.287778][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.318306][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.319236][T10976] binder: 10975:10976 ioctl c0306201 0 returned -14 [ 536.334715][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.345668][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.356585][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.366781][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.378010][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.430099][T10594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.449392][T10594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.513021][T10594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.532946][T10959] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 536.565636][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 536.696130][T10594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.729047][T10594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.750008][T10594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.761928][T10594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.187275][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.217164][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.342502][T10995] loop3: detected capacity change from 0 to 4096 [ 537.378283][T10995] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 537.430454][T10491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.489213][T10491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.593021][T11005] loop4: detected capacity change from 0 to 2048 [ 537.740613][T11007] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 538.477301][T11007] loop2: detected capacity change from 0 to 32768 [ 540.398121][T10995] ntfs3: loop3: Failed to read $UpCase (-4). [ 540.428908][T11005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.985510][T11016] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.014984][ T29] audit: type=1400 audit(1718676844.039:847): avc: denied { shutdown } for pid=11008 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 541.403507][ T5161] libceph: connect (1)[c::]:6789 error -101 [ 541.419608][ T5161] libceph: mon0 (1)[c::]:6789 connect error [ 541.434466][ T5161] libceph: connect (1)[c::]:6789 error -101 [ 541.440891][ T5161] libceph: mon0 (1)[c::]:6789 connect error [ 541.466971][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.724735][ T5161] libceph: connect (1)[c::]:6789 error -101 [ 541.743589][ T5161] libceph: mon0 (1)[c::]:6789 connect error [ 541.752546][T11009] ceph: No mds server is up or the cluster is laggy [ 542.252551][T11056] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.253562][T11050] loop3: detected capacity change from 0 to 4096 [ 542.315502][T11050] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 542.352453][T11061] loop4: detected capacity change from 0 to 256 [ 542.430142][T11050] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 542.472558][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.642974][ T29] audit: type=1800 audit(1718676845.679:848): pid=11050 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=0 res=0 errno=0 [ 542.865087][ T29] audit: type=1326 audit(1718676845.899:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11059 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f857da7cf29 code=0x0 [ 543.402563][T11069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 543.828315][ T29] audit: type=1400 audit(1718676846.859:850): avc: denied { bind } for pid=11075 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 544.103887][ T29] audit: type=1800 audit(1718676847.139:851): pid=11090 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 544.949325][ T29] audit: type=1400 audit(1718676847.929:852): avc: denied { create } for pid=11093 comm="syz-executor.0" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=chr_file permissive=1 [ 545.702493][T11107] loop4: detected capacity change from 0 to 4096 [ 545.768635][T11107] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 545.898845][T11107] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 546.009407][ T29] audit: type=1800 audit(1718676849.049:853): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=0 res=0 errno=0 [ 546.386241][T11100] loop3: detected capacity change from 0 to 40427 [ 546.435422][T11100] F2FS-fs (loop3): Found nat_bits in checkpoint [ 546.638117][T11100] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 546.665155][T11133] loop0: detected capacity change from 0 to 2048 [ 546.780958][T11100] Process accounting resumed [ 546.876040][ T5124] syz-executor.3: attempt to access beyond end of device [ 546.876040][ T5124] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 546.920391][T11133] loop0: detected capacity change from 0 to 1024 [ 546.937388][ T5124] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 547.023505][T11133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.255103][T11133] EXT4-fs: Ignoring removed mblk_io_submit option [ 547.283053][T11133] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 547.319415][T11133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 547.338856][T11133] EXT4-fs (loop0): changing journal_checksum during remount not supported; ignoring [ 547.367378][T11133] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 548.029760][T11162] netlink: 'syz-executor.3': attribute type 58 has an invalid length. [ 548.056758][T11162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 548.083704][ T7751] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.269849][ T29] audit: type=1400 audit(1718676851.289:854): avc: denied { accept } for pid=11163 comm="syz-executor.4" path="socket:[32391]" dev="sockfs" ino=32391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.879362][ T5168] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 548.948499][T11187] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 549.081655][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 549.103752][ T5168] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 549.127004][ T5168] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 549.165463][ T5168] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 549.224764][T11171] loop3: detected capacity change from 0 to 40427 [ 549.231446][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.266048][T11192] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 549.285209][ T5168] usb 1-1: config 0 descriptor?? [ 549.303487][T11177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 549.314956][T11171] F2FS-fs (loop3): Found nat_bits in checkpoint [ 549.561628][T11199] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 549.670141][T11171] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 549.739915][ T5168] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 549.751166][T11171] Process accounting resumed [ 549.760682][ T5168] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 549.802335][ T5168] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 549.826910][ T5124] syz-executor.3: attempt to access beyond end of device [ 549.826910][ T5124] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 549.848473][ T5124] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 550.032376][T11177] loop0: detected capacity change from 0 to 256 [ 550.098981][T11177] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 550.159789][ T29] audit: type=1400 audit(1718676853.189:855): avc: denied { append } for pid=11176 comm="syz-executor.0" path="/root/syzkaller-testdir3479025988/syzkaller.PvDyxH/210/file0/memory.events" dev="loop0" ino=1048676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 550.210980][T11205] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 550.258343][ T29] audit: type=1400 audit(1718676853.199:856): avc: denied { rmdir } for pid=11176 comm="syz-executor.0" name="file2" dev="loop0" ino=1048677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 550.281692][ T29] audit: type=1400 audit(1718676853.229:857): avc: denied { ioctl } for pid=11176 comm="syz-executor.0" path="/root/syzkaller-testdir3479025988/syzkaller.PvDyxH/210/file0/memory.events" dev="loop0" ino=1048676 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 550.323226][ T5133] usb 1-1: USB disconnect, device number 5 [ 550.524123][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.918649][ T29] audit: type=1400 audit(1718676853.949:858): avc: denied { lock } for pid=11219 comm="syz-executor.2" path="socket:[32481]" dev="sockfs" ino=32481 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 552.290706][T11234] loop4: detected capacity change from 0 to 2048 [ 552.314600][T11234] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 552.407405][T11236] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 552.409341][T11234] syz-executor.4: attempt to access beyond end of device [ 552.409341][T11234] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 552.599411][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 552.660214][T11245] fuse: Bad value for 'fd' [ 552.708475][T11245] fscrypt (sda1, inode 1948): Unsupported encryption flags (0x08) [ 552.874385][T11256] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 552.932264][T11258] loop0: detected capacity change from 0 to 1024 [ 553.146614][T11269] loop0: detected capacity change from 0 to 64 [ 553.201659][T11273] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.225045][T11269] Trying to free block not in datazone [ 553.225405][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 553.245103][ T29] audit: type=1400 audit(1718676856.279:859): avc: denied { mounton } for pid=11268 comm="syz-executor.0" path="/root/syzkaller-testdir3479025988/syzkaller.PvDyxH/215/file1/file1" dev="loop0" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 553.387013][ T7751] Bad inode number on dev loop0: 4160749571 is out of range [ 553.408524][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 553.426749][ T7751] Bad inode number on dev loop0: 4160749571 is out of range [ 553.433899][T11278] fuse: Bad value for 'fd' [ 553.457829][T11278] fscrypt (sda1, inode 1971): Unsupported encryption flags (0x08) [ 553.783825][T11289] loop1: detected capacity change from 0 to 1024 [ 554.654324][T11292] loop3: detected capacity change from 0 to 32768 [ 554.908272][T11292] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 554.918028][T11292] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 555.011564][T11292] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 555.042684][ T5161] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 555.058303][ T5161] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 555.292640][ T5161] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 234ms [ 555.325129][ T5161] gfs2: fsid=syz:syz.0: jid=0: Done [ 555.346151][T11292] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 555.464585][T11302] loop1: detected capacity change from 0 to 64 [ 555.518924][ T29] audit: type=1400 audit(1718676858.549:860): avc: denied { append } for pid=11295 comm="syz-executor.4" name="card1" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 555.699369][T11302] Trying to free block not in datazone [ 555.773058][ T5117] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 555.786654][ T5117] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 555.796560][ T5117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 555.928525][T11307] loop2: detected capacity change from 0 to 512 [ 555.939543][ T5117] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 555.951676][ T5117] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 555.971279][ T5117] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 556.026581][T11307] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 556.065054][T10594] Bad inode number on dev loop1: 4160749571 is out of range [ 556.077548][T10594] Bad inode number on dev loop1: 4160749571 is out of range [ 556.142334][T11307] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 556.213642][T11307] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1 [ 556.275000][T11307] EXT4-fs (loop2): 1 truncate cleaned up [ 556.289176][T11307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.302135][T11307] ext4 filesystem being mounted at /root/syzkaller-testdir916127303/syzkaller.OJR1M0/319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.330746][T11307] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 556.361260][T11307] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 556.388331][T11307] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1 [ 556.621475][ T6406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.702416][ T2796] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.042866][ T2796] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.382910][ T2796] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.753087][T11335] loop3: detected capacity change from 0 to 512 [ 557.785776][T11335] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz-executor.3: iget: special inode unallocated [ 557.873435][T11335] EXT4-fs (loop3): get root inode failed [ 557.888601][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.891778][T11335] EXT4-fs (loop3): mount failed [ 557.908555][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.920115][T11340] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 557.929681][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.976780][ T2796] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.000570][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 558.008661][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 558.016756][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 558.038519][ T5117] Bluetooth: hci7: command tx timeout [ 559.409450][T11304] chnl_net:caif_netlink_parms(): no params data found [ 559.548682][T11354] loop3: detected capacity change from 0 to 512 [ 559.613210][T11354] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 559.637637][T11354] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 559.699360][T11354] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz-executor.3: Failed to acquire dquot type 1 [ 559.785001][T11354] EXT4-fs (loop3): 1 truncate cleaned up [ 559.790282][ T2796] bridge_slave_1: left allmulticast mode [ 559.796390][ T2796] bridge_slave_1: left promiscuous mode [ 559.803633][T11354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.808527][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.857467][ T2796] bridge_slave_0: left allmulticast mode [ 559.863544][T11354] ext4 filesystem being mounted at /root/syzkaller-testdir1368549900/syzkaller.d84D9R/442/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.881599][ T2796] bridge_slave_0: left promiscuous mode [ 559.887420][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.013480][T11354] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 560.042369][T11354] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 560.088564][T11354] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz-executor.3: Failed to acquire dquot type 1 [ 560.118684][T11341] Bluetooth: hci5: command tx timeout [ 560.120382][ T4480] Bluetooth: hci7: command tx timeout [ 560.245886][ T5124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.354028][T11367] loop4: detected capacity change from 0 to 512 [ 560.409914][T11369] fuse: Bad value for 'fd' [ 560.422036][T11367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 560.452660][T11367] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 560.478478][T11369] fscrypt (sda1, inode 1958): Unsupported encryption flags (0x08) [ 560.557266][T11373] loop3: detected capacity change from 0 to 512 [ 560.579934][T11373] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4590: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 560.588829][T11367] EXT4-fs error (device loop4): ext4_free_branches:1027: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 560.632156][T11373] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 560.664444][T11367] EXT4-fs (loop4): 1 truncate cleaned up [ 560.672211][T11367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 560.838072][T11367] EXT4-fs error (device loop4): ext4_lookup:1846: inode #2: comm syz-executor.4: bad inode number: 1 [ 561.042754][T11373] loop3: detected capacity change from 0 to 1024 [ 561.235034][T11376] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 561.748677][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.784093][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.825991][ T2796] bond0 (unregistering): Released all slaves [ 561.916941][ T29] audit: type=1400 audit(1718676864.939:861): avc: denied { ioctl } for pid=11363 comm="syz-executor.4" path="socket:[33366]" dev="sockfs" ino=33366 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 561.959962][T11376] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.4: corrupted in-inode xattr: e_value size too large [ 562.198515][ T4480] Bluetooth: hci7: command tx timeout [ 562.198545][T11341] Bluetooth: hci5: command tx timeout [ 562.352176][T11388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.680087][T11304] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.687371][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.709437][T11395] binder: 11394:11395 ioctl 541b 0 returned -22 [ 562.890128][T11304] bridge_slave_0: entered allmulticast mode [ 562.914800][T11304] bridge_slave_0: entered promiscuous mode [ 562.932484][T11304] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.941389][T11304] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.799198][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.805670][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.917043][T11304] bridge_slave_1: entered allmulticast mode [ 563.938856][T11304] bridge_slave_1: entered promiscuous mode [ 564.059860][ T2796] hsr_slave_0: left promiscuous mode [ 564.087703][ T2796] hsr_slave_1: left promiscuous mode [ 564.110239][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.120236][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.156523][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.170462][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.218951][ T2796] veth1_macvtap: left promiscuous mode [ 564.224545][ T2796] veth0_macvtap: left promiscuous mode [ 564.233494][ T2796] veth1_vlan: left promiscuous mode [ 564.240928][ T2796] veth0_vlan: left promiscuous mode [ 564.278702][T11341] Bluetooth: hci7: command tx timeout [ 564.297324][T11341] Bluetooth: hci5: command tx timeout [ 564.463817][T10451] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.632365][T11410] loop4: detected capacity change from 0 to 128 [ 564.651434][T11410] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 564.718277][T11410] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.962127][T11408] loop2: detected capacity change from 0 to 32768 [ 565.019391][ T29] audit: type=1400 audit(1718676868.049:862): avc: denied { bind } for pid=11413 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 565.051540][T11408] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 565.136193][ T29] audit: type=1326 audit(1718676868.169:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.164402][ T29] audit: type=1326 audit(1718676868.169:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.172481][T11408] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 565.215484][ T29] audit: type=1326 audit(1718676868.239:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.269064][T11408] XFS (loop2): Starting recovery (logdev: internal) [ 565.281002][ T29] audit: type=1326 audit(1718676868.319:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.306347][T11408] XFS (loop2): Ending recovery (logdev: internal) [ 565.356590][ T29] audit: type=1326 audit(1718676868.319:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.413247][ T29] audit: type=1326 audit(1718676868.369:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.438114][ T29] audit: type=1326 audit(1718676868.369:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857da7cf29 code=0x7ffc0000 [ 565.489553][T11425] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 565.505205][ T29] audit: type=1326 audit(1718676868.369:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f857da7a6a7 code=0x7ffc0000 [ 565.612577][T11427] loop4: detected capacity change from 0 to 512 [ 565.621033][T11427] ext3: Unknown parameter 'uid>00000000000000000000' [ 565.683849][ T6406] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 565.830669][T11429] loop4: detected capacity change from 0 to 2048 [ 565.952669][T11429] loop4: p3 < > p4 < > [ 565.956907][T11429] loop4: partition table partially beyond EOD, truncated [ 565.988528][T11429] loop4: p3 start 4284289 is beyond EOD, truncated [ 566.337300][ T2796] team0 (unregistering): Port device team_slave_1 removed [ 566.364979][T11341] Bluetooth: hci5: command tx timeout [ 566.440084][ T2796] team0 (unregistering): Port device team_slave_0 removed [ 566.472247][ T5133] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 566.670295][ T5133] usb 3-1: Using ep0 maxpacket: 16 [ 566.757178][ T5133] usb 3-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 566.767361][ T5133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.816364][ T5133] usb 3-1: Product: syz [ 566.821720][ T5133] usb 3-1: Manufacturer: syz [ 566.826420][ T5133] usb 3-1: SerialNumber: syz [ 566.836615][ T5133] usb 3-1: config 0 descriptor?? [ 566.844259][T11440] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11440 comm=syz-executor.4 [ 566.847060][ T5133] usb-storage 3-1:0.0: USB Mass Storage device detected [ 567.173193][ T5133] usb 3-1: USB disconnect, device number 6 [ 567.669955][T11338] chnl_net:caif_netlink_parms(): no params data found [ 567.735513][T11440] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 567.756398][T11440] 0¥ûÀ: renamed from caif0 [ 567.769371][T11440] 0¥ûÀ: entered allmulticast mode [ 567.774574][T11440] A link change request failed with some changes committed already. Interface 60¥ûÀ may have been left with an inconsistent configuration, please check. [ 567.856909][T11304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.893565][T11304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.092237][T11451] loop4: detected capacity change from 0 to 2048 [ 568.092752][T11453] loop2: detected capacity change from 0 to 512 [ 568.115127][T11451] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 568.131584][T11453] EXT4-fs (loop2): orphan cleanup on readonly fs [ 568.144331][T11453] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 217 vs 220 free clusters [ 568.173135][T11453] EXT4-fs error (device loop2): ext4_free_branches:1027: inode #11: comm syz-executor.2: invalid indirect mapped block 1 (level 1) [ 568.207872][T11451] syz-executor.4: attempt to access beyond end of device [ 568.207872][T11451] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 568.210022][T11304] team0: Port device team_slave_0 added [ 568.228827][T11456] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 568.272880][T11453] EXT4-fs (loop2): 1 truncate cleaned up [ 568.339608][T11453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 568.395143][T11449] EXT4-fs error (device loop2): ext4_lookup:1846: inode #2: comm syz-executor.2: bad inode number: 1 [ 568.495992][T11452] can0: slcan on ptm0. [ 568.504235][T11304] team0: Port device team_slave_1 added [ 569.010853][T11338] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.017974][T11338] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.038518][T11338] bridge_slave_0: entered allmulticast mode [ 569.079272][T11338] bridge_slave_0: entered promiscuous mode [ 570.000759][T11304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.028031][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.048937][T11469] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 570.125440][T11304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.159367][T11304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.185812][T11304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.206333][T11453] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.2: corrupted in-inode xattr: e_value size too large [ 570.277048][T11304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.403850][T11338] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.421508][T11338] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.438424][T11338] bridge_slave_1: entered allmulticast mode [ 570.532673][T11338] bridge_slave_1: entered promiscuous mode [ 570.579314][T11443] can0 (unregistered): slcan off ptm0. [ 571.762081][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 571.762103][ T29] audit: type=1400 audit(1718676873.989:891): avc: denied { mount } for pid=11470 comm="syz-executor.4" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 571.882759][ T29] audit: type=1400 audit(1718676874.819:892): avc: denied { unmount } for pid=10451 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 571.934686][T11338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.064795][T11304] hsr_slave_0: entered promiscuous mode [ 572.096442][T11304] hsr_slave_1: entered promiscuous mode [ 572.129703][T11304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.148316][T11304] Cannot create hsr debugfs directory [ 572.161130][T11338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.217702][T11461] kexec: Could not allocate control_code_buffer [ 572.372738][T11338] team0: Port device team_slave_0 added [ 572.402426][T11338] team0: Port device team_slave_1 added [ 572.570080][T11338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.582610][T11479] loop3: detected capacity change from 0 to 128 [ 572.588275][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.627356][T11338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.672655][T11338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.698372][T11338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.754027][T11338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.822111][ T6406] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.006193][T11338] hsr_slave_0: entered promiscuous mode [ 573.030469][T11338] hsr_slave_1: entered promiscuous mode [ 573.037244][T11338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.046678][T11338] Cannot create hsr debugfs directory [ 573.288592][ T5168] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 573.379327][T11304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.520429][ T5168] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 573.554557][ T5168] usb 3-1: language id specifier not provided by device, defaulting to English [ 573.572872][ T5168] usb 3-1: New USB device found, idVendor=047d, idProduct=2041, bcdDevice= 0.40 [ 573.583443][ T5168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.592349][ T5168] usb 3-1: Product: syz [ 573.596627][ T5168] usb 3-1: Manufacturer: 猟鬋㷽榋헟올呲턞旽扲王ã‘຾ç‚莖Ⴁ迚è·ï¹·ìŽ¶ê¨Ã¥â˜±é‰êŸ²îŸ„쑲â‘à³…â‚–á˜â©»ê›¼è¾ ç¼¹ï ¯Øµí¿ê°¯á®¾æ¦¾ç„¼â´€ãŠ¬î°ˆè®´í‘µç¥ä³©ìš™Ë«ã ­å„‰î†áœ¯â“‘ç“…é¸Ì²á™½å ”롥왽㊧䵌N책떢⽓풓혳윺枱ã ì°ƒîšŒã¢…܄伺åºäª à¤‘⟛烞砎åŊ뙌󂽌 [ 573.650113][T11487] binder: 11486:11487 ioctl 541b 0 returned -22 [ 573.659137][ T5168] usb 3-1: SerialNumber: syz [ 573.729229][T11304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.747463][ T5168] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 573.960641][ T45] usb 3-1: USB disconnect, device number 7 [ 574.009564][T11304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.284505][T11304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.389014][ T29] audit: type=1800 audit(1718676877.419:893): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 574.546750][ T29] audit: type=1804 audit(1718676877.559:894): pid=11494 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3570339977/syzkaller.OxUqOD/62/bus" dev="sda1" ino=1964 res=1 errno=0 [ 574.658090][T11492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11492 comm=syz-executor.4 [ 574.860659][T11492] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 574.872999][T11492] 1¥ûÀ: renamed from 60¥ûÀ [ 574.910434][T11492] A link change request failed with some changes committed already. Interface 61¥ûÀ may have been left with an inconsistent configuration, please check. [ 575.148379][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 575.371502][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.394975][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.431580][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.448386][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.475990][ T9] usb 3-1: config 0 descriptor?? [ 575.489313][T11338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.543135][T11338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 575.584518][T11338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 575.648696][T11338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 575.670349][T11508] random: crng reseeded on system resumption [ 575.886144][T11304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 575.919912][T11304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 575.950323][T11304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 575.987725][T11498] loop2: detected capacity change from 0 to 64 [ 576.002764][T11304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 576.119636][T11341] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 576.130887][T11341] Bluetooth: hci6: Injecting HCI hardware error event [ 576.144864][ T4480] Bluetooth: hci6: hardware error 0x00 [ 576.173261][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 576.199039][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 576.219773][ T9] usb 3-1: USB disconnect, device number 8 [ 576.290851][T11338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.424984][T11338] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.462490][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.469821][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.514117][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.521362][ T5192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.700247][T11304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.828027][T11304] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.913027][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.920295][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.991232][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.998464][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.251002][T11338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.427373][T11338] veth0_vlan: entered promiscuous mode [ 577.451053][T11537] loop2: detected capacity change from 0 to 8 [ 577.485056][T11338] veth1_vlan: entered promiscuous mode [ 577.578580][ T29] audit: type=1400 audit(1718676880.589:895): avc: denied { write } for pid=11538 comm="syz-executor.3" dev="sockfs" ino=34314 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 577.587106][T11338] veth0_macvtap: entered promiscuous mode [ 577.699660][T11338] veth1_macvtap: entered promiscuous mode [ 577.786925][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.813574][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.840240][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.865627][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.875716][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.893120][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.903122][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.913621][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.923728][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.934235][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.944103][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.961827][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.972039][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.984273][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.996649][T11338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.017744][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.102284][ T29] audit: type=1400 audit(1718676881.139:896): avc: denied { connect } for pid=11547 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.105576][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.160235][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.172923][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.185738][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.211658][ T4480] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 578.232100][ T29] audit: type=1400 audit(1718676881.189:897): avc: denied { write } for pid=11547 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.251979][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.266514][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.276802][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.292748][ T29] audit: type=1400 audit(1718676881.329:898): avc: denied { read } for pid=11547 comm="syz-executor.4" path="socket:[35101]" dev="sockfs" ino=35101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.336978][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.377604][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.408831][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.428259][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.439952][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.456465][T11556] loop3: detected capacity change from 0 to 2048 [ 578.462902][T11338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.462925][T11338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.465223][T11338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.488602][T11556] journal_path: Lookup failure for './file0' [ 578.499534][T11556] EXT4-fs: error: could not find journal device path [ 578.622838][T11338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.648392][T11338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.661494][T11338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.670759][T11338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.777150][T11304] veth0_vlan: entered promiscuous mode [ 578.885622][T11304] veth1_vlan: entered promiscuous mode [ 579.124846][T11304] veth0_macvtap: entered promiscuous mode [ 579.165553][T11304] veth1_macvtap: entered promiscuous mode [ 579.198718][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.206570][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.341021][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.355741][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.378349][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.410330][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.438320][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.458278][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.468132][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.528387][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.548287][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.578647][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.598395][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.621606][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.652199][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.688489][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.692660][T11575] loop2: detected capacity change from 0 to 8192 [ 579.725737][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.746566][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.751106][T11575] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 579.769459][T11304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.845707][T11564] loop3: detected capacity change from 0 to 32768 [ 579.846901][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.856389][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.890330][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.901981][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.939408][T11564] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 579.952452][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.978577][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.995304][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.021798][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.040934][T11564] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 580.066840][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.077631][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.097797][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.101772][T11564] XFS (loop3): Starting recovery (logdev: internal) [ 580.119732][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.143766][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.148828][T11564] XFS (loop3): Ending recovery (logdev: internal) [ 580.154444][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.175123][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.185776][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.214952][T11304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.225576][ T29] audit: type=1800 audit(1718676884.243:899): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 580.255666][T11304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.275569][T11304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.352853][T11304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.418502][T11304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.427251][T11304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.462082][T11304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.743413][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.772634][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.971316][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.215070][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.881783][ T5124] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 581.922752][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 582.291802][T11607] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 586.962026][T11637] loop1: detected capacity change from 0 to 32768 [ 587.037110][ T29] audit: type=1400 audit(1718676891.063:900): avc: denied { mount } for pid=11621 comm="syz-executor.0" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 587.233459][ T29] audit: type=1400 audit(1718676891.143:901): avc: denied { unmount } for pid=11304 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 587.244650][T11637] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 587.261952][T11637] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 587.277750][T11637] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 587.320053][ T5133] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 587.326942][ T5133] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 587.454545][ T5133] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 587.463865][ T5133] gfs2: fsid=syz:syz.0: jid=0: Done [ 587.469471][T11637] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 587.765526][T11644] loop2: detected capacity change from 0 to 4096 [ 587.878965][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 588.078907][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 588.102894][ T45] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 588.112371][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.121376][ T45] usb 4-1: Product: syz [ 588.126044][ T45] usb 4-1: Manufacturer: syz [ 588.131251][ T45] usb 4-1: SerialNumber: syz [ 588.139300][ T45] usb 4-1: config 0 descriptor?? [ 588.147543][ T45] usb-storage 4-1:0.0: USB Mass Storage device detected [ 588.370847][T11663] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 588.609321][ T4863] usb 4-1: USB disconnect, device number 3 [ 589.866271][T11674] loop4: detected capacity change from 0 to 256 [ 589.894928][T11674] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 589.934556][T11651] loop0: detected capacity change from 0 to 32768 [ 590.086132][T11651] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 590.093934][ T29] audit: type=1400 audit(1718676894.113:902): avc: denied { rename } for pid=11673 comm="syz-executor.4" name="file1" dev="loop4" ino=1048693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 590.193706][ T29] audit: type=1400 audit(1718676894.223:903): avc: denied { read } for pid=11673 comm="syz-executor.4" path="socket:[34560]" dev="sockfs" ino=34560 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 590.288314][ T784] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 590.315020][ T29] audit: type=1400 audit(1718676894.343:904): avc: denied { map } for pid=11673 comm="syz-executor.4" path="/root/syzkaller-testdir3570339977/syzkaller.OxUqOD/78/file0/blkio.bfq.io_wait_time_recursive" dev="loop4" ino=1048694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 590.432406][T11651] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 590.479379][ T784] usb 4-1: Using ep0 maxpacket: 8 [ 590.491859][ T784] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 590.505495][ T784] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 590.527184][T10491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.539781][ T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.561636][T11651] XFS (loop0): Starting recovery (logdev: internal) [ 590.573722][T10491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.655777][T11651] XFS (loop0): Ending recovery (logdev: internal) [ 590.831183][ T784] usb 4-1: string descriptor 0 read error: -71 [ 590.838831][T11304] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 590.887125][ T784] hub 4-1:32.0: USB hub found [ 590.909657][ T784] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 590.963917][T10491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.975866][T10491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.074196][T11678] loop1: detected capacity change from 0 to 32768 [ 591.157270][T11678] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11678) [ 591.168875][ T784] usb 4-1: USB disconnect, device number 4 [ 591.247503][T11678] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 591.278500][ T29] audit: type=1400 audit(1718676895.313:905): avc: denied { setopt } for pid=11689 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 591.305056][T11678] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 591.368362][T11678] BTRFS info (device loop1): using free-space-tree [ 591.409825][T10491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 591.448271][T10491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.705234][T11341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 591.722762][T11341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 591.733679][T11341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 591.744145][T11341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 591.758599][T11341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 591.766209][T11341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 592.476520][T11713] loop4: detected capacity change from 0 to 32768 [ 592.816546][T11713] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 592.825032][T11713] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 592.867810][T11713] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 592.881497][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 592.924304][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 592.924856][T10491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.974983][ T29] audit: type=1804 audit(1718676897.003:906): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2076954653/syzkaller.dQX9ou/4/bus/bus" dev="loop1" ino=264 res=1 errno=0 [ 592.998054][T10491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.310178][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 385ms [ 593.322443][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 593.327723][T11713] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 594.448229][T11341] Bluetooth: hci2: command tx timeout [ 595.007623][ T29] audit: type=1400 audit(1718676899.033:907): avc: denied { unlink } for pid=11338 comm="syz-executor.1" name="cpuset.effective_cpus" dev="loop1" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 595.054141][T11734] loop3: detected capacity change from 0 to 256 [ 595.090836][T11734] exfat: Bad value for 'uid' [ 595.125506][T10491] bridge_slave_1: left allmulticast mode [ 595.141870][T10491] bridge_slave_1: left promiscuous mode [ 595.147725][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.198873][T10491] bridge_slave_0: left allmulticast mode [ 595.225986][T10491] bridge_slave_0: left promiscuous mode [ 595.253773][T11338] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 595.268043][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.305742][T11734] loop3: detected capacity change from 0 to 64 [ 595.821550][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 596.496634][ T5192] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 596.530912][ T4480] Bluetooth: hci2: command tx timeout [ 596.998231][ T5192] usb 1-1: Using ep0 maxpacket: 16 [ 597.123293][ T5192] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 597.144939][ T5192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.177463][ T5192] usb 1-1: Product: syz [ 597.187609][ T5192] usb 1-1: Manufacturer: syz [ 597.203788][ T5192] usb 1-1: SerialNumber: syz [ 597.273130][ T5192] usb 1-1: config 0 descriptor?? [ 597.292340][ T5192] usb-storage 1-1:0.0: USB Mass Storage device detected [ 597.532447][ T5192] usb 1-1: USB disconnect, device number 6 [ 598.170285][T10491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.189156][T10491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.202203][T10491] bond0 (unregistering): Released all slaves [ 598.428850][T10491] tipc: Left network mode [ 598.477068][T11773] loop3: detected capacity change from 0 to 256 [ 598.602179][T11773] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 598.607559][ T4480] Bluetooth: hci2: command tx timeout [ 598.741536][T11709] chnl_net:caif_netlink_parms(): no params data found [ 600.170337][T11792] kAFS: unparsable volume name [ 600.189057][T10491] hsr_slave_0: left promiscuous mode [ 600.258821][T10491] hsr_slave_1: left promiscuous mode [ 600.280228][T10491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.287731][T10491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.342949][T10491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.355856][T10491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.369319][ T29] audit: type=1400 audit(1718676904.403:908): avc: denied { setattr } for pid=11775 comm="syz-executor.0" name="TIPC" dev="sockfs" ino=34727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 600.455444][T10491] veth1_macvtap: left promiscuous mode [ 600.474321][T10491] veth0_macvtap: left promiscuous mode [ 600.486698][T10491] veth1_vlan: left promiscuous mode [ 600.679064][ T4480] Bluetooth: hci2: command tx timeout [ 600.729451][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 600.958582][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 600.986062][ T45] usb 2-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 601.007743][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.032103][ T45] usb 2-1: Product: syz [ 601.044562][ T45] usb 2-1: Manufacturer: syz [ 601.055207][ T45] usb 2-1: SerialNumber: syz [ 601.065900][ T45] usb 2-1: config 0 descriptor?? [ 601.082608][ T45] usb-storage 2-1:0.0: USB Mass Storage device detected [ 601.330870][ T25] usb 2-1: USB disconnect, device number 5 [ 602.127827][T11826] loop1: detected capacity change from 0 to 8192 [ 602.165203][T11826] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 602.263569][T10491] team0 (unregistering): Port device team_slave_1 removed [ 602.393131][T10491] team0 (unregistering): Port device team_slave_0 removed [ 603.401253][T11709] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.421618][T11709] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.458057][T11709] bridge_slave_0: entered allmulticast mode [ 603.490289][T11709] bridge_slave_0: entered promiscuous mode [ 603.569264][T11709] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.584816][T11709] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.618637][T11709] bridge_slave_1: entered allmulticast mode [ 603.648378][T11709] bridge_slave_1: entered promiscuous mode [ 603.898555][T11709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.971743][T11709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.712326][T11849] loop1: detected capacity change from 0 to 32768 [ 604.941981][T11849] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 604.950580][T11849] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 604.975140][T11849] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 604.993182][ T5160] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 605.121384][ T5160] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 605.358372][ T29] audit: type=1400 audit(1718676909.373:909): avc: denied { setopt } for pid=11853 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 605.380922][T11709] team0: Port device team_slave_0 added [ 605.421620][T11709] team0: Port device team_slave_1 added [ 605.446383][ T5160] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 324ms [ 605.474982][ T5160] gfs2: fsid=syz:syz.0: jid=0: Done [ 605.492307][T11849] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 605.635922][T11709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.687938][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.747182][T11709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.787083][T11709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.794262][T11709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.826593][T11709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.016601][T11878] loop4: detected capacity change from 0 to 64 [ 607.044825][T11878] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 607.081714][T11879] loop3: detected capacity change from 0 to 1024 [ 607.118545][T11879] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 607.221584][T11879] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 607.239163][T11879] EXT4-fs (loop3): orphan cleanup on readonly fs [ 607.303193][T11709] hsr_slave_0: entered promiscuous mode [ 607.319128][T11879] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 607.478460][T11879] EXT4-fs (loop3): 1 orphan inode deleted [ 607.486188][T11879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.519188][T11709] hsr_slave_1: entered promiscuous mode [ 607.548685][T11709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.580023][T11709] Cannot create hsr debugfs directory [ 608.679861][T11893] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 608.917363][T11904] loop0: detected capacity change from 0 to 256 [ 608.929079][T11904] exfat: Bad value for 'uid' [ 609.080094][T11904] loop0: detected capacity change from 0 to 64 [ 609.428960][ T45] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 609.460151][ T5124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.647426][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 609.721725][ T45] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 609.762318][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.793260][ T45] usb 2-1: Product: syz [ 609.797465][ T45] usb 2-1: Manufacturer: syz [ 609.830697][ T45] usb 2-1: SerialNumber: syz [ 609.845338][ T45] usb 2-1: config 0 descriptor?? [ 609.889790][ T45] hub 2-1:0.0: bad descriptor, ignoring hub [ 609.905308][ T45] hub 2-1:0.0: probe with driver hub failed with error -5 [ 609.940583][T11709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 609.972855][T11709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 610.000356][T11709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 610.034861][T11709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 610.539320][T11709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.615239][T11709] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.698718][ T5160] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 610.743435][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.750687][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.799915][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.807135][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.856144][T11925] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 611.073639][T11933] loop3: detected capacity change from 0 to 256 [ 611.089037][T11709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 611.095852][T11935] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 611.109556][T11709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.162544][T11933] exfat: Deprecated parameter 'namecase' [ 611.245783][T11933] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 611.430523][ T5168] usb 2-1: USB disconnect, device number 6 [ 611.679797][ T29] audit: type=1400 audit(1718676915.703:910): avc: denied { relabelfrom } for pid=11953 comm="syz-executor.4" name="" dev="pipefs" ino=37371 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 611.706864][T11954] SELinux: Context system_u: is not valid (left unmapped). [ 611.754513][ T29] audit: type=1400 audit(1718676915.773:911): avc: denied { relabelto } for pid=11953 comm="syz-executor.4" name="" dev="pipefs" ino=37371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:" [ 611.787536][T11709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.937229][ T29] audit: type=1400 audit(1718676915.963:912): avc: denied { mounton } for pid=11961 comm="syz-executor.3" path="/root/syzkaller-testdir1368549900/syzkaller.d84D9R/481/file0" dev="sda1" ino=1964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=fifo_file permissive=1 [ 612.040246][T11709] veth0_vlan: entered promiscuous mode [ 612.092891][T11709] veth1_vlan: entered promiscuous mode [ 612.149609][T11964] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 612.236568][T11709] veth0_macvtap: entered promiscuous mode [ 612.293746][T11709] veth1_macvtap: entered promiscuous mode [ 612.378892][T11973] [U] [ 612.382355][T11973] [U] [ 612.385183][T11973] [U] [ 612.387919][T11973] [U] [ 612.401410][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.426170][T11973] [U] [ 612.428986][T11973] [U] [ 612.431723][T11973] [U] [ 612.434470][T11973] [U] [ 612.441350][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.465603][T11973] [U] [ 612.468370][T11973] [U] [ 612.470572][T11969] loop4: detected capacity change from 0 to 4096 [ 612.471080][T11973] [U] [ 612.490693][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.511807][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.545467][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.557442][T11971] [U] [ 612.559956][T11969] ntfs3: loop4: Failed to initialize $Secure::$SII (-22). [ 612.586950][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.588369][T11969] ntfs3: loop4: Failed to initialize $Secure (-22). [ 612.619843][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.658297][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.691975][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.724664][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.751479][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.793464][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.824960][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.845131][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.878381][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.898951][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.921410][T11709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.032207][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.056886][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.095061][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.142875][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.178347][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.210597][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.237029][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.268561][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.288262][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.325328][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.341749][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.366163][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.391787][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.429725][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.451679][T11709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.473984][T11709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.532427][T11709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.632909][T11709] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.666013][T11709] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.685311][T11709] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.705728][T11709] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.853933][T12005] loop4: detected capacity change from 0 to 512 [ 613.876399][T12005] EXT4-fs: Ignoring removed nobh option [ 613.917212][T12005] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 613.984883][T12007] [U] [ 613.987648][T12007] [U] [ 613.990374][T12007] [U] [ 613.993102][T12007] [U] [ 614.008704][ T5168] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 614.059470][T12007] [U] [ 614.062233][T12007] [U] [ 614.064972][T12007] [U] [ 614.067703][T12007] [U] [ 614.090015][T10491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.098676][T12007] [U] [ 614.101422][T12007] [U] [ 614.104128][T12007] [U] [ 614.124455][T12006] [U] [ 614.140123][ T29] audit: type=1400 audit(1718676918.153:913): avc: denied { mount } for pid=12001 comm="syz-executor.4" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 614.160315][T10491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.190690][ T29] audit: type=1400 audit(1718676918.163:914): avc: denied { search } for pid=12001 comm="syz-executor.4" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.260588][ T5168] usb 4-1: Using ep0 maxpacket: 32 [ 614.338246][ T5168] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 614.347451][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.368969][ T29] audit: type=1400 audit(1718676918.213:915): avc: denied { read } for pid=12001 comm="syz-executor.4" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.419352][T12005] loop4: detected capacity change from 0 to 1024 [ 614.437549][ T5168] usb 4-1: Product: syz [ 614.443931][ T29] audit: type=1400 audit(1718676918.213:916): avc: denied { open } for pid=12001 comm="syz-executor.4" path="/root/syzkaller-testdir3570339977/syzkaller.OxUqOD/107/file0" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.462591][T12011] loop1: detected capacity change from 0 to 128 [ 614.472122][ T2796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.478897][ T5168] usb 4-1: Manufacturer: syz [ 614.499807][ T5168] usb 4-1: SerialNumber: syz [ 614.522445][ T2796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.524267][ T5168] usb 4-1: config 0 descriptor?? [ 614.589561][ T5168] hub 4-1:0.0: bad descriptor, ignoring hub [ 614.595950][ T29] audit: type=1400 audit(1718676918.443:917): avc: denied { write } for pid=12010 comm="syz-executor.1" name="usbmon0" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 614.616096][ T5168] hub 4-1:0.0: probe with driver hub failed with error -5 [ 614.727934][ T29] audit: type=1400 audit(1718676918.583:918): avc: denied { write } for pid=12001 comm="syz-executor.4" name="/" dev="configfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 614.859202][ T29] audit: type=1400 audit(1718676918.833:919): avc: denied { add_name } for pid=12001 comm="syz-executor.4" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 615.214722][T12022] loop0: detected capacity change from 0 to 4096 [ 615.295394][T12022] ntfs3: loop0: Failed to initialize $Secure::$SII (-22). [ 615.315526][T12022] ntfs3: loop0: Failed to initialize $Secure (-22). [ 615.402119][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.551355][ T5192] usb 4-1: USB disconnect, device number 5 [ 615.945064][T12047] loop0: detected capacity change from 0 to 2048 [ 615.969021][T12047] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 616.007063][T12052] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 616.166382][T12053] loop4: detected capacity change from 0 to 512 [ 616.206327][T12053] EXT4-fs: Ignoring removed nobh option [ 616.225873][T12053] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 616.447813][T12055] loop0: detected capacity change from 0 to 512 [ 616.519808][T12055] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 616.544819][T12053] loop4: detected capacity change from 0 to 1024 [ 616.558012][ T2796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.943552][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 616.943571][ T29] audit: type=1400 audit(1718676920.963:927): avc: denied { execmem } for pid=12058 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 616.986533][ T2796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.075075][T12062] loop1: detected capacity change from 0 to 4096 [ 617.173010][T12062] ntfs3: loop1: Failed to initialize $Secure::$SII (-22). [ 617.290787][ T2796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.304908][T12062] ntfs3: loop1: Failed to initialize $Secure (-22). [ 617.384364][T12067] fuse: Bad value for 'fd' [ 617.502437][ T2796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.582079][T12071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.688800][T11341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 617.700907][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.717098][T11341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 617.725830][ T29] audit: type=1400 audit(1718676921.743:928): avc: denied { getopt } for pid=12073 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 617.751083][T11341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 617.785447][T11341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 617.804637][T11341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 617.812330][T11341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 617.967086][ T5160] IPVS: starting estimator thread 0... [ 618.011591][ T2796] bridge_slave_1: left allmulticast mode [ 618.017280][ T2796] bridge_slave_1: left promiscuous mode [ 618.037308][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.088560][T12082] IPVS: using max 31 ests per chain, 74400 per kthread [ 618.104657][ T2796] bridge_slave_0: left allmulticast mode [ 618.114051][ T2796] bridge_slave_0: left promiscuous mode [ 618.129872][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.178701][ T29] audit: type=1400 audit(1718676922.213:929): avc: denied { bind } for pid=12085 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.264571][ T29] audit: type=1400 audit(1718676922.213:930): avc: denied { write } for pid=12085 comm="syz-executor.4" path="socket:[37971]" dev="sockfs" ino=37971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 618.441903][T12088] input: syz0 as /devices/virtual/input/input16 [ 618.483208][T12088] input: failed to attach handler leds to device input16, error: -6 [ 618.487264][T12092] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 619.500963][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.516222][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.528650][ T2796] bond0 (unregistering): Released all slaves [ 619.577947][T12101] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 619.907774][ T4480] Bluetooth: hci2: command tx timeout [ 620.060991][T12122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 620.075009][T12122] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 620.159450][T12123] input: syz0 as /devices/virtual/input/input17 [ 620.170345][T12123] input: failed to attach handler leds to device input17, error: -6 [ 620.215336][T12123] x_tables: ip_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 620.558031][ T5160] IPVS: starting estimator thread 0... [ 620.668324][T12127] IPVS: using max 21 ests per chain, 50400 per kthread [ 620.702387][ T2796] hsr_slave_0: left promiscuous mode [ 620.716048][T12111] loop4: detected capacity change from 0 to 32768 [ 620.724020][ T2796] hsr_slave_1: left promiscuous mode [ 620.733029][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.752420][T12111] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12111) [ 620.782175][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.799314][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.847844][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.861880][T12111] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 620.876054][T12111] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 620.894087][T12111] BTRFS info (device loop4): using free-space-tree [ 620.925582][ T2796] veth1_macvtap: left promiscuous mode [ 620.931396][ T2796] veth0_macvtap: left promiscuous mode [ 620.937173][ T2796] veth1_vlan: left promiscuous mode [ 620.942703][ T2796] veth0_vlan: left promiscuous mode [ 621.409630][ T29] audit: type=1804 audit(1718676925.393:931): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1832665172/syzkaller.oDQsAy/54/bus" dev="sda1" ino=1968 res=1 errno=0 [ 622.008339][ T4480] Bluetooth: hci2: command tx timeout [ 623.375328][T10451] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 624.040480][ T4480] Bluetooth: hci2: command tx timeout [ 625.022586][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.029217][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.386858][ T29] audit: type=1804 audit(1718676929.413:932): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1832665172/syzkaller.oDQsAy/59/file0" dev="sda1" ino=1973 res=1 errno=0 [ 625.606547][ T29] audit: type=1400 audit(1718676929.643:933): avc: denied { create } for pid=12183 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 625.648244][ T29] audit: type=1400 audit(1718676929.643:934): avc: denied { write } for pid=12183 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 625.691015][ T29] audit: type=1400 audit(1718676929.643:935): avc: denied { nlmsg_write } for pid=12183 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 626.036481][ T2796] team0 (unregistering): Port device team_slave_1 removed [ 626.135152][ T4480] Bluetooth: hci2: command tx timeout [ 626.168778][ T2796] team0 (unregistering): Port device team_slave_0 removed [ 627.286736][T12074] chnl_net:caif_netlink_parms(): no params data found [ 628.140529][ T29] audit: type=1400 audit(1718676932.163:936): avc: denied { ioctl } for pid=12205 comm="syz-executor.3" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x5323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 628.344878][T12074] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.388419][T12074] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.405664][T12074] bridge_slave_0: entered allmulticast mode [ 628.416118][T12074] bridge_slave_0: entered promiscuous mode [ 628.437691][T12074] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.492668][T12074] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.508412][T12074] bridge_slave_1: entered allmulticast mode [ 628.552031][T12074] bridge_slave_1: entered promiscuous mode [ 628.725565][T12074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.831012][T12074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.896934][T12230] loop3: detected capacity change from 0 to 1024 [ 628.998669][T12074] team0: Port device team_slave_0 added [ 629.032504][T12074] team0: Port device team_slave_1 added [ 629.106099][T12074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.123458][T12074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.166376][T12074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.200420][T12074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.242694][T12074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.302263][T12195] loop4: detected capacity change from 0 to 32768 [ 629.316527][T12074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.386544][T12195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12195) [ 629.479491][T12195] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 629.510455][T12195] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 629.539830][T12074] hsr_slave_0: entered promiscuous mode [ 629.548374][T12195] BTRFS info (device loop4): using free-space-tree [ 629.562477][T12074] hsr_slave_1: entered promiscuous mode [ 629.735607][T12074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.755193][T12074] Cannot create hsr debugfs directory [ 629.986524][ T29] audit: type=1400 audit(1718676933.933:937): avc: denied { write } for pid=12242 comm="syz-executor.3" name="icmp6" dev="proc" ino=4026533241 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 630.272801][T12195] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 630.317441][T12195] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 630.704681][T12264] loop0: detected capacity change from 0 to 1024 [ 630.739668][T12195] BTRFS error (device loop4): open_ctree failed [ 630.778056][ T4480] Bluetooth: hci7: command tx timeout [ 630.934210][T12268] loop3: detected capacity change from 0 to 64 [ 631.635064][ T29] audit: type=1400 audit(1718676935.653:938): avc: denied { read } for pid=12281 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 631.643710][T12238] loop1: detected capacity change from 0 to 32768 [ 631.685874][T12238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12238) [ 631.705839][T12282] loop3: detected capacity change from 0 to 256 [ 631.730834][T12238] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 631.744955][T12238] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 631.765546][T12238] BTRFS info (device loop1): using free-space-tree [ 632.066162][T12074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 632.100981][T12074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 632.148538][T12074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.202301][T12074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.309001][T12238] loop1: detected capacity change from 32768 to 0 [ 632.328740][ T1103] loop: Write error at byte offset 9223372036860129279, length 4096. [ 632.358157][ C1] I/O error, dev loop1, sector 10456 op 0x1:(WRITE) flags 0x800 phys_seg 5 prio class 0 [ 632.368368][ C1] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 632.384950][T12313] loop4: detected capacity change from 0 to 64 [ 632.641877][ T29] audit: type=1400 audit(1718676936.623:939): avc: denied { unlink } for pid=11338 comm="syz-executor.1" name="file0" dev="loop1" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 632.725466][T12074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.987555][ T29] audit: type=1804 audit(1718676936.973:940): pid=12319 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1832665172/syzkaller.oDQsAy/74/bus" dev="sda1" ino=1952 res=1 errno=0 [ 633.543510][ T46] kworker/u8:3: attempt to access beyond end of device [ 633.543510][ T46] loop1: rw=67112961, sector=10440, nr_sectors = 8 limit=0 [ 633.595353][T12074] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.644333][ T46] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 633.681182][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.688579][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.688593][ T46] kworker/u8:3: attempt to access beyond end of device [ 633.688593][ T46] loop1: rw=67112961, sector=10456, nr_sectors = 8 limit=0 [ 633.741214][ T46] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 633.774337][ T46] kworker/u8:3: attempt to access beyond end of device [ 633.774337][ T46] loop1: rw=67112961, sector=10464, nr_sectors = 8 limit=0 [ 633.783658][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.795707][ T5114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.826166][ T46] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 633.857075][T11338] BTRFS error (device loop1 state A): Transaction aborted (error -5) [ 633.910609][T11338] BTRFS: error (device loop1 state A) in __btrfs_free_extent:3222: errno=-5 IO failure [ 633.941107][T11338] BTRFS info (device loop1 state EA): forced readonly [ 633.949081][T11338] BTRFS error (device loop1 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5 [ 633.967221][T12074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 633.999995][T12282] loop3: detected capacity change from 0 to 32768 [ 634.017750][T11338] BTRFS: error (device loop1 state EA) in btrfs_run_delayed_refs:2211: errno=-5 IO failure [ 634.050412][T11338] BTRFS info (device loop1 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 634.111669][T12327] loop0: detected capacity change from 0 to 4096 [ 634.122312][T12327] ntfs3: loop0: Primary boot: invalid sectors per cluster 3. [ 634.139739][T12282] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 634.216305][T12327] ntfs3: loop0: try to read out of volume at offset 0x1ffe00 [ 634.379652][T12282] XFS (loop3): Ending clean mount [ 634.511859][ T29] audit: type=1400 audit(1718676938.513:941): avc: denied { read } for pid=12279 comm="syz-executor.3" name="file1" dev="loop3" ino=5766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 634.601614][ T29] audit: type=1400 audit(1718676938.523:942): avc: denied { open } for pid=12279 comm="syz-executor.3" path="/root/syzkaller-testdir1368549900/syzkaller.d84D9R/507/file1/file0/file1" dev="loop3" ino=5766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 634.650086][ T29] audit: type=1400 audit(1718676938.573:943): avc: denied { ioctl } for pid=12279 comm="syz-executor.3" path="/root/syzkaller-testdir1368549900/syzkaller.d84D9R/507/file1/file0/file1" dev="loop3" ino=5766 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 634.712335][ T5124] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 634.767214][T12321] loop4: detected capacity change from 0 to 32768 [ 634.820726][T12321] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12321) [ 634.901903][T12321] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 634.934378][T12074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.952295][T12321] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 634.989060][T12321] BTRFS info (device loop4): using free-space-tree [ 635.213712][T12074] veth0_vlan: entered promiscuous mode [ 635.282922][T12074] veth1_vlan: entered promiscuous mode [ 635.487253][T12074] veth0_macvtap: entered promiscuous mode [ 635.564947][T12074] veth1_macvtap: entered promiscuous mode [ 635.682304][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.707648][T12365] loop1: detected capacity change from 0 to 4096 [ 635.718681][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.783409][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.796425][T12373] loop3: detected capacity change from 0 to 512 [ 635.813551][T12373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.825016][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.854277][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.884667][T12375] loop0: detected capacity change from 0 to 16 [ 635.893566][T12373] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 635.901892][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.936544][T12373] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 635.949641][T12375] erofs: Unknown parameter '18446744073709551615ÿÿÿÿÿÿ' [ 635.957598][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.980805][T12373] EXT4-fs (loop3): 1 truncate cleaned up [ 635.992256][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.003269][T12373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.027590][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.061097][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.095466][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.116461][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.138208][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.155585][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.165680][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.176164][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.188792][T12074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.200279][T10451] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 636.210226][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.213681][ T5124] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.233482][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.246145][ T29] audit: type=1400 audit(1718676940.263:944): avc: denied { accept } for pid=12374 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 636.271914][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.322343][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.335526][T12375] 9pnet: Could not find request transport: xen [ 636.336955][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.353417][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.363677][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.374596][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.384526][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.395093][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.405027][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.415502][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.425379][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.436368][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.447622][T12074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.459210][T12074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.471401][T12074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.493170][T12074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.504206][T12074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.513051][T12074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.523264][T12074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.000644][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.028557][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.404772][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.463183][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.113252][T12417] loop4: detected capacity change from 0 to 16 [ 638.140601][T12417] erofs: Unknown parameter '00000000000000016832' [ 638.222424][ T29] audit: type=1326 audit(1718676942.253:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12418 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd909c7cf29 code=0x0 [ 638.266772][T12417] 9pnet: Could not find request transport: xen [ 639.274381][T11341] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.287555][T12431] use of bytesused == 0 is deprecated and will be removed in the future, [ 639.299985][T11341] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.308301][T12431] use the actual size instead. [ 639.322193][T11341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.330957][T11341] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.350906][T11341] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 639.360985][T11341] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 639.566272][ T2796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.667388][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 639.690552][T12436] tipc: Started in network mode [ 639.697066][T12436] tipc: Node identity 6, cluster identity 4711 [ 639.723290][T12436] tipc: Node number set to 6 [ 639.768392][ T5160] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 639.903053][ T2796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.938335][ T5160] usb 5-1: device descriptor read/64, error -71 [ 640.015467][T12447] loop1: detected capacity change from 0 to 256 [ 640.057994][T12447] exfat: Deprecated parameter 'utf8' [ 640.094785][T12447] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 640.151650][ T2796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.308387][ T5160] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 640.316971][T11341] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 640.346450][T11341] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 640.356333][T11341] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 640.391548][T11341] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 640.408392][T11341] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 640.415961][T11341] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 640.497481][ T2796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.548609][ T5160] usb 5-1: device descriptor read/64, error -71 [ 640.685566][ T5160] usb usb5-port1: attempt power cycle [ 641.098274][ T5160] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 641.170282][ T5160] usb 5-1: device descriptor read/8, error -71 [ 641.251538][ T2796] bridge_slave_1: left allmulticast mode [ 641.257516][ T2796] bridge_slave_1: left promiscuous mode [ 641.268590][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.290645][ T2796] bridge_slave_0: left allmulticast mode [ 641.296312][ T2796] bridge_slave_0: left promiscuous mode [ 641.336545][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.398967][ T4480] Bluetooth: hci2: command tx timeout [ 641.460550][ T5160] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 641.519345][ T5160] usb 5-1: device descriptor read/8, error -71 [ 641.680253][ T5160] usb usb5-port1: unable to enumerate USB device [ 642.139023][T12469] loop1: detected capacity change from 0 to 256 [ 642.161530][T12469] exfat: Unknown parameter 'dma]¬æ€übPèÔóÛ{1sk' [ 642.648619][ T4480] Bluetooth: hci7: command tx timeout [ 642.691028][T12461] loop3: detected capacity change from 0 to 32768 [ 642.816915][T12461] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 642.816915][T12461] [ 642.995702][T12473] loop4: detected capacity change from 0 to 256 [ 643.385346][T12479] loop3: detected capacity change from 0 to 1024 [ 643.401825][T12479] hfsplus: uid requires an argument [ 643.407127][T12479] hfsplus: unable to parse mount options [ 643.478955][ T4480] Bluetooth: hci2: command tx timeout [ 643.712844][T12485] fuse: Bad value for 'user_id' [ 643.760396][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.783653][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.807877][ T2796] bond0 (unregistering): Released all slaves [ 643.992346][ T4863] kernel write not supported for file /media0 (pid: 4863 comm: kworker/0:3) [ 644.171019][ T29] audit: type=1400 audit(1718676948.203:946): avc: denied { bind } for pid=12490 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 644.342597][T12433] chnl_net:caif_netlink_parms(): no params data found [ 644.357833][T12494] can0: slcan on ptm0. [ 644.678591][ T4480] Bluetooth: hci7: command tx timeout [ 644.943581][T12502] loop4: detected capacity change from 0 to 16 [ 644.984116][T12502] erofs: Unknown parameter '00000000000000016832' [ 645.037360][ T2796] hsr_slave_0: left promiscuous mode [ 645.055187][ T2796] hsr_slave_1: left promiscuous mode [ 645.062043][T12490] can0 (unregistered): slcan off ptm0. [ 645.072444][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.097262][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 645.142429][ T2796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.153708][ T2796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.179833][T12506] loop3: detected capacity change from 0 to 8 [ 645.259199][ T2796] veth1_macvtap: left promiscuous mode [ 645.265311][ T2796] veth0_macvtap: left promiscuous mode [ 645.265396][T12502] 9pnet: Could not find request transport: xen [ 645.271241][ T2796] veth1_vlan: left promiscuous mode [ 645.283370][ T2796] veth0_vlan: left promiscuous mode [ 645.374157][T12497] loop1: detected capacity change from 0 to 32768 [ 645.424264][T12497] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 645.424264][T12497] [ 645.568604][ T4480] Bluetooth: hci2: command tx timeout [ 646.150436][T12518] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 646.758543][ T4480] Bluetooth: hci7: command tx timeout [ 646.799037][T12516] loop4: detected capacity change from 0 to 32768 [ 646.862775][ T29] audit: type=1400 audit(1718676950.893:947): avc: denied { write } for pid=12515 comm="syz-executor.4" name="file1" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 646.965005][ T29] audit: type=1400 audit(1718676950.963:948): avc: denied { setattr } for pid=12515 comm="syz-executor.4" name="file1" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 647.641025][ T4480] Bluetooth: hci2: command tx timeout [ 647.767971][ T2796] team0 (unregistering): Port device team_slave_1 removed [ 647.875408][ T2796] team0 (unregistering): Port device team_slave_0 removed [ 648.861438][ T4480] Bluetooth: hci7: command tx timeout [ 650.015178][T12433] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.029487][T12433] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.048432][T12433] bridge_slave_0: entered allmulticast mode [ 650.090267][T12433] bridge_slave_0: entered promiscuous mode [ 650.114333][T12448] chnl_net:caif_netlink_parms(): no params data found [ 650.154166][T12433] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.163595][T12433] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.175426][T12433] bridge_slave_1: entered allmulticast mode [ 650.196191][T12433] bridge_slave_1: entered promiscuous mode [ 650.414200][T12433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.499051][T12433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.620096][T12433] team0: Port device team_slave_0 added [ 650.738298][T12433] team0: Port device team_slave_1 added [ 650.982176][T12448] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.019209][T12448] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.026569][T12448] bridge_slave_0: entered allmulticast mode [ 651.111927][T12448] bridge_slave_0: entered promiscuous mode [ 651.147051][T12448] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.162856][T12448] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.173349][T12448] bridge_slave_1: entered allmulticast mode [ 651.193171][T12448] bridge_slave_1: entered promiscuous mode [ 651.200489][T12543] loop4: detected capacity change from 0 to 32768 [ 651.230651][T12433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.269921][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.322481][T12433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.477082][T12433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.507493][T12433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.535144][T12433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.639676][T12448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.835104][T12448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.086703][T12553] loop3: detected capacity change from 0 to 32768 [ 653.238566][T12571] loop4: detected capacity change from 0 to 256 [ 653.257887][T12571] exfat: Unknown parameter 'dma]¬æ€übPèÔóÛ{1sk' [ 656.451277][T12553] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop3": -EINTR [ 656.601139][ T2796] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.716375][T12433] hsr_slave_0: entered promiscuous mode [ 656.730306][T12433] hsr_slave_1: entered promiscuous mode [ 656.744665][T12433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 656.765591][T12433] Cannot create hsr debugfs directory [ 656.780720][T12574] loop1: detected capacity change from 0 to 512 [ 656.806425][T12574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 656.948321][T12574] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 656.966710][T12574] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 657.000264][T12574] EXT4-fs (loop1): 1 truncate cleaned up [ 657.007927][T12574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.065945][T12580] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 657.081594][ T2796] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.121694][T12448] team0: Port device team_slave_0 added [ 657.201649][ T2796] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.263474][T12448] team0: Port device team_slave_1 added [ 657.282795][T11338] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.466779][ T2796] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.614962][T12448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.637647][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.668328][T12448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.699795][T12448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.709088][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.751651][ T29] audit: type=1804 audit(1718676961.733:949): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2076954653/syzkaller.dQX9ou/60/bus" dev="sda1" ino=1952 res=1 errno=0 [ 657.950758][T12448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.972703][T12448] hsr_slave_0: entered promiscuous mode [ 658.988805][T12448] hsr_slave_1: entered promiscuous mode [ 658.996842][T12448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 659.008503][T12448] Cannot create hsr debugfs directory [ 659.433627][T12608] loop1: detected capacity change from 0 to 256 [ 659.441986][T12608] exfat: Unknown parameter 'dma]¬æ€übPèÔóÛ{1sk' [ 662.291190][ T2796] bridge_slave_1: left allmulticast mode [ 662.340467][ T2796] bridge_slave_1: left promiscuous mode [ 662.545234][ T2796] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.614196][ T2796] bridge_slave_0: left allmulticast mode [ 662.632586][ T2796] bridge_slave_0: left promiscuous mode [ 662.659210][ T2796] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.671893][T12620] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 662.880184][T12624] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 662.898308][T12624] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 664.322610][ T29] audit: type=1804 audit(1718676968.343:950): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1368549900/syzkaller.d84D9R/535/bus" dev="sda1" ino=1958 res=1 errno=0 [ 664.448091][T12637] loop3: detected capacity change from 0 to 8 [ 664.474999][T12637] squashfs image failed sanity check [ 664.568029][ T2796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.589044][ T29] audit: type=1400 audit(1718676968.593:951): avc: denied { mount } for pid=12636 comm="syz-executor.3" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 664.592665][T12637] kAFS: No cell specified [ 664.620995][ T2796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.626503][ T29] audit: type=1400 audit(1718676968.623:952): avc: denied { mounton } for pid=12636 comm="syz-executor.3" path="/root/syzkaller-testdir1368549900/syzkaller.d84D9R/536/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 664.660483][ T2796] bond0 (unregistering): Released all slaves [ 664.673594][T12637] loop3: detected capacity change from 0 to 2048 [ 665.066946][T12637] loop3: detected capacity change from 0 to 128 [ 665.202935][ T29] audit: type=1400 audit(1718676969.223:953): avc: denied { unmount } for pid=5124 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 665.254021][T12649] loop4: detected capacity change from 0 to 256 [ 665.286332][T12649] exfat: Deprecated parameter 'utf8' [ 665.298361][T12649] exfat: Deprecated parameter 'utf8' [ 665.311941][T12649] exfat: Deprecated parameter 'utf8' [ 665.317600][T12649] exfat: Deprecated parameter 'utf8' [ 665.337359][T12649] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 665.849093][T12654] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 665.878384][T12654] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 666.031062][T12657] loop4: detected capacity change from 0 to 256 [ 666.040849][T12657] exfat: Deprecated parameter 'namecase' [ 666.050234][T11341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.067883][T11341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.078841][T12657] exfat: Deprecated parameter 'utf8' [ 666.088537][T11341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.099607][T11341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.108008][T11341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 666.113244][T12657] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 666.152947][T11341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.787725][T12664] loop4: detected capacity change from 0 to 2048 [ 666.818423][T12664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 666.859167][ T29] audit: type=1800 audit(1718676970.883:954): pid=12664 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 668.666959][ T4480] Bluetooth: hci4: command tx timeout [ 670.679085][ T4480] Bluetooth: hci4: command tx timeout [ 672.769049][ T4480] Bluetooth: hci4: command tx timeout [ 674.839035][ T4480] Bluetooth: hci4: command tx timeout [ 683.409038][ T4480] Bluetooth: hci5: command 0x0406 tx timeout [ 686.444933][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.451907][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.582770][ T4480] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 695.596655][ T4480] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 695.608031][ T4480] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 695.623908][ T4480] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 695.645845][ T4480] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 695.657072][ T4480] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 697.718964][T11341] Bluetooth: hci8: command tx timeout [ 698.202066][ T4480] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 698.221117][ T4480] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 698.232345][ T4480] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 698.249638][ T4480] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 698.257889][ T4480] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 698.267290][ T4480] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 699.798706][ T4480] Bluetooth: hci8: command tx timeout [ 700.368253][ T4480] Bluetooth: hci9: command tx timeout [ 701.878488][ T4480] Bluetooth: hci8: command tx timeout [ 702.445856][ T4480] Bluetooth: hci9: command tx timeout [ 703.492823][T11341] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 703.514845][T11341] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 703.538449][T11341] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 703.551218][T11341] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 703.561937][T11341] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 703.598428][T11341] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 703.968511][ T4480] Bluetooth: hci8: command tx timeout [ 704.528593][ T4480] Bluetooth: hci9: command tx timeout [ 705.060125][T11341] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 705.075168][T11341] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 705.089134][T11341] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 705.101076][T11341] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 705.109351][T11341] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 705.119629][T11341] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 705.638681][T11341] Bluetooth: hci10: command tx timeout [ 706.608876][T11341] Bluetooth: hci9: command tx timeout [ 707.159169][T11341] Bluetooth: hci11: command tx timeout [ 707.718518][T11341] Bluetooth: hci10: command tx timeout [ 709.239200][T11341] Bluetooth: hci11: command tx timeout [ 709.798952][T11341] Bluetooth: hci10: command tx timeout [ 711.328914][T11341] Bluetooth: hci11: command tx timeout [ 711.889809][T11341] Bluetooth: hci10: command tx timeout [ 713.401997][T11341] Bluetooth: hci11: command tx timeout [ 730.977603][ T4480] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 730.999336][ T4480] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 731.012081][ T4480] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 731.026035][ T4480] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 731.034239][ T4480] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 731.043365][ T4480] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 733.078805][ T4480] Bluetooth: hci12: command tx timeout [ 735.158517][ T4480] Bluetooth: hci12: command tx timeout [ 737.238535][ T4480] Bluetooth: hci12: command tx timeout [ 739.318554][ T4480] Bluetooth: hci12: command tx timeout [ 747.885010][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.891714][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.696544][T11341] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 760.721521][T11341] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 760.733141][T11341] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 760.742409][T11341] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 760.750709][T11341] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 760.774950][T11341] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 762.839221][T11341] Bluetooth: hci13: command tx timeout [ 763.230026][ T4480] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 763.251700][ T4480] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 763.262080][T12701] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 763.279686][T12701] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 763.287738][T12701] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 763.303210][T12701] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 764.918291][T11341] Bluetooth: hci13: command tx timeout [ 765.320555][T11341] Bluetooth: hci2: command 0x0406 tx timeout [ 765.326620][T12701] Bluetooth: hci7: command 0x0406 tx timeout [ 765.398626][T12700] Bluetooth: hci14: command tx timeout [ 766.998713][T12700] Bluetooth: hci13: command tx timeout [ 767.478560][T12700] Bluetooth: hci14: command tx timeout [ 768.523275][ T5115] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 768.543917][ T5115] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 768.554754][ T5115] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 768.563683][ T5115] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 768.578836][ T5115] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 768.586639][ T5115] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 769.078483][T12700] Bluetooth: hci13: command tx timeout [ 769.558560][T12700] Bluetooth: hci14: command tx timeout [ 770.167854][ T5115] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 770.181806][ T5115] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 770.191815][ T5115] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 770.211183][ T5115] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 770.231490][ T5115] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 770.259334][ T5115] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 770.681246][ T5115] Bluetooth: hci15: command tx timeout [ 771.638672][ T5115] Bluetooth: hci14: command tx timeout [ 772.363012][ T5115] Bluetooth: hci16: command tx timeout [ 772.759561][ T5115] Bluetooth: hci15: command tx timeout [ 774.438378][ T5115] Bluetooth: hci16: command tx timeout [ 774.858139][ T5115] Bluetooth: hci15: command tx timeout [ 776.518262][ T5115] Bluetooth: hci16: command tx timeout [ 776.919265][ T5115] Bluetooth: hci15: command tx timeout [ 778.600217][T12700] Bluetooth: hci16: command tx timeout [ 790.919194][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 796.220074][ T5115] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 796.235196][ T5115] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 796.248785][ T5115] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 796.257432][ T5115] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 796.284911][ T5115] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 796.293506][ T5115] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 798.359873][ T5115] Bluetooth: hci17: command tx timeout [ 800.438831][ T5115] Bluetooth: hci17: command tx timeout [ 802.524334][ T5115] Bluetooth: hci17: command tx timeout [ 804.598660][ T5115] Bluetooth: hci17: command tx timeout [ 809.325752][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.333187][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.209489][ T30] INFO: task kworker/u8:5:991 blocked for more than 143 seconds. [ 820.217259][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 2024/06/18 02:18:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 820.268114][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.288100][ T30] task:kworker/u8:5 state:D stack:23520 pid:991 tgid:991 ppid:2 flags:0x00004000 [ 820.337292][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 820.358972][ T30] Call Trace: [ 820.363911][ T30] [ 820.366864][ T30] __schedule+0xf15/0x5d00 [ 820.375229][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 820.388098][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 820.393345][ T30] ? __pfx___schedule+0x10/0x10 [ 820.408091][ T30] ? schedule+0x298/0x350 [ 820.412469][ T30] ? __pfx_lock_release+0x10/0x10 [ 820.417527][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 820.439674][ T30] ? __mutex_trylock_common+0x78/0x250 [ 820.445194][ T30] schedule+0xe7/0x350 [ 820.474919][ T30] schedule_preempt_disabled+0x13/0x30 [ 820.483449][ T30] __mutex_lock+0x5b8/0x9c0 [ 820.487995][ T30] ? addrconf_verify_work+0x12/0x30 [ 820.504152][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 820.518411][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 820.523502][ T30] ? addrconf_verify_work+0x12/0x30 [ 820.558896][ T30] addrconf_verify_work+0x12/0x30 [ 820.563992][ T30] process_one_work+0x9fb/0x1b60 [ 820.571074][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 820.576147][ T30] ? __pfx_process_one_work+0x10/0x10 [ 820.581593][ T30] ? assign_work+0x1a0/0x250 [ 820.586216][ T30] worker_thread+0x6c8/0xf70 [ 820.594654][ T30] ? __kthread_parkme+0x148/0x220 [ 820.612244][ T30] ? __pfx_worker_thread+0x10/0x10 [ 820.617533][ T30] kthread+0x2c1/0x3a0 [ 820.628099][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 820.633349][ T30] ? __pfx_kthread+0x10/0x10 [ 820.637963][ T30] ret_from_fork+0x45/0x80 [ 820.654145][ T30] ? __pfx_kthread+0x10/0x10 [ 820.664560][ T30] ret_from_fork_asm+0x1a/0x30 [ 820.678422][ T30] [ 820.681608][ T30] INFO: task kworker/u8:8:2796 blocked for more than 143 seconds. [ 820.698077][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 820.705742][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 820.729670][ T30] task:kworker/u8:8 state:D stack:23424 pid:2796 tgid:2796 ppid:2 flags:0x00004000 [ 820.746826][ T30] Workqueue: netns cleanup_net [ 820.759294][ T30] Call Trace: [ 820.762607][ T30] [ 820.765548][ T30] __schedule+0xf15/0x5d00 [ 820.771973][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 820.777230][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 820.782541][ T30] ? __pfx___schedule+0x10/0x10 [ 820.787424][ T30] ? schedule+0x298/0x350 [ 820.803461][ T30] ? __pfx_lock_release+0x10/0x10 [ 820.814705][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 820.828077][ T30] ? __mutex_trylock_common+0x78/0x250 [ 820.833600][ T30] schedule+0xe7/0x350 [ 820.837701][ T30] schedule_preempt_disabled+0x13/0x30 [ 820.868104][ T30] __mutex_lock+0x5b8/0x9c0 [ 820.875603][ T30] ? wiphy_unregister+0x142/0xbc0 [ 820.888916][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 820.894010][ T30] ? wiphy_unregister+0x142/0xbc0 [ 820.908080][ T30] wiphy_unregister+0x142/0xbc0 [ 820.912986][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 820.938171][ T30] ? kfree+0x12a/0x3b0 [ 820.942306][ T30] ? rate_control_deinitialize+0x113/0x160 [ 820.960926][ T30] ieee80211_unregister_hw+0x248/0x3a0 [ 820.966447][ T30] hwsim_exit_net+0x3ad/0x7d0 [ 820.987264][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 820.992714][ T30] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 820.998161][ T30] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 821.003927][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 821.028080][ T30] ops_exit_list+0xb0/0x180 [ 821.032646][ T30] cleanup_net+0x5b7/0xbf0 [ 821.037119][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 821.058124][ T30] process_one_work+0x9fb/0x1b60 [ 821.063117][ T30] ? __pfx_wb_update_bandwidth_workfn+0x10/0x10 [ 821.088274][ T30] ? __pfx_process_one_work+0x10/0x10 [ 821.093722][ T30] ? assign_work+0x1a0/0x250 [ 821.108119][ T30] worker_thread+0x6c8/0xf70 [ 821.112770][ T30] ? __pfx_worker_thread+0x10/0x10 [ 821.117902][ T30] kthread+0x2c1/0x3a0 [ 821.133561][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 821.140122][ T30] ? __pfx_kthread+0x10/0x10 [ 821.144743][ T30] ret_from_fork+0x45/0x80 [ 821.169152][ T30] ? __pfx_kthread+0x10/0x10 [ 821.173809][ T30] ret_from_fork_asm+0x1a/0x30 [ 821.178969][ T30] [ 821.183639][ T30] INFO: task kworker/1:3:5114 blocked for more than 144 seconds. [ 821.205889][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 821.218171][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 821.238085][ T30] task:kw