last executing test programs: 2m35.842464697s ago: executing program 2 (id=96): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0x1c48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) 2m35.120017955s ago: executing program 2 (id=99): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=ANY=[], 0x1c48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 2m34.304291897s ago: executing program 2 (id=103): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff}, 0x80800) io_setup(0x9, &(0x7f0000000240)=0x0) r2 = eventfd2(0x7, 0x0) io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x0, 0xfffffdff, 0x0, 0xff45, r0, 0x0, 0x0, 0x7, 0x0, 0x5, r2}]) 2m33.467190948s ago: executing program 2 (id=105): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f0000000040)={[{}, {@type={'type', 0x3d, "0b4fb860"}}, {@force}, {@uid}, {@force}, {@creator={'creator', 0x3d, "f5e298ff"}}, {@nls={'nls', 0x3d, 'cp860'}}, {@part={'part', 0x3d, 0x6}}, {@creator={'creator', 0x3d, 'YHmr'}}]}, 0x3d, 0x6e8, &(0x7f00000001c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009740)='./file0\x00', 0x4000400, &(0x7f00000002c0)={[{@grpquota}, {@qnoenforce}]}, 0x7f, 0x98ca, &(0x7f0000009780)="$eJzs3QW8pGXBsPGzyy4sKaAIFiAlJilhIB2KKClKCNKSAiKgdCihgiKggAIKIoqEgArSjXR3d3fH91t2QVgvEL/3VXj3uq6fe+bMzHPm3HP/5348c57DzLILLjnvwMCEAyN6+fQfnb7nTSsuNf6iGx6z+5Ar99tlsXtHXjzmiJOJ5h55Os/I03kHBgYGjbydQSMuGzLX0ccMHhgyMPx//2i8sccZPN7AwDgjz468nYHZR5yMe/DL2704SjzQKYd/u51H/Hup8YffyPBPll/p+fUGBgaGverrh49rxn+6o9KWnWehBf9h9Yrb4JFXD/rHdS+dDhnxb9wDBwbG3X/g9R8fw7cd+qqv/W82/HtOOPXA0je9Bd/7/1zLzrPQIqP4D1+LY4y8bPbha3zUNWhs1Mf5LkuufffIKRw0cuKGvGq9vBWP+/+vlp1nwUUHXn8dDyy2wBZ3vfjSfnPI/AMDQxYYGBiy4MDAkIXeao/63+ktffBVVVXVW9I8884y/Dn74FF+Hhj28s+19HPh2c/NdNvAwJDFRjxPHLLSy88Fq6qqqqqqqurt2TzzzjIfPP+f8I2e/095/PYT9fy/qqqqqqqq6v9Oi8wz7yzDn+uP8vx/sjd6/v/QPYcdNOJv/+eefcRXvfDW3omqqqqqqqqqesMWXASf/0/5Rs//zz16ygt6/l9VVVVVVVX1f6clXnzxxa1e9Tp7Iy+e/uXr6fn/CXfesMJbNuCqqqqqqqqq+rd74f7jTvzHa75PPjDK672/1MjfCww64uSLLnrLBvr2aNA//z5k67d6TP/ThjsPO3TKgYH1ln6rh1JvQf9nXqu+/iPl7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iXuf4/yuv/3/CUau8/F7wH5p2lquO+8dXvvTe/0MWW+T+bd6iob8Vja7H/wfWGjQwMNJ3wrUGBgYWm2eJpaYfGBg47qpZpp1m4JXr5hh+3acnHuOlN4h/+T8TWWAivuGtpxpxOvyBMvCuV27jiJduf5EXDxhj0CiDeFUTHXvQQWsu++Sso55O9/r3Y/Arn41/zD0v/7csg0fZaNjrfPHLt//yfRnVeeTYpx8+9hk2XneDGTbabPOPr7XuymustsZq680582wzzTrnnLPNNsPqa62z2owjPr7enE350sf53sycjTfqnN0/z6vnbNT79npzNuUbz9lLt7jHOcM+9/KcDfk352y+N56zKdca+Y0mmnvowEovzc2ggYGJ5h86sOnwMzONNTAw0QIjt51s+LafmXjwwMBu/7ijwz8b65XH4KCth2+z7IJLzjtiNzUw8I/Tf/Q672c/5siRzz3ydJ6Rp/OO+DYTDvzjoThkrqOPGTx8Ll4zHeONPc7g8QYGxhl5duTtDMw54mSc41/e7nXeZ32Ugb70Mis7j/j3UuMPDAyMO/yTyVc+YYfhU/9feJ/2/6////8nrzkGvfJ4HDTy38htRnjNs9Ai//heL03D8LkbY+Rlsw83+V9+a/vX9E/jnXLYwJRvMN43eF2cl6LH1zrHTbLt/9br4tB4J3uD8b7B6/i+7niXuW3vu0fc1P/aeEfZ1y360se538y+buCN93Vj0A2sdv4HRt3XfeH1h/ia3eXLczTWKBu93r5usn2n2Hr47c/9xvu6RYePfehr9nWDBwYmmu/lfd3wHd+CQwd2G35m5uFnFho6cMjwM7O8dGbsgZOHn/nEKuuvs+rwCxb+58fB9INe8weasM4WHGWdDXrVfR80yt93DhlxOu6BL7+H0+vsNweNvFv/cl9Bj9sJ32C8b/D+UzjPwy9b9chhk/xvvf8UjXfYG4/39d4v+3XHu+sTJ9z0vzzeV9bZ0FdN18JvZp1N+dp1NvwujvGqlfFmfw5bFbYf8flkr9zaJlve88rPFENHud1/9TPFwm+8ziZca5Sv22n/gUFvNDcLvZm5ef8/7YO2efXcvNmft6afesT1Y7zB3Iw154rTvTw3Y/6bc7PQvzs3cw+M8dq5GTKwwMDAwDQj9w8Lvpm5meyN5+bNPm7Gge1HfL7aKxfNv8uhZ748N6POxb+amwX/3bmZ8pXHzTQvXTfV4IExxxzYdOWNN95wphEfXz4784iPb7wG538zcznh/85cvnfI683lPx6q4912wYH/Yg3+0z795duf/9+dy4FX5nJgrVEXS71d6/d/7vJ3l7+7/N3l7y5/d/mLe53j/6+8/v9eE35695G/3Bh6wRST7vhWj/ctbrQ+/j/S9zXH/3ecdIoLBg+8ct0bHp8dsc3b8vjs7CNOxj345e1GPT7IA33947P7zzn79v+l47P/X728Vt/E7+Ha/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc7x/xlf/juAO2da/JGRB0KH3rvdcou/1eN9ixutj/+P9H3N8f/Fl9vu3sEDr1z3hsf/R2zjOP5/y7ML7vp2Pv7/8lrt+H/9i/J3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Gvc/x/7pf/DuCww/be/OW/B7hsop2Pe6vH+xY3uh7/7/3/vbX/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Ysbefx/YJS3t/xyjwsMjv//3+51/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv+v5I9Z/JfNH7P4fzV/zOL/tfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+H89f8ziv1L+mMV/5fwxi/838scs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/2/mj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/2/lj1n8N8wfs/hvlD9m8d84f8zi/+38MYv/JvljFv/v5I9Z/DfNH7P4b5Y/ZvHfPH/M4v/d/DGL//fyxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4fz9/zOL/g/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+P8wf8zi/6P8MYv/j/PHLP675Y9Z/HfPH7P4/yR/zOL/0/wxi/8e+WMW/5/lj1n898wfs/jvlT9m8d87f8zi//P8MYv/L/LHLP775I9Z/PfNH7P475c/ZvH/Zf6Yxf9X+WMW//3zxyz+B+SPWfwPzB+z+P86f8zi/5v8sVf8Bw0arf0Pyh+zrP+D88cs/r/NH7P4H5I/ZvH/Xf6Yxf/Q/DGL/+/zxyz+f8gfs/gflj9m8f9j/pjF//D8MYv/EfljFv8j88cs/kflj1n8/5Q/ZvE/On/M4n9M/pjF/9j8MYv/n/PHLP5/yR+z+P81f8zif1z+mMX/+Pwxi//f8scs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/9/zxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/TOI/aCB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX9o/pjFf8z8MYv/WPljFv9h+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf8d+WMW/wnzxyz+E+WPWfwnzh+z+L8zf8zi/678MYv/JPljFv93549Z/CfNH7P4T5Y/ZvF/T/6Yxf+9+WMW//flj1n8358/ZvH/QP6YxX/y/DGL/xT5Yxb/KfPHLP4fzB+z+E/1sv+wt2hcb9Ms/lO3/jGL/zT5Yxb/afPHLP7T5Y9Z/D+UP2bxnz5/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/8n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/8n88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8zi/6n8MYv/p/PHLP6fyR+z+H82f8ziP1f+mMX/c/ljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfw/nz9m8f9C/pjFf9H8MYv/F/PHLP6L5Y9Z/L+UP2bx/3L+mMV/8fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bx/0r+mMV/2fwxi/9X88cs/l/LH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/1/PHLP4r5Y9Z/FfOH7P4fyN/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Zv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Vv6YxX/D/DGL/0b5Yxb/jfPHLP7fzh+z+G+SP2bx/07+mMV/0/wxi/9m/+y/9X91XG/TLP6bt/4xi/9388cs/t/LH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8d8xf8zi//38MYv/D/LHLP475Y9Z/HfOH7P475I/ZvHfNX/M4v/D/DGL/4/yxyz+P84fs/jvlj9m8d89f8zi/5P8MYv/T/PHLP575I9Z/H+WP2bx3zN/zOK/V/6YxX/v/DGL/8/zxyz+v8gfs/jvkz9m8d83f8ziv1/+2Gv9x3irh/M/73X8f5k/Zln/v8ofs/jvnz9m8T8gf8zif2D+mMX/1/ljFv/f5I9Z/A/KH7P4H5w/ZvH/7Wv97/ivj+ttmsX/kNY/ZvH/Xf6Yxf/Q/DGL/+/zxyz+f8gfs/gf9g//ja5+Swb29szi/8fWP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/P+WPWfyPzh+z+B+TP2bxPzZ/zOL/5/wxi/9f8scs/n/NH7P4H5c/ZvE/Pn/M4v+3/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f0zi/1L5/3MS/0Hn5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj42+/oNe4395/tjo6//a9X9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzH5MutPg/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+L32a/z9n8R+UP2bxH5w/ZvEfI3/M4j8kf8ziPzR/zOI/Zv6YxX+s/DGL/7D8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8zi/478MYv/hPljFv+J8scs/hPnj1n835k/ZvF/V/6YxX+S/DGL/7vzxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP/kb+w/9j4/rbZrFf4rWP2bxnzJ/zOL/wfwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bx/1D+mMV/+vwxi/+H88cs/h/JH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4z5A/ZvGfMX9s0Ol7Dh0YGBjt/WfKH7Os/5nzxyz+s+SPWfxnzR+z+H8yf8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+c+WPWfw/lz9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf/z+WMW/y/kj1n8F80fs/h/MX/M4r9Y/pjF/0v5Yxb/L+ePWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/r+SPWfyXzR+z+H81f8zi/7X8MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/PX/M4r9S/pjFf+X8MYv/N/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv9v5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9v5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/t/DGL/yb5Yxb/7+SPWfw3zR+z+G+WP2bx3zx/zOL/3fwxi//38scs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+H8/f8zi/4P8MYv/TvljFv+d88cs/rvkj1n8d80fs/j/MH/M4v+j/DGL/4/zxyz+u+WPWfx3zx+z+P8kf8zi/9P8MYv/HvljFv+f5Y9Z/PfMH7P475U/ZvHfO3/M4v/z/DGL/y/yxyz+++SPWfz3zR+z+O+XP2bx/2X+mMX/V/ljFv/988cs/gfkj1n8D8wfs/j/On/M4v+b/DGL/0H5Yxb/g/PHLP6/zR+z+B+SP2bx/13+mMX/0Pwxi//v88cs/n/IH7P4H5Y/ZvH/Y/6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/P+UP2bxPzp/zOJ/TP6Yxf/Y/DGL/5/zxyz+f8kfs/j/NX/M4n9c/pjF//j8MYv/3/LHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi//f88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf0ziP8ZA/pjFf1D+mMV/cP6YxX+M/DGL/5D8MYv/0Pwxi/+Y+WMW/7Hyxyz+w/LHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/O/LHLP4T5o9Z/CfKH7P4T5w/ZvF/Z/6Yxf9d+WMW/0nyxyz+784fs/hPmj9m8Z8sf8zi/578MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/5PljFv8p8scs/lPmj1n8P5g/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/h/KH7P4T58/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf+T+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bx/1T+mMX/0/ljFv/P5I9Z/D+bP2bxnyt/zOL/ufwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/RfLHLP6fzx+z+H8hf8ziv2j+mMX/i/ljFv/F8scs/l/KH7P4fzl/zOK/eP6YxX+J/DGL/5L5Yxb/pfLHLP5L549Z/JfJH7P4fyV/zOK/bP6Yxf+r+WMW/6/lj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMX/6/ljFv+V8scs/ivnj1n8v5E/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/h/M3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/h/K3/M4r9h/pjFf6P8MYv/xvljFv9v549Z/Dex+B8+/b+1ucX/Oxb/fzOL/6b5Yxb/zfLHLP6b549Z/L+bP2bx/17+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/7+ePWfx/kD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/x/mj1n8f5Q/ZvH/cf6YxX+3/DGL/+75Yxb/n+SPWfx/mj9m8d8jf8zi/7P8MYv/nvljFv+98scs/nvnj1n8f54/ZvH/Rf6YxX+f/DGL/775Yxb//fLHLP6/zB+z+P8qf8ziv3/+mMX/gPwxi/+B+WMW/1/nj1n8f5M/ZvE/KH/M4n9w/pjF/7f5Yxb/Q/LHLP6/yx+z+B+aP2bx/33+mMX/D/ljFv/D8scs/n/MH7P4H+7xH/vf2djif4TH/9/K4n9k/pjF/6j8MYv/n/LHLP5H549Z/I/JH7P4H5s/ZvH/c/6Yxf8v+WMW/7/mj1n8j8sfs/gfnz9m8f9b/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bx/3v+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPSfyHDOSPWfwHvTn/Mf9j43qbZvEf3PrHLP5j5I9Z/Ifkj1n8h+aPWfzHzB+z+I+VP2bxH5Y/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n835E/ZvGfMH/M4j9R/pjFf+L8MYv/O/PHLP7vyh+z+E+SP2bxf3f+mMV/0vwxi/9k+WMW//fkj1n835s/ZvF/X/6Yxf/9+WMW/w/kj1n8J88fs/hPkT9m8Z8yf8zi/8H8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8f9Q/pjFf/r8MYv/h/PHLP4fyR+z+H80f8zi/7H8MYv/x/PHLP6fyB+z+M+QP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6fzB+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/1z5Yxb/z+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvH/fP6Yxf8L+WMW/0Xzxyz+X8wfs/gvlj9m8f9S/pjF/8v5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/yv5Yxb/ZfPHLP5fzR+z+H8tf8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+X88fs/ivlD9m8V85f8zi/438MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMX/m/ljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/W0b/Yf96E4v/hkb/N5HFf6P8MYv/xvljFv9v549Z/DfJH7P4fyd/zOK/af6YxX+z/DGL/+b5Yxb/7+aPWfy/lz9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOK/Y/6Yxf/7+WMW/x/kj1n8d8ofs/jvnD9m8d8lf8ziv2v+mMX/h/ljFv8f5Y9Z/H+cP2bx3y1/zOK/e/6Yxf8n+WMW/5/mj1n898gfs/j/LH/M4r9n/pjFf6/8MYv/3vljFv+f549Z/H+RP2bx3yd/zOK/b/6YxX+//DGL/y/zxyz+v8ofs/jvnz9m8T8gf8zif2D+mMX/1/ljFv/f5I9Z/A/KH7P4H5w/ZvH/bf6Yxf+Q/DGL/+/yxyz+h+aPWfx/nz9m8f9D/pjF/7D8MYv/H/PHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4v+n/DGL/9H5Yxb/Y/LHLP7H5o9Z/P+cP2bx/0v+mMX/r/ljFv/j8scs/sfnj1n8/5Y/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfz/nj9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/udJ/8L/cwuJ/hdL/X2fxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf0ziP3Qgf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/aP6YxX/M/DGL/1j5Yxb/YfljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/HfljFv8J88cs/hPlj1n8J84fs/i/M3/M4v+u/DGL/yT5Yxb/d+ePWfwnzR+z+E+WP2bxf0/+mMX/vfljFv/35Y9Z/N+fP2bx/0D+mMV/8vwxi/8U+WMW/ynzxyz+H8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/w/lj1n8p88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/J/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4z5U/ZvH/XP6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv/P549Z/L+QP2bxXzR/zOL/xfwxi/9i+WMW/y/lj1n8v+zyH/JmN7T4L+7yf9NZ/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/V/LHLP7L5o9Z/L+aP2bx/1r+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfy/nj9m8V8pf8ziv3L+mMX/G/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi/8388cs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+38scs/hvmj1n8N8ofs/hvnD9m8f92/pjFf5P8MYv/d/LHLP6b5o9Z/DfLH7P4b54/ZvH/bv6Yxf97+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL//b5Yxb/HfLHLP475o9Z/L+fP2bx/0H+mMV/p/wxi//O+WMW/13yxyz+u+aPWfx/mD9m8f9R/pjF/8f5Yxb/3fLHLP67549Z/H+SP2bx/2n+mMV/j/wxi//P8scs/nvmj1n898ofs/jvnT9m8f95/pjF/xf5Yxb/ffLHLP775o9Z/PfLH7P4/zJ/zOL/q/wxi//++WMW/wPyxyz+B+aPWfx/nT9m8f9N/pjF/6D8MYv/wfljFv/f5o9Z/A/JH7P4/y5/zOJ/aP6Yxf/3+WMW/z/kj1n8D8sfs/j/MX/M4n94/pjF/4j8MYv/kfljFv+j8scs/n/KH7P4H50/ZvE/Jn/M4n9s/pjF/8/5Yxb/v+SPWfz/mj9m8T8uf8zif3z+mMX/b/ljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf/v+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YPybxH3Mgf8ziPyh/zOI/OH/M4j9G/pjFf0j+mMV/aP6YxX/M/DGL/1j5Yxb/YfljFv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/HfljFv8J88cs/hPlj1n8J84fs/i/M3/M4v+u/DGL/yT5Yxb/d+ePWfwnzR+z+E+WP2bxf0/+mMX/vfljFv/35Y9Z/N+fP2bx/0D+mMV/8vwxi/8U+WMW/ynzxyz+H8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/w/lj1n8p88fs/h/OH/M4v+R/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4v/J/DGL/2z5Yxb/2fPHLP5z5I+N6j/0rR7Q/7TX8Z8zf8yy/j+VP2bx/3T+mMX/M/ljFv/P5o9Z/OfKH7P4fy5/zOI/97/2H+s/Oq63aRb/eVr/mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf/z+WMW/y/kj1n8F80fs/h/MX/M4r9Y/pjF/0v5Yxb/L+ePWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/r+SPWfyXzR+z+H81f8zi/7X8MYv/cvljo6n/oFGsx1w+f2w09X+pV6//FfLHLP4r5o9Z/L+eP2bxXyl/zOK/cv6Yxf8b+WMW/1XyxwadPmjkzIze/qvmj1nW/2r5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvH/Zv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvH/Vv6YxX/D/DGL/0b5Yxb/jfPHLP7fzh+z+G+SP2bx/07+mMV/0/wxi/9m+WMW/83zxyz+380fs/h/L3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8d8+f8ziv0P+mMV/x/wxi//388cs/j/IH7P475Q/ZvHfOX/M4r9L/pjFf9f8MYv/D/PHLP4/yh+z+P84f8ziv1v+mMV/9/wxi/9P8scs/j/NH7P475E/ZvH/Wf6YxX/P/DGL/175Yxb/vfPHLP4/zx+z+P8if8ziv0/+mMV/3/wxi/9++WMW/1/mj1n8f5U/ZvHfP3/M4n9A/pjF/8D8MYv/r/PHLP6/yR+z+B+UP2bxPzh/zOL/2/wxi/8h+WMW/9/lj1n8D80fs/j/Pn/M4v+H/DGL/2H5Yxb/P+aPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf9P+WMW/6Pzxyz+x+SPWfyPzR+z+P85f8zi/5f8MYv/X/PHLP7H5Y9Z/I/PH7P4/y1/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/j/PX/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b/0TfoP+U+N622axf+y1j9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+W/8DYcJnF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+Yw3kj1n8B+WPWfwH549Z/MfIH7P4D8kfs/gPzR+z+I+ZP2bxHyt/zOI/LH/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/i/I3/M4j9h/pjFf6L8RzbsNecs/hPnj1n835k/ZvF/V/6YxX+S/DGL/7vzxyz+k+aPWfwnyx+z+L8nf8zi/978sdHTf8Qrnb3a/335Y6On/4he7f/+/DGL/wfyxyz+k+ePWfynyB+z+E+ZP2bx/2D+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+H8of8ziP33+mMX/w/ljFv+P5I9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv9P5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjFf678MYv/5/LHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/h/Pn/M4v+F/DGL/6L5Yxb/L+aPWfwXyx+z+H8pf8zi/+X8MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8V8mf8zi/5X8MYv/svljFv+v5o9Z/L+WP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/r+ePWfxXyh+z+K+cP2bx/0b+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOL/zfwxi//a+WMW/3Xyxyz+66r8x3nTW1r811P5v/ks/uvnj1n8N8gfs/h/K3/M4r9h/pjFf6P8MYv/xvljFv9v549Z/DfJH7P4fyd/zOK/af6YxX+z/DGL/+b5Yxb/7+aPWfy/lz9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3wH9e0RY/HdMG7P4fz9/zOL/g/wxi/9O+WMW/53zxyz+u4zwf/7Ft2pcb9Ms/ru2/jGL/w/zxyz+P8ofs/j/OH/M4r9b/pjFf/f8MYv/T/LHLP4/zR+z+O+RP2bx/1n+mMV/z/wxi/9e+WMW/73zxyz+P88fs/j/In/M4r9P/pjFf9/8MYv/fvljFv9fvin/of+5cb1Ns/j/qvWPWfz3zx+z+B+QP2bxPzB/zOL/6/wxi/9v8scs/gflj1n8D84fs/j/Nn/M4n9I/pjF/3f5Yxb/Q/PHLP6/zx+z+P8hf8zif1j+mMX/j/ljFv/D88cs/kfkj1n8j8wfs/gflT9m8f9T/pjF/+j8MYv/MfljFv9j88cs/n/OH7P4/yV/zOL/1/wxi/9x+WMW/+Pzxyz+f8sfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP5/zx+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGJ/7CB/DGL/6D8MYv/4Pwxi/8Y+WMW/yH5Yxb/ofljFv8x88cs/mPlj1n8h+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/d+SPWfwnzB+z+E+UP2bxnzh/zOL/zvwxi/+78scs/pPkj1n8350/ZvGfNH/M4j9Z/pjF/z35Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/yfPHLP5T5I9Z/KfMH7P4fzB/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/D+UP2bxnz5/zOL/4fwxi/9H8scs/h/NH7P4fyx/zOL/8fwxi/8n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/8n88cs/rPlj1n8Z88fe8n/5TOjsf8c+WOW9T9n/pjF/1P5Yxb/T7+h/97/+XG9TbP4f6b1j1n8P5s/ZvGfK3/M4v+5/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv9F8scs/p/PH7P4fyF/zOK/aP6Yxf+L+WMW/8Xyxyz+X8ofs/h/OX/M4r94/pjFf4n8MYv/kvljFv+l8scs/kvnj1n8l8kfs/h/JX/M4r9s/pjF/6v5Yxb/r+WPWfyXyx+z+C+fP2bxXyF/zOK/Yv6Yxf/r+WMW/5Xyxyz+K+ePWfy/kT9m8V8lf2z08x8b/VfNHxv9/Hn9r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv9v5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9v5Y9Z/DfMH7P4b5Q/ZvHf+A38h/43xvU2zeL/7dY/ZvHfJH/M4v+d/DGL/6b5Yxb/zfLHLP6b549Z/L+bP2bx/17+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/475Yxb/7+ePWfx/kD9m8d8pf8ziv3P+mMV/l/wxi/+u+WMW/x/mj1n8f5Q/ZvH/cf6YxX+3/DGL/+75Yxb/n+SPWfx/mj9m8d8jf8zi/7P8MYv/nvljFv+98scs/nvnj1n8f54/ZvH/Rf6YxX+f/DGL/775Yxb//fLHLP6/zB+z+P8qf8ziv3/+mMX/gPwxi/+B+WMW/1/nj1n8f5M/ZvE/KH/M4n9w/pjF/7f5Yxb/Q/LHLP6/yx+z+B+aP2bx/33+mMX/D/ljFv/D8scs/n/MH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/n/LHLP5H549Z/I/JH7P4H5s/ZvH/c/6Yxf8v+WMW/7/mj1n8j8sfs/gfnz9m8f9b/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bx/3v+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N/9Rv4T/BfG9TbN4n9P6x+z+N+bP2bxvy9/zOJ/f/6YwX/QkIFhD+SPGfyHr/8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHJP5jD+SPWfwH5Y9Z/Afnj1n8x8gfs/gPyR+z+A/NH7P4j5k/ZvEfK3/M4j8sf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+L8jf8ziP2H+mMV/ovwxi//E+WMW/3fmj1n835U/ZvGfJH/M4v/u/DGL/6T5Yxb/yf7hv9+m+03ylgzt7ZjF/z2tf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMV/ivwxi/+U+WMW/w/mj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi/+H8scs/tO/sf+w//i43qZZ/D/c+scs/h/JH7P4fzR/zOL/MZn/TG9yO4v/x2X+bzaL/yfyxyz+M+SPWfxnHBjY6q0a0ts5i/9MrX/M4j9z/pjFf5b8MYv/rPljFv9P5o9Z/GfLH7P4z54/ZvGfI3/M4j9n/pjF/1P5Yxb/T+ePWfw/kz9m8f9s/pjFf678MYv/5/LHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/h/Pn/M4v+F/DGL/6L5Yxb/L+aPWfwXyx+z+H8pf8zi/+X8MYv/4vljFv8l8scs/kvmj1n8l8ofs/gvnT9m8V8mf8zi/5X8MYv/svljFv+v5o9Z/L+WP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/r+ePWfxXyh+z+K+cP2bx/0b+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOL/zfwxi//a+WMW/3Xyxyz+6+aPWfzXyx+z+K+fP2bx3yB/zOL/rfwxi/+G+WMW/43yxyz+G+ePWfy/nT9m8d8kf8zi/538MYv/pvljFv/N8scs/pvnj1n8v5s/ZvH/Xv6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/jvljFv/v549Z/H+QP2bx3yl/zOK/c/6YxX+X/DGL/675Yxb/H+aPWfx/lD9m8f9x/pjFf7f8MYv/7vljFv+f5I9Z/H+aP2bx3yN/zOL/s/wxi/+e+WMW/73yxyz+e+ePWfx/nj9m8f9F/pjFf5/8MYv/vvljFv/98scs/r/MH7P4/yp/zOK/f/6Yxf+A/DGL/4H5Yxb/X+ePWfx/kz9m8T8of8zif3D+mMX/t/ljFv9D8scs/r/LH7P4H5o/ZvH/ff6Yxf8P+WMW/8Pyxyz+f8x/RGO89qzF//D8MYv/EfljFv8j88cs/kflj1n8/5Q/ZvE/On/M4n9M/pjF/9j8MYv/n/PHLP5/yR+z+P81f8zif1z+mMX/+Pyx0dd/n3NedenYf8sfG339X7v+T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/v+ePWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfe43/sNHX//H8Mcv6fyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjEf5yB/DGL/6D8MYv/4Pwxi/8Y+WMW/yH5Yxb/ofljFv8x88cs/mOp/Md+01ta/Iep/N98Fv+x88cs/uPkj1n8x80fs/iPlz9m8R8/f8ziP0H+mMX/HfljFv8J88cs/hPlj1n8J84fs/i/M3/M4v+u/DGL/yT5Yxb/d+ePWfwnzR+z+E+WP2bxf0/+mMX/vfljFv/35Y9Z/N+fP2bx/0D+mMV/8vwxi/8U+WMW/ynzxyz+H8wfs/hPlT9m8Z86f8ziP03+2Ojs/6rGmTZ/bHT2f/X6ny5/zOL/ofwxi//0+WMW/w/nj1n8P5I/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8P5k/ZvGfLX/M4j97/pjFf478MYv/nPljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv+58scs/p/LH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8F8ofs/gvnD9m8V8kf8zi//n8MYv/F/LHLP6L5o9Z/L+YP2bxXyx/zOL/pfwxi/+X88cs/ovnj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/9X8scs/svmj1n8v5o/ZvH/Wv6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/L+eP2bxXyl/zOK/cv6Yxf8b+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/zfzxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/7fyxyz+G+aPWfw3yh+z+G+cP2bx/3b+mMV/k/wxi/938scs/pvmj1n8N8sfs/hvnj9m8f9u/pjF/3v5Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/jvmj1n8v58/ZvH/Qf6YxX+n/DGL/875Yxb/XfLHLP675o9Z/H+YP2bx/1H+mMX/x/ljFv/d8scs/rvnj1n8f5I/ZvH/af6YxX+P/DGL/8/yxyz+e+aPWfz3yh+z+O+dP2bx/3n+mMX/F/ljFv998scs/vvmj1n898sfs/j/Mn/M4v+r/DGL//75Yxb/A/LHLP4H5o9Z/H+dP2bx/03+mMX/oPwxi//B+WMW/9/mj1n8D8kfs/j/Ln/M4n9o/pjF//f5Yxb/P+SPWfwPyx+z+P8xf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+f8ofs/gfnT9m8T8mf8zif2z+mMX/z/ljFv+/5I9Z/P+aP2bxPy5/zOJ//Kv8B78V43qbZvH/W+sfs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP5/zx+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+zwj9x34T21j8nxX6v5ks/s/lj1n8n88fs/i/kD9m8X8xf0ziP+5A/pjFf1D+mMV/cP6YxX+M/DGL/5D8MYv/0Pwxi/+Y+WMW/7Hyxyz+w/LHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/O/LHLP4T5o9Z/CfKH7P4T5w/ZvF/Z/6Yxf9d+WMW/0nyxyz+784fs/hPmj9m8Z8sf8zi/578MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/5PljFv8p8scs/lPmj1n8P5g/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/h/KH7P4T58/ZvH/cP6Yxf8j+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf+T+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bx/1T+mMV//mH5Uxb/z7T+MYv/Z/PHLP5z5Y9Z/D+XP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF//P5Yxb/L+SPWfwXzR+z+H8xf8ziv1j+mMX/S/ljFv8v549Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv+v5I9Z/JfNH7P4fzV/zOL/tfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+H89f8ziv1L+mMV/5fwxi/838scs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/2/mj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/2/lj1n8N8wfs/hvlD9m8d84f8zi/+38MYv/JvljFv/v5I9Z/DfNH7P4b5Y/ZvHfPH/M4v/d/DGL//fyxyz+W+SPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/HfMH7P4fz9/zOL/g/wxi/9O+WMW/53zxyz+u+SPWfx3zR+z+P8wf8zi/6P8MYv/j/PHRjv/VyG/2n+3/LHRzv911v/u+WMW/5/kj1n8f5o/ZvHfI3/M4v+z/DGL/575Yxb/vfLHLP57549Z/H+eP2bx/0X+mMV/n/wxi/+++WMW//3yxyz+v8wfs/j/Kn/M4r9//pjF/4D8MYv/gfljFv9f549Z/H+TP2bxPyh/zOJ/cP6Yxf+3+WMW/0Pyxyz+v8sfs/gfmj9m8f99/pjF/w/5Yxb/w/LHLP5/zB+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/5/yxyz+R+ePWfyPyR+z+B+bP2bx/3P+mMX/L/ljFv+/5o9Z/I/LH7P4H58/9rL/wLCBgdHZ/2/5Y5b1f0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4/z1/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH3P4J/96OfwHxr23RwFm8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/J/7UNHXFi8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyT+4w3kj1n8B+WPWfwHW/1XeeOrLf5jWP3/RRb/IfljFv+h+WMW/zHzxyz+Y+WPWfyH5Y9Z/MfOH7P4j5M/ZvEfN3/M4j9e/pjFf/z8MYv/BPljFv935I9Z/CfMH7P4T5Q/ZvGfOH/M4v/O/DGL/7vyxyz+k+SPWfzfnT9m8Z80f8ziP1n+mMX/PfljFv/35o9Z/N+XP2bxf3/+mMX/A/ljFv/J88cs/lPkj1n8p8wfs/h/MH/M4j9V/pjFf+r8sZH+Yw8ezf2nyR+zrP9p88cs/tPlj1n8P5Q/ZvGfPn/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/yfzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOI/V/6Yxf9z+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/D+fP2bx/0L+mMV/0fwxi/8X88cs/ovlj1n8v5Q/ZvH/cv6YxX/x/DGL/xL5Yxb/JfPHLP5L5Y9Z/JfOH7P4L5M/ZvH/Sv6YxX/Z/DGL/1fzxyz+X8sfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//X88cs/ivlj1n8V84fs/h/I3/M4r9K/pjFf1Wj/5u4wxb/1Yz+byKL/+r5Yxb/NfLHLP5r5o9Z/NfKH7P4fzN/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyt/zOK/Yf6YxX+j/DGL/8b5Yxb/b+ePWfw3yR+z+H8nf8ziv2n+mMV/s/wxi//m+WMW/+/mj1n8v5c/ZvHfIn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/hvnz9m8d8hf8ziv2P+mMX/+/ljFv8f5I9Z/HfKH7P475w/ZvHfJX/M4r9r/pjF/4f5Yxb/H+WPWfx/nD9m8d8tf8ziv3v+mMX/J/ljFv+f5o9Z/PfIH7P4/yx/zOK/Z/6YxX+v/DGL/975Yxb/n+ePWfx/kT9m8d8nf8ziv2/+mMV/v/wxi/8v88cs/r/KH7P4758/ZvE/IH/M4n9g/pjF/9f5Yxb/3+SPWfwPyh+z+B+cP2bx/23+mMX/kPwxi//v8scs/ofmj1n8f58/ZvH/Q/6Yxf+w/DGL/x/zxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOL/p/wxi//R+WMW/2Pyxyz+x+aPWfz/nD9m8f9L/pjF/6/5Yxb/4/LHLP7H549Z/P+WP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8/54/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/PfhP+N8c19u00dv/ppcvHe+G1j82evu/0ng35o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878sdGU/9pR7l0vDvzx0ZT/5d69fq/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/JvEffyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX9o/pjFf8z8MYv/WPljFv9h+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6Yxf8d+WMW/wnzxyz+E+WPWfwnzh+z+L8zf8zi/678MYv/JPljFv93549Z/CfNH7P4T5Y/ZvF/T/6Yxf+9+WMW//flj1n8358/ZvH/QP6YxX/y/DGL/xT5Yxb/KfPHLP4fzB+z+E+VP2bxnzp/zOI/Tf4Dt8NlFv9p88cs/tPlj1n8P5Q/ZvGfPn/M4v/h/DGL/0fyxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/yfzxyz+s+WPWfxnzx+z+M+RP/Ya/5GXTfgWj+l/1Ov4z5k/Zln/n8ofs/h/On/M4v+Z/DGL/2fzxyz+c+WPWfw/lz9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf/z+WMW/y/kj1n8F80fs/h/MX/M4r9Y/pjF/0v5Yxb/L+ePWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/r+SPWfyXzR+z+H81f8zi/7X8MYv/cvljFv/l88cs/ivkj1n8V8wfs/h/PX/M4r9S/pjFf+X8MYv/N/LHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv9v5o9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9v5Y9Z/DfMH7P4b5Q/ZvHfOH/M4v/t/DGL/yb5Yxb/7+SPWfw3zR+z+G+WP2bx3zx/zOL/3fwxi//38scs/lvkj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx3zB+z+H8/f8zi/4P8MYv/TvljFv+d88cs/rvkj1n8d80fs/j/MH/M4v+j/DGL/4/zxyz+u+WPWfx3zx8bXf2HjeL/k/yx0dV/YBT/n+aPWfz3yB+z+P8sf8ziv2f+mMV/r/wxi//e+WMW/5/nj1n8f5E/ZvHfJ3/M4r9v/pjFf7/8MYv/L/PHLP6/yh+z+O+fP2bxPyB/zOJ/YP6Yxf/X+WMW/9/kj1n8D8ofs/gfnD9m8f9t/pjF/5D8MYv/7/LHLP6H5o9Z/H+fP2bx/0P+mMX/sPwxi/8f88cs/ofnj1n8j8gfs/gfmT9m8T8qf8zi/6f8MYv/0fljFv9j8scs/sfmj1n8/5w/ZvH/S/6YwX+Mkaf5/3MG/+Hr/7j8MYv/8fljFv+/5Y9Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/7/nj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif+eo/lv/l8f1Ns3if1frH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9J/CcYyB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxH5o/ZvEfM3/M4j9W/pjFf1j+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxf0f+mMV/wvwxi/9E+WMW/4nzxyz+78wfs/i/K3/M4j9J/pjF/935Yxb/SfPHLP6T5Y9Z/N+TP2bxf2/+mMX/ffljFv/3549Z/D+QP2bxnzx/zOI/Rf6YxX/K/DGL/wfzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6Yxf9D+WMW/+nzxyz+H84fs/h/JH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/Mn/M4j9b/pjFf/b8MYv/HPljFv8588cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/nPlj1n8P6f2X2nc17vG4j+32v/1s/jPkz9m8Z83f8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+C+WPWfwXzh+z+C+SP2bx/3z+mMX/C/ljFv9F88cs/l/MH7P4L5Y/ZvH/Uv6Yxf/L+WMW/8Xzxyz+S+SPWfyXzB+z+C+VP2bxXzp/zOK/TP6Yxf8r+WMW/2Xzxyz+X80fs/h/LX/M4r9c/pjFf/n8MYv/CvljFv8V88cs/l/PH7P4r5Q/ZvFfOX/M4v+N/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjF/5v5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/1v5Yxb/DfPHLP4b5Y9Z/DfOH7P4fzt/zOK/Sf6Yxf87+WMW/03zxyz+m+WPWfw3zx+z+H83/4GBgbH/6RKL//fyxyz+W+SPWfy3fDP+g/+D43qbZvHfqvWPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/HfPHLP7fzx+z+P8gf8ziv1P+mMV/5/wxi/8u+WMW/13zxyz+P8wfs/j/KH/M4v/j/DGL/275Yxb/3fPHLP4/yR+z+P80f8ziv0f+mMX/Z/ljFv8988cs/nvlj1n8984fs/j/PH/M4v+L/DGL/z75Yxb/ffPHLP775Y9Z/H+ZP2bx/1X+mMV///wxi/8B+WMW/wPzxyz+v84fs/j/Jn/M4n9Q/pjF/+D8MYv/b/PHLP6H5I9Z/H+XP2bxPzR/zOL/+/wxi/8f8scs/oflj1n8/5g/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv8/5Y9Z/I/OH7P4H5M/ZvE/Nn/M4v/n/DGL/1/yxyz+f80fs/gflz9m8T8+f8zi/7f8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOL/9/wxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/1Gb/4RvbjOL/2M2/zeZxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88ck/u8YyB+z+A/KH7P4D84fs/iPkT9m8R+SP2bxH5o/ZvH/f+zcf7jWdX3H8ZsfBxAl/dimLm04NObajERGoxaionj8ccpEM3+jHoEEkR+SYCputFLHpkvdLNnU0jFnq5Y63Fy/VjQsa7ZGbK1yimthjDlYZM7YdeAchLO359r5su/Xzffj8Qfn3Pfxfac8r5f37cV1NUT/UJb+Q/UPZek/TP9Qlv576B/K0n+4/qEs/ffUP5Sl/176h7L0H6F/KEv/V+kfytJ/b/1DWfrvo38oS/+ifyhL/331D2Xp/2r9Q1n6/5T+oSz9f1r/UJb+++kfytJ/f/1DWfofoH8oS/+f0T+Upf9r9A9l6X+g/qEs/Q/SP5Sl/2v1D2Xp/7P6h7L0H6l/KEv/g/UPZen/c/qHsvQfpX8oS/9D9A9l6X+o/qEs/V+nfyhL/9H6h7L0/3n9Q1n6H6Z/KEv/X9A/lKX/6/UPZen/i/qHsvT/Jf1DWfofrn8oS/836B/K0n+M/qEs/d+ofyhL/yP0D2XpP1b/UJb+R+ofytJ/nP6hLP1/Wf9Qlv7j9Q9l6f8m/UNZ+v+K/qEs/SfoH8rS/836h7L0f4v+oSz9f1X/UJb+b9U/lKX/RP1DWfofpX8oS/9J+oey9D9a/1CW/sfoH8rS/1j9Q1n6T9Y/lKX/cfqHsvQ/Xv9Qlv5T9A9l6X+C/qEs/dv1D2Xpf6L+oSz9T9I/lKX/yfqHsvQ/Rf9Qlv4d+oey9H+b/qEs/d+ufyhL/1P1D2Xp/w79Q1n6n6Z/KEv/qfqHsvQ/Xf9Qlv5n6B/K0v+d+oey9D9T/1CW/u/SP5Sl/1n6h7L0P1v/UJb+5+gfytL/XP1DWfqfp38oS//z9Q9l6X+B/qEs/afpH8rS/0L9Q1n6X6R/KEv/i/UPZenfqX8oS/9L9A9l6T9d/1CW/jP0D2XpP1P/UJb+79Y/lKX/pfqHsvSfpX8oS//Z+oey9L9M/1CW/nP0D2Xpf7n+oSz95+ofytJ/nv6hLP3n6x/K0n+B/qEs/a/QP5Sl/0L9Q1n6v0f/UJb+V+ofytJ/kf6hLP0X6x/K0v8q/UNZ+r9X/1CW/lfrH8rS/xr9Q1n6X6t/KEv/JfqHsvS/Tv9Qlv6/pn8oS/9f1z+Upf9S/UNZ+r9P/1CW/r+hf6Ct++srv//79Q9l2f8H9A9l6X+9/qEs/W/QP5Sl/436h7L0/039Q1n6L9M/lKX/b+kfytL/t/UPZel/k/6hLP1v1j+Upf/v6B/K0v+D+oey9L9F/1CW/rfqH8rS/zb9Q1n6/67+oSz9f0//UJb+t+sfytL/Q/qHsvT/sP6hLP3v0D+Upf9y/UNZ+v++/qEs/f9A/1CW/nfqH8rS/y79Q1n6361/KEv/j+gfytL/o/qHsvS/R/9Qlv736h/K0v8P9Q9l6b9C/1CW/n+kfyhL//v0D2Xp/8f6h7L0v1//UJb+H9M/lKX/n+gfytL/4/qHsvT/hP6hLP0/qX8oS/8/1T+Upf+n9A9l6f+A/qEs/R/UP5Sl/0P6h7L0/zP9Q1n6r9Q/lKX/w/qHsvT/c/1DWfr/hf6hLP0f0T+Upf9f6h/K0v/T+oey9P+M/qEs/T+rfyhL/8/pH8rS//P6h7L0/yv9Q1n6f0H/UJb+X9Q/lKX/Kv1DWfp/Sf9Qlv5/rX8oS//V+oey9H9U/1CW/l/WP5Sl/1f0D2Xp/5j+oSz9v6p/KEv/r+kfytL/b/QPZen/uP6hLP2/rn8oS/+/1T+Upf839A9l6f93+oey9F+jfyhL/2/qH8rSf63+oSz9/17/UJb+/6B/KEv/b+kfytL/H/UPZen/bf1DWfp/R/9Qlv7f1T+Upf8T+oey9P8n/UNZ+j+pfyhL/6f0D2Xpv07/UJb+T+sfytL/n/UPZen/Pf1DWfr/i/6hLP2/r38oS//1+oey9H9G/1CW/j/QP5Sl/wb9Q1n6/6v+oSz9N+ofytL/3/QPZen/rP6hLP3/Xf9Qlv6b9A9l6b9Z/1CW/v+hfyhL/x/qH8rSf4v+oSz9f6R/KEv/5/QPZen/Y/1DWfo/r38oS///1D+Upf8L+oey9P+J/qEs/bfqH0rSf5+W/qEs/QfoH8rSf6D+oSz9B+kfytJ/sP6hLP3b9A9l6T9E/1CW/kP1D2XpP0z/UJb+e+gfytJ/uP6hLP331D+Upf9e+oey9B+hfyhL/1fpH8rSf2/9Q6+4/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/XzF+0+NJps2Z1zvONb3zjmx3fvNz/ZgIAAP63vfih/+X+OwEAAAAAAAAAAAAAAAAAAIC8mvi/E3u5/xkBAAAAAAAAAAAAAOD/u/aOozcMGrDLU4N2fvDaxzq3fR235cwZ99zzUOn52v3jk4KXHLjzg61bt25d/uzEyd0Ph7Zara7/tX26Hw/rfdz1+ktG3nHA9kdl0hdue+K8qSNOnvfgzYO/ufzGjmfatj3b1rrgkpmzOt84sNUqx7a1rux6cMSAVqsc39a6qevB2K4HU9paK7oeHLntwR6tz3Y9eMNFc2Zd3PXECZV/z+CVor1jSWvQLott7fJvg533v2TkkzN6vvbxkj2vNrjVvf9RD355/14/6/ES++95/XJ07/33+x8QeEn92/9za3u+9vGS/+39/yOrtyyOfvbS++95/XKM/UN9gs//u2y09+f+Xp//Dw5ecsf9UcNW39K1//bT7zuo+6nB/5PP/y++fjm29/4H7vL5v+tz/OSez/9DW61y3G7+dkAq7R3Xbejr/b/v/Q9+Ta+bATvv/+6vrtura//3Pt9a2v1UWz/3P7mv9//re/29Av3T3nHX1l7v//3Yf2t08JI79r/+wRHbPv+vu/+i/Xb6WX/2f1zv/Y9ZMPvyMfMXLT585uxp0zund142Yez4I8ZNmDB+/Jhtnwi2/7qbvymQxO69/7eG97oZ0Gp17rhfdd+Nk7v2v/HhpR/tfmpYP/d/fJ/v/wd7/4fQqIGtIUNaV05bsGDeEdt/7Xk4dvuv2/+yYP/9+O//Qw7r/st6/sxwQKt1wI770edNGNq1/6vmlpXdTw3p5/6n9Ln/Sbv+WSXQP7v5/n9xr5td9n/U+msWdu3/0B/uu677qf7+9/8Jfe7/Tu//sDvaO1q1vol27f/IodedWO26tPvzP6hPE/sfuemmzdWuy4n2D/VpYv9Tl73lwmrX5ST7h/o0sf+HZp+/rNp1Odn+oT5N7P+FV28+sNp1OcX+oT5N7P/x7z19T7Xr0mH/UJ8m9v+h2zuOrHZd3mb/UJ8m9n/4FT+aWO26vN3+oT5N7P+SPU9bUe26nGr/UJ8m9n/i1mP2q3Zd3mH/UJ8m9j/guu8vqXZdTrN/qE8T+39q2rI51a7LVPuH+jSx/xUjRz9X7bqcbv9Qnyb2v/SZN02pdl3OsH+oTxP7/9qtdzxe7bq80/6hPk3s/5Pn7HtHtetypv1DfZrY/49HPTy82nV5l/1DfZrY/5o1Kx6odl3Osn+oTxP7X75i0Khq1+Vs+4f6NLH/a0+Y/li163KO/UN9mtj/uPFfObvadTnX/qE+Tez/gM9/++lq1+U8+4f6NLH/0x5ZOL/adTnf/qE+Tex/4YGf+Em163KB/UN9mtj/WzsPnFHtukyzf6hPE/svNw9fU+26XGj/UJ8m9n/WxrsmVbsuF9k/1KeJ/a/c+4sfr3ZdLrZ/qE8T+98097IJ1a5Lp/1DfZrY/3ffd+37q12XS+wf6tPE/m95/hul2nWZbv9Qnyb2v37sWedUuy4z7B/q08T+7zr52UerXZeZ9g/1aWL/y1Y+saDadXm3/UN9mtj/qlUnPVntulxq/1CfJvZ/6OgxI6pdl1n2D/VpYv9zzlz64WrXZbb9Q32a2P+x99/6umrX5TL7h/o0sf9hX5/4qWrXZY79Q32a2P9nJn7g09Wuy+X2D/VpYv+bJx1yWLXrMtf+oT5N7H/tA2Nvq3Zd5tk/1KeJ/X/w0dsrXpf59g/1aWL/c1//wsZq12WB/UN9mtj/m6eesajadbnC/qE+Tex/vzunfKnadVlo/1CfJvZ/7nd+cGq16/Ie+4f6NLH/Q/a/8KBq1+VK+4f6NLH/GTNX31Dtuiyyf6hPE/ufvHztuGrXZbH9Q32a2P/eT82/u9p1ucr+oT5N7H/DoP1PqXZd3mv/UJ8m9n/v1Y98q9p1udr+oT5N7P+G6z/WWe26XGP/UJ8m9v+5LUM2Vbsu19o/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwXO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwLAAAAAAjztw6idwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOAgAA///jh+Jp") unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904030405ffffff09c56a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") unshare(0x22020600) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) prlimit64(r2, 0xf, &(0x7f0000000180)={0x8, 0x7fffffffffffffff}, &(0x7f00000008c0)) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2m30.999631343s ago: executing program 2 (id=113): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 2m30.456535538s ago: executing program 2 (id=116): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000a1001"], 0x10b8}, 0x0) 2m27.599850234s ago: executing program 32 (id=116): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000a1001"], 0x10b8}, 0x0) 1m36.217681585s ago: executing program 3 (id=223): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x10002, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0xfffffff3) 1m35.004845971s ago: executing program 3 (id=227): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={'dvmrp1\x00', {0x2, 0x4e21, @loopback}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@abort}]}, 0x2, 0x45c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDvrpu++0t+pTz6AAIFEfFImrRAD3AAgcQBJCQu5WiStCp1G9QEiVYRBITKEVXijjhW4i/gBBcEnJC4wh1VqlAuFE5Ga+86tmOnSfNwwJ+PtMnM7mxmvp4de3YnDqBvDWc/koj9EfFrRAzWs60Fhuu/bi/OT/61OD+ZRLX61h9Jrdyfi/OTRdHivH15ZiSNSD9N4miHemevXL1QrlSmL+f5sbmL743NXrn6zPmL5XPT56YvTZw+ferk+PPPTTybHa6uN87/Z2098uHMscOvvX39jckz19/58eukiL8tjg0yvNLBx6vrDmlbOdCUTnb0sCGsSSkisu4aqI3/wSjFUucNxqufdD0x3aIGApummutyeKEK/HftHoxeNwHojeKDPrv/rW83tm7ysQ3ceql+A5TFfjvfYiFqO4tbnIG2+9uNNBwRZxb+/jLbYnOeQwAAtPg2m/883Tz/K+YfadzXVO5/+drQUL6WcjAi7qnuikMRcW9Erez9EfHAGutvXyRZPv9Jb95VYKuUzf9eyNe2GvO/er1FkaFSnjtQi38gOXu+Mn0if01GYmBXlh9foY7vXvnl827Hmud/2ZbVX8wF83bc3LGr9Zyp8lx5PTE3u/VxxJEdneJPGisBSUQcjogjd1nH+SdvHOt27M7xN+xctmcD1pmqX0U8Ue//hWiLv5CsvD45tjsq0yfGiqtiuZ9+vvZmt/rXEP+myPp/b8frvxH/UNKyXruw5pXLa7991vWeZnR11/+LzeNrqrw0IIqL4oPy3Nzl8Yidyev1Rjfvn1g6t8gX5bP4R453Hv8HY+mVOBoR2UX8YEQ8FBEP5333SEQ8GhHHV4j/h5cfe7fbse3Q/1Nt/T/UWqS1/5sSO6N9T+dE6cL337T+xaXk6t7/TtVSI/me1bz/raZdWWJdLx4AAAD8S6QRsT+SdLSRTtPR0fr/8B+KvWllZnbuqbMz71+aqn9HYCgG0uJJ12DT89Dx/La+yE+05U/mz42/KO2p5UcnZypTvQ4e+ty+LuM/83up160DNp3va0H/Mv6hfxn/0L+Mf+hfHcb/nl60A9h6nT7/P+pBO4Ct1zb+LftBH2mM/6S37QC2nud/0L+ax78pAPSN2T1x5y/JS0gsS0S6LZqxMYlkk0fB/l4HuPZEr9+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANsY/AQAA//9couxY") r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r2, 0x0, 0x0) 1m30.808446014s ago: executing program 3 (id=239): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000018028000001294", 0x2e}], 0x1}, 0x4058880) 1m28.556379123s ago: executing program 3 (id=242): r0 = socket$nl_route(0x10, 0x3, 0x0) getresgid(0x0, 0x0, &(0x7f00000006c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) read$FUSE(r2, 0x0, 0x0) r3 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x50, r3, 0xffffe000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='mm_page_free_batched\x00', r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="50000000102026cd5a56f10000000000000000", @ANYRES32=0x0, @ANYBLOB="0400000002000000300012800b00010067656e65766500002000028008000200000000001400070000000000000000000000ffffffffffff"], 0x50}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x10) r7 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0xd112, 0x1046, 0x0, 0x264}) io_uring_register$IORING_REGISTER_FILES2(r7, 0xd, &(0x7f00000004c0)={0x1, 0x1, 0x0, &(0x7f0000000300)=[{0x0}], 0x0}, 0x20) 1m25.693928339s ago: executing program 3 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000286c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1m23.641372528s ago: executing program 3 (id=253): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m19.644862973s ago: executing program 33 (id=253): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 12.682585297s ago: executing program 6 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="080026006c09000008009f000800"], 0x34}}, 0x0) 12.145784916s ago: executing program 5 (id=431): syz_usb_connect(0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc)=0x4, 0x5, 0x4, 0x0, &(0x7f0000048000), 0x4000000) map_shadow_stack(&(0x7f000045a000/0x2000)=nil, 0x2000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x8d}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000095b000/0x4000)=nil, 0x4000, 0x2000009, 0x25813, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=r4, @ANYBLOB="2c63726561746f723dbd3d66f12c63726561746f723d64eb8ba92c6e6f6465636f6d706f73652c756d61736b3d3030303030303030303030303030303030303030303032000000003d", @ANYRESHEX=r3, @ANYRESOCT], 0x3, 0x6a4, &(0x7f0000001b40)="$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") chdir(&(0x7f0000000000)='./file0\x00') connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x600) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r5 = syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r5}, 0x18) memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r6, 0x0, 0xf69}, 0x18) r7 = timerfd_create(0x7, 0x80800) timerfd_settime(r7, 0x3, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r7, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 11.912262614s ago: executing program 4 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x820, &(0x7f0000000f00)=ANY=[], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x4004f51b, 0x0) 11.690913678s ago: executing program 6 (id=434): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r3}], 0x1, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2a05004, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xd8, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x70}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8040}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4830) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) preadv(r6, &(0x7f0000001640)=[{&(0x7f00000014c0)=""/233, 0xe9}], 0x1, 0x7, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route(r6, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@delneigh={0x44, 0x1d, 0x8, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, r7, 0x13, 0x29, 0x9}, [@NDA_MASTER={0x8, 0x9, 0x80000000}, @NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0xc091) syz_emit_ethernet(0x101a, &(0x7f0000001700)={@random="98e8b2bb1e79", @empty, @void, {@mpls_mc={0x8848, {[{0x40, 0x0, 0x1}, {0xffff}, {0x1}], @generic="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"}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r8, 0x9}, 0x8) r9 = syz_io_uring_complete(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x36, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x35}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x338}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_query, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x1c}, 0x94) 9.892719908s ago: executing program 4 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x445e, &(0x7f00000054c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) 9.343653194s ago: executing program 6 (id=437): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 8.608984746s ago: executing program 4 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r1 = syz_usb_connect(0x5, 0x3c, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 8.264616106s ago: executing program 5 (id=440): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000003c0)=0x498e, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000036c0)={0xa, 0x4e01, 0x800, @remote}, 0x1c, 0x0, 0x0, 0x0, 0xfe80}}], 0x1, 0x24004040) 8.048644263s ago: executing program 1 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000b0ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.652705724s ago: executing program 5 (id=442): io_uring_setup(0x6489, &(0x7f0000000240)={0x0, 0x2361, 0x800, 0x1, 0x8d}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x1, 0x7fff7ffd}]}) r1 = epoll_create(0x6) epoll_pwait2(r1, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$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") 7.428603363s ago: executing program 1 (id=443): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00003e1000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 6.866957325s ago: executing program 1 (id=444): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x802000000}, {0x0, 0x5, 0x4}], 0x2, 0x100000c01, 0x0, 0x0, 0x0, 0x6e}) 6.358623942s ago: executing program 1 (id=445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x800000001000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x500, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x9}, 0x0, 0x0, 0x0, 0xff, 0x4}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x0, 0x4, 0x0, 0x4}]}]}, 0x13c}}, 0x0) 5.936025374s ago: executing program 5 (id=446): socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x80802, 0x0) socket$kcm(0x2a, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304ffffffef0000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 5.660721301s ago: executing program 6 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002cfbe4dfc52d07fe6b9670e93117085d789a4c3b76a7c8b3d273fd5392199ca0f5b52546f6050830f5a3ad42abe1a3b5b20f6e31132b03caec94aad2851bd2e7926212"], 0x1, 0xdeb, &(0x7f0000000e40)="$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") 5.58508955s ago: executing program 1 (id=448): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000000000403fd03f180100002020782500000000002020207b1af8ff000000006d0afeff000000000701b092f8ffffffb702000008000000b70300000f200000a500fe"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d3, &(0x7f00000006c0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)={0xe20c2, 0x0, 0x15}, 0xfffffffffffffec7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x100}, 0x4040084) 5.231703781s ago: executing program 0 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) 5.153293338s ago: executing program 6 (id=450): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000068000001294", 0x2e}], 0x1}, 0x4058880) 4.865502633s ago: executing program 0 (id=451): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x1000012, &(0x7f00000003c0)=ANY=[], 0x0, 0x314, &(0x7f0000000740)="$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") 4.640527036s ago: executing program 4 (id=452): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000a80", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 4.509924544s ago: executing program 5 (id=453): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) 4.269961169s ago: executing program 1 (id=454): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) pwrite64(r2, &(0x7f0000000080)="9b", 0x1, 0x8480c5d) fallocate(r2, 0x3, 0x2, 0x8000c62) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file1\x00', 0x200210, &(0x7f0000000040)=ANY=[], 0x3, 0x62c, &(0x7f0000000640)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$FS_IOC_GETFSSYSFSPATH(r3, 0x80811501, &(0x7f0000000000)={0x80}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x104890, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3ff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f0000000dc0)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000000)) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"/522], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000bc0)={r8}, &(0x7f0000000c80)=0x8) inotify_init() ioctl$sock_inet_udp_SIOCINQ(r5, 0x8002f515, 0x0) 4.088647183s ago: executing program 0 (id=455): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x850) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe9c}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0x9}], 0x4, 0x4022, 0x0) 4.062971431s ago: executing program 6 (id=456): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab05010300010102030109022400"], 0x0) fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) socket(0x10, 0x803, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGFLAG(r4, 0x8004480e, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0xc048aeca, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000680)={0x20, 0x17, 0x4, "c9595138"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.564934499s ago: executing program 5 (id=457): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x4, 0x2}, 0x6) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x5, 0xfffffffd}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x3eb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x0, 0x13}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x4dd}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) recvfrom$netrom(r3, &(0x7f00000000c0)=""/63, 0x3f, 0x10000, &(0x7f00000001c0)={{0x3, @null, 0x7}, [@null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) ppoll(&(0x7f0000000440)=[{r4, 0x4410}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)='F', 0x1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000c80)={{0x12, 0x1, 0x220, 0x12, 0x66, 0x29, 0x8, 0x499, 0x500e, 0x63bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x1, 0xe0, 0x5, [{{0x9, 0x4, 0x9a, 0x0, 0x1, 0x5a, 0x9c, 0x73, 0x5c, [], [{{0x9, 0x5, 0xf, 0x1, 0x20, 0x3, 0x2, 0x4}}]}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.488229067s ago: executing program 4 (id=458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x20004100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000003800)={0xdc, 0x0, 0x7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_mirred={0x90, 0x2, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0xc, 0x10000000, 0x4, 0x10001}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x80000001, 0xffffffffffffffff, 0x80, 0xd}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x3, 0x20000000, 0x8, 0x1}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x7c, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x4d, 0x6, "fa090053a6676682d5f9deb5977358ba1776035ad3a7d4a020401823a2f6df14bf7b0ff0f6066b04ff4271caa517f0eff9c9df2ed3afacf0ae63c4fe4b43271f38048956f5ba12ccd4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xb0, 0x20, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x79, 0x6, "5c16f4119fa7b43dc349ad0da38eddb3418cc8dc15ed908f4a08cb2556c71c9a1682af6779941876ca77fa78f4bc77a3b0751e7e69ab23bdb9594bb530d232b67cb056ee4f0ecfd4e00ddccf1a4b35b3c418a640af9ff217d639ec6f4f25be58a901206bd171dba00302433d8226ed8610b3452f63"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x138, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0xfffffffffffffffb, 0x4, 0x7959}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbf, 0x10001, 0x0, 0x0, 0xde}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x2, 0xffffffff, 0x2f}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6c85, 0x281, 0x10000000, 0x3, 0x5}, 0x14}}]}, {0x99, 0x6, "f0fac21d539e4c1a3b47e298ce10a7056388cdaf74b23c39133617f424c77e4d6a84783ab0afb8bad3c75d9fd2dfd5ac33cb07f998d0c1ed32fcb7f3bf0357809938ecd04c1e042fa5c8deec5b5e403ffb94545755b68a223cc3e17642e8ad1d6dcb518b7757cc5b364fabba36f935b90a1e3dd2a6fb74896d39447c6149d0380afd8f941ead16662b2f5cfbf762192115622a0bd4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) accept4$unix(r2, &(0x7f0000000540)=@abs, &(0x7f0000000340)=0x6e, 0x81000) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000300)={'gre0\x00'}) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000000)='./file0\x00') pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.14465723s ago: executing program 0 (id=459): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) close_range(0xffffffffffffffff, r0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a80)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)={0x28, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x150, r4, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdf8f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r5 = creat(&(0x7f0000000180)='./file0\x00', 0x38) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) write$qrtrtun(r5, &(0x7f0000000100)="58f0", 0x2) userfaultfd(0xc0800) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r8}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r10}, 0x10) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r10, 0x0, 0x180000}, 0x18) close(r9) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) close(r11) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x1], 0x0, 0x0, 0x1}}, 0x40) 1.373345537s ago: executing program 0 (id=460): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001010000089000000000000"], 0x50) 100.138108ms ago: executing program 4 (id=461): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x9, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) kernel console output (not intermixed with test programs): ] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 232.934357][ T5818] ocfs2: Unmounting device (7,4) on (node local) [ 233.001264][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.013627][ T11] usb 4-1: config 0 has no interfaces? [ 233.088427][ T11] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 233.097985][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.108376][ T11] usb 4-1: Product: syz [ 233.112742][ T11] usb 4-1: Manufacturer: syz [ 233.119186][ T11] usb 4-1: SerialNumber: syz [ 233.259059][ T11] usb 4-1: config 0 descriptor?? [ 233.909294][ T6299] loop1: detected capacity change from 0 to 512 [ 233.981964][ T6299] EXT4-fs (loop1): Test dummy encryption mode enabled [ 234.040994][ T6299] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 234.106396][ T6299] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 234.116796][ T6299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.296682][ T5873] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 234.297966][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 234.329072][ T6299] EXT4-fs (loop1): shut down requested (1) [ 234.506418][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 234.540513][ T5873] usb 5-1: config 8 has an invalid interface number: 203 but max is 0 [ 234.549360][ T5873] usb 5-1: config 8 has no interface number 0 [ 234.555812][ T5873] usb 5-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 234.572461][ T5873] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid maxpacket 1040, setting to 1024 [ 234.585585][ T5873] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024 [ 234.597443][ T5873] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023 [ 234.608091][ T5873] usb 5-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid wMaxPacketSize 0 [ 234.618563][ T5873] usb 5-1: config 8 interface 203 has no altsetting 0 [ 234.639271][ T5873] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 234.648764][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.657256][ T5873] usb 5-1: Product: syz [ 234.661623][ T5873] usb 5-1: Manufacturer: syz [ 234.670403][ T5873] usb 5-1: SerialNumber: syz [ 234.706836][ T6301] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 234.716087][ T6301] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 234.808674][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.204066][ T6312] loop2: detected capacity change from 0 to 1024 [ 235.307456][ C1] port100 5-1:8.203: NFC: Urb failure (status -71) [ 235.316822][ C1] port100 5-1:8.203: NFC: Urb failure (status -71) [ 235.355518][ T5873] port100 5-1:8.203: NFC: Could not get supported command types [ 235.446014][ T6312] hfsplus: bad catalog entry type [ 235.899499][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 236.265322][ T11] usb 4-1: USB disconnect, device number 4 [ 236.415886][ T5873] usb 5-1: USB disconnect, device number 3 [ 236.856502][ T6325] netlink: 'syz.3.111': attribute type 1 has an invalid length. [ 237.132357][ T6325] netlink: 40 bytes leftover after parsing attributes in process `syz.3.111'. [ 237.161148][ T5819] hfsplus: bad catalog entry type [ 237.626450][ T6331] loop4: detected capacity change from 0 to 1024 [ 237.751253][ T4374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.817026][ T6331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.053852][ T4374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.074128][ T6323] loop1: detected capacity change from 0 to 8192 [ 238.084806][ T6331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 238.124181][ T6336] loop0: detected capacity change from 0 to 512 [ 238.206429][ T6339] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 238.216187][ T6339] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 238.242178][ T6331] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 238.260133][ T6331] EXT4-fs (loop4): This should not happen!! Data will be lost [ 238.260133][ T6331] [ 238.271774][ T6331] EXT4-fs (loop4): Total free blocks count 0 [ 238.278130][ T6331] EXT4-fs (loop4): Free/Dirty block details [ 238.284199][ T6331] EXT4-fs (loop4): free_blocks=4293918720 [ 238.290442][ T6331] EXT4-fs (loop4): dirty_blocks=80 [ 238.295075][ T6336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.295906][ T6331] EXT4-fs (loop4): Block reservation details [ 238.309967][ T6336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 238.315436][ T6331] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 238.413874][ T4374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.418938][ T6337] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 238.474521][ T6336] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 238.525687][ T6336] EXT4-fs (loop0): 1 truncate cleaned up [ 238.533598][ T6336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.627133][ T4374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.251509][ T4374] bridge_slave_1: left allmulticast mode [ 239.258054][ T4374] bridge_slave_1: left promiscuous mode [ 239.264689][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.352066][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.402212][ T4374] bridge_slave_0: left allmulticast mode [ 239.408255][ T4374] bridge_slave_0: left promiscuous mode [ 239.414852][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.086528][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.138263][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.180982][ T4374] bond0 (unregistering): Released all slaves [ 240.980818][ T4374] hsr_slave_0: left promiscuous mode [ 241.652953][ T6355] loop0: detected capacity change from 0 to 32768 [ 241.717707][ T4374] hsr_slave_1: left promiscuous mode [ 241.726190][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.738277][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.808646][ T6359] loop3: detected capacity change from 0 to 32768 [ 241.888511][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.893811][ T6359] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 241.896341][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.133961][ T4374] veth1_macvtap: left promiscuous mode [ 242.145514][ T4374] veth0_macvtap: left promiscuous mode [ 242.151464][ T4374] veth1_vlan: left promiscuous mode [ 242.157328][ T4374] veth0_vlan: left promiscuous mode [ 242.269093][ T6359] XFS (loop3): Ending clean mount [ 242.873857][ T6374] netlink: 'syz.4.123': attribute type 10 has an invalid length. [ 243.283704][ T4374] team0 (unregistering): Port device team_slave_1 removed [ 243.361229][ T4374] team0 (unregistering): Port device team_slave_0 removed [ 243.511835][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.526012][ T5817] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.536528][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.554247][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.568251][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.584299][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.521898][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 244.537529][ T6383] netlink: 64 bytes leftover after parsing attributes in process `syz.4.126'. [ 245.476075][ T6384] loop3: detected capacity change from 0 to 40427 [ 245.497633][ T6384] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 245.505740][ T6384] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 245.627981][ T5813] Bluetooth: hci4: command tx timeout [ 245.641726][ T6384] F2FS-fs (loop3): invalid crc value [ 246.003644][ T6384] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.089632][ T6384] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 246.097109][ T6384] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 246.404939][ T6403] loop4: detected capacity change from 0 to 128 [ 246.669194][ T6405] loop0: detected capacity change from 0 to 256 [ 246.716150][ T6407] tipc: Started in network mode [ 246.721445][ T6407] tipc: Node identity ac14140f, cluster identity 4711 [ 246.729628][ T6407] tipc: New replicast peer: 255.255.255.255 [ 246.739247][ T6407] tipc: Enabled bearer , priority 10 [ 246.758094][ T6405] exfat: Deprecated parameter 'codepage' [ 246.763948][ T6405] exfat: Bad value for 'codepage' [ 247.205397][ T6377] chnl_net:caif_netlink_parms(): no params data found [ 247.705515][ T5813] Bluetooth: hci4: command tx timeout [ 247.803087][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.803087][ T1327] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 247.817128][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.817128][ T1327] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 247.831074][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.831074][ T1327] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 247.845035][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.845035][ T1327] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 247.858956][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.858956][ T1327] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 247.872919][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.872919][ T1327] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 247.890300][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.890300][ T1327] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 247.905527][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.905527][ T1327] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 247.919385][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.919385][ T1327] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 247.934278][ T1327] kworker/u8:8: attempt to access beyond end of device [ 247.934278][ T1327] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 247.970698][ T9] tipc: Node number set to 2886997007 [ 248.414705][ T6419] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 248.426864][ T6419] syz_tun: entered promiscuous mode [ 248.457289][ T6419] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 248.707493][ T6422] program syz.4.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.785729][ T5813] Bluetooth: hci4: command tx timeout [ 249.941124][ T6377] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.949369][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.957635][ T6377] bridge_slave_0: entered allmulticast mode [ 249.967176][ T6377] bridge_slave_0: entered promiscuous mode [ 250.118027][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.131581][ T6377] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.140637][ T6377] bridge_slave_1: entered allmulticast mode [ 250.150360][ T6377] bridge_slave_1: entered promiscuous mode [ 250.591338][ T6446] loop4: detected capacity change from 0 to 1024 [ 250.621892][ T6377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.754600][ T6377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.836629][ T6452] netlink: 'syz.0.142': attribute type 8 has an invalid length. [ 251.187162][ T6452] loop0: detected capacity change from 0 to 1024 [ 251.229267][ T6377] team0: Port device team_slave_0 added [ 251.285903][ T6377] team0: Port device team_slave_1 added [ 251.570957][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.579747][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.607236][ T6377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.627106][ T6377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.634226][ T6377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.662147][ T6377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.898906][ T5813] Bluetooth: hci4: command tx timeout [ 252.244530][ T6377] hsr_slave_0: entered promiscuous mode [ 252.261306][ T6377] hsr_slave_1: entered promiscuous mode [ 252.270218][ T6377] debugfs: 'hsr0' already exists in 'hsr' [ 252.276310][ T6377] Cannot create hsr debugfs directory [ 252.482141][ T6467] netlink: 'syz.4.145': attribute type 10 has an invalid length. [ 252.777401][ T4076] hfsplus: b-tree write err: -5, ino 4 [ 253.263611][ T6466] loop3: detected capacity change from 0 to 40427 [ 253.331090][ T6466] F2FS-fs (loop3): build fault injection rate: 14 [ 253.337981][ T6466] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 253.362172][ T6466] F2FS-fs (loop3): invalid crc value [ 253.430332][ C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb1/0x1010 [ 253.476752][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of bio_endio+0xeb1/0x1010 [ 253.691760][ T6478] FAULT_INJECTION: forcing a failure. [ 253.691760][ T6478] name failslab, interval 1, probability 0, space 0, times 0 [ 253.705126][ T6478] CPU: 0 UID: 0 PID: 6478 Comm: syz.4.149 Not tainted syzkaller #0 PREEMPT(none) [ 253.705261][ T6478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.705345][ T6478] Call Trace: [ 253.705393][ T6478] [ 253.705441][ T6478] __dump_stack+0x26/0x30 [ 253.705609][ T6478] dump_stack_lvl+0x1df/0x270 [ 253.705784][ T6478] dump_stack+0x1e/0x25 [ 253.705935][ T6478] should_fail_ex+0x7dc/0x8a0 [ 253.706100][ T6478] should_failslab+0x15b/0x200 [ 253.706267][ T6478] __kmalloc_noprof+0x182/0x1310 [ 253.706445][ T6478] ? tomoyo_encode+0x626/0xa10 [ 253.706607][ T6478] ? kmsan_get_metadata+0xfb/0x160 [ 253.706763][ T6478] ? kmsan_get_metadata+0xfb/0x160 [ 253.706932][ T6478] tomoyo_encode+0x626/0xa10 [ 253.707129][ T6478] tomoyo_realpath_from_path+0x92e/0x9f0 [ 253.707315][ T6478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.707500][ T6478] tomoyo_path_number_perm+0x1d0/0x7d0 [ 253.707646][ T6478] ? stack_depot_save_flags+0x35/0x7b0 [ 253.707806][ T6478] ? kmsan_get_metadata+0xfb/0x160 [ 253.707960][ T6478] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.708167][ T6478] tomoyo_file_ioctl+0x3d/0x50 [ 253.708349][ T6478] security_file_ioctl+0x141/0x590 [ 253.708493][ T6478] __se_sys_ioctl+0xbb/0x400 [ 253.708651][ T6478] __x64_sys_ioctl+0x97/0xe0 [ 253.708804][ T6478] x64_sys_call+0x1cbc/0x3e20 [ 253.708981][ T6478] do_syscall_64+0xd9/0x210 [ 253.709111][ T6478] ? irqentry_exit+0x16/0x60 [ 253.709280][ T6478] ? clear_bhb_loop+0x40/0x90 [ 253.709430][ T6478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.709572][ T6478] RIP: 0033:0x7f55ffb8eba9 [ 253.709686][ T6478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.709799][ T6478] RSP: 002b:00007f5600961038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.709925][ T6478] RAX: ffffffffffffffda RBX: 00007f55ffdd6090 RCX: 00007f55ffb8eba9 [ 253.710021][ T6478] RDX: 000020000001fac0 RSI: 0000000000008983 RDI: 0000000000000005 [ 253.710107][ T6478] RBP: 00007f5600961090 R08: 0000000000000000 R09: 0000000000000000 [ 253.710190][ T6478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.710269][ T6478] R13: 00007f55ffdd6128 R14: 00007f55ffdd6090 R15: 00007ffeb72fd1b8 [ 253.710401][ T6478] [ 253.870865][ T6466] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 253.890182][ T6478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.894479][ T6466] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50 [ 254.007139][ T6466] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 255.104471][ T6481] loop0: detected capacity change from 0 to 40427 [ 255.168358][ T6481] F2FS-fs (loop0): invalid crc value [ 255.524356][ T6481] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 255.649739][ T6481] F2FS-fs (loop0): Start checkpoint disabled! [ 255.718989][ T6377] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.788345][ T6377] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 255.825862][ T6481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 255.929103][ T6377] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.072225][ T6377] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 257.519803][ T6501] loop1: detected capacity change from 0 to 32768 [ 257.583474][ T6501] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.156 (6501) [ 257.677382][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 257.888314][ T6501] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 257.899067][ T6501] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 257.908303][ T6501] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 257.941988][ T6506] loop3: detected capacity change from 0 to 40427 [ 257.991090][ T6506] F2FS-fs (loop3): invalid crc value [ 258.373087][ T6506] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.417997][ T6506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 258.456499][ T30] audit: type=1800 audit(258.407:10): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 258.653821][ T6501] BTRFS info (device loop1): rebuilding free space tree [ 258.706104][ T6501] BTRFS info (device loop1): disabling free space tree [ 258.713556][ T6501] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 258.726519][ T6501] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 258.764744][ T6501] BTRFS info (device loop1): setting nodatasum [ 258.771464][ T6501] BTRFS info (device loop1): setting nodatacow [ 258.778795][ T6501] BTRFS info (device loop1): enabling ssd optimizations [ 258.786311][ T6501] BTRFS info (device loop1): using spread ssd allocation scheme [ 258.794275][ T6501] BTRFS info (device loop1): turning off barriers [ 258.801151][ T6501] BTRFS info (device loop1): enabling disk space caching [ 258.808674][ T6501] BTRFS info (device loop1): force clearing of disk cache [ 258.837798][ T9] usb 1-1: device descriptor read/all, error -71 [ 258.973561][ T30] audit: type=1800 audit(258.837:11): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.156" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 259.208198][ T5816] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 259.439412][ T5817] bio_check_eod: 3 callbacks suppressed [ 259.439485][ T5817] syz-executor: attempt to access beyond end of device [ 259.439485][ T5817] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 259.465895][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 259.466035][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.466110][ T5817] Call Trace: [ 259.466157][ T5817] [ 259.466205][ T5817] __dump_stack+0x26/0x30 [ 259.466372][ T5817] dump_stack_lvl+0x1df/0x270 [ 259.466541][ T5817] dump_stack+0x1e/0x25 [ 259.466689][ T5817] f2fs_handle_critical_error+0xa6f/0xc20 [ 259.466925][ T5817] f2fs_stop_checkpoint+0x65/0x80 [ 259.467058][ T5817] f2fs_write_end_io+0x101c/0x1bc0 [ 259.467240][ T5817] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 259.467376][ T5817] bio_endio+0xeb1/0x1010 [ 259.467536][ T5817] submit_bio_noacct+0x213/0x2750 [ 259.467753][ T5817] submit_bio+0x57c/0x630 [ 259.467920][ T5817] f2fs_submit_write_bio+0x92/0x250 [ 259.468106][ T5817] __submit_merged_bio+0x16f/0x6a0 [ 259.468283][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.468449][ T5817] __submit_merged_write_cond+0x458/0x9a0 [ 259.468650][ T5817] f2fs_write_data_pages+0x4bb2/0x5480 [ 259.468927][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.469092][ T5817] ? folios_put_refs+0x1/0xb10 [ 259.469262][ T5817] ? filter_irq_stacks+0x49/0x190 [ 259.469393][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.469559][ T5817] ? stack_depot_save_flags+0x35/0x7b0 [ 259.469698][ T5817] ? kmsan_get_metadata+0xfb/0x160 [ 259.469870][ T5817] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 259.470015][ T5817] ? kmsan_get_metadata+0xfb/0x160 [ 259.470170][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.470327][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.470462][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.470594][ T5817] do_writepages+0x3ef/0x860 [ 259.470746][ T5817] ? _raw_spin_unlock+0x30/0x50 [ 259.470905][ T5817] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 259.471112][ T5817] filemap_fdatawrite+0x207/0x260 [ 259.471353][ T5817] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 259.471529][ T5817] f2fs_write_checkpoint+0xfe2/0x2b00 [ 259.471816][ T5817] kill_f2fs_super+0x2ff/0x970 [ 259.471985][ T5817] ? __pfx_kill_f2fs_super+0x10/0x10 [ 259.472131][ T5817] deactivate_locked_super+0xcb/0x3c0 [ 259.472297][ T5817] deactivate_super+0x12f/0x140 [ 259.472445][ T5817] cleanup_mnt+0x6fb/0x780 [ 259.472618][ T5817] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 259.472784][ T5817] ? __pfx___cleanup_mnt+0x10/0x10 [ 259.472965][ T5817] __cleanup_mnt+0x22/0x30 [ 259.473133][ T5817] task_work_run+0x206/0x2b0 [ 259.473300][ T5817] exit_to_user_mode_loop+0x2a6/0x330 [ 259.473465][ T5817] do_syscall_64+0x1e3/0x210 [ 259.473585][ T5817] ? irqentry_exit+0x16/0x60 [ 259.473761][ T5817] ? clear_bhb_loop+0x40/0x90 [ 259.473905][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.474047][ T5817] RIP: 0033:0x7f295298fed7 [ 259.474146][ T5817] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 259.474259][ T5817] RSP: 002b:00007ffede00ebb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 259.474385][ T5817] RAX: 0000000000000000 RBX: 00007f2952a11c05 RCX: 00007f295298fed7 [ 259.474474][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffede00ec70 [ 259.474558][ T5817] RBP: 00007ffede00ec70 R08: 0000000000000000 R09: 0000000000000000 [ 259.474641][ T5817] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffede00fd00 [ 259.474738][ T5817] R13: 00007f2952a11c05 R14: 000000000003f26b R15: 00007ffede00fd40 [ 259.474861][ T5817] [ 259.820330][ T5817] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 259.837464][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 259.837606][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.837692][ T5817] Call Trace: [ 259.837741][ T5817] [ 259.837789][ T5817] __dump_stack+0x26/0x30 [ 259.837959][ T5817] dump_stack_lvl+0x1df/0x270 [ 259.838134][ T5817] dump_stack+0x1e/0x25 [ 259.838287][ T5817] f2fs_handle_critical_error+0xa6f/0xc20 [ 259.838520][ T5817] f2fs_stop_checkpoint+0x65/0x80 [ 259.838656][ T5817] f2fs_write_end_io+0x101c/0x1bc0 [ 259.838848][ T5817] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 259.838984][ T5817] bio_endio+0xeb1/0x1010 [ 259.839148][ T5817] submit_bio_noacct+0x213/0x2750 [ 259.839365][ T5817] submit_bio+0x57c/0x630 [ 259.839534][ T5817] f2fs_submit_write_bio+0x92/0x250 [ 259.839722][ T5817] __submit_merged_bio+0x16f/0x6a0 [ 259.839903][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.840079][ T5817] __submit_merged_write_cond+0x458/0x9a0 [ 259.840288][ T5817] f2fs_write_data_pages+0x4bb2/0x5480 [ 259.840564][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.840738][ T5817] ? folios_put_refs+0x1/0xb10 [ 259.840911][ T5817] ? filter_irq_stacks+0x49/0x190 [ 259.841042][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.841214][ T5817] ? stack_depot_save_flags+0x35/0x7b0 [ 259.841353][ T5817] ? kmsan_get_metadata+0xfb/0x160 [ 259.841522][ T5817] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 259.841681][ T5817] ? kmsan_get_metadata+0xfb/0x160 [ 259.841834][ T5817] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.841991][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.842122][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 259.842251][ T5817] do_writepages+0x3ef/0x860 [ 259.842398][ T5817] ? _raw_spin_unlock+0x30/0x50 [ 259.842557][ T5817] ? wbc_attach_and_unlock_inode+0x131/0x680 [ 259.842779][ T5817] filemap_fdatawrite+0x207/0x260 [ 259.843014][ T5817] f2fs_sync_dirty_inodes+0x2ab/0x9e0 [ 259.843193][ T5817] f2fs_write_checkpoint+0xfe2/0x2b00 [ 259.843467][ T5817] kill_f2fs_super+0x2ff/0x970 [ 259.843630][ T5817] ? __pfx_kill_f2fs_super+0x10/0x10 [ 259.843781][ T5817] deactivate_locked_super+0xcb/0x3c0 [ 259.843945][ T5817] deactivate_super+0x12f/0x140 [ 259.844095][ T5817] cleanup_mnt+0x6fb/0x780 [ 259.844271][ T5817] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 259.844434][ T5817] ? __pfx___cleanup_mnt+0x10/0x10 [ 259.844616][ T5817] __cleanup_mnt+0x22/0x30 [ 259.844800][ T5817] task_work_run+0x206/0x2b0 [ 259.844969][ T5817] exit_to_user_mode_loop+0x2a6/0x330 [ 259.845136][ T5817] do_syscall_64+0x1e3/0x210 [ 259.845262][ T5817] ? irqentry_exit+0x16/0x60 [ 259.845429][ T5817] ? clear_bhb_loop+0x40/0x90 [ 259.845574][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.845724][ T5817] RIP: 0033:0x7f295298fed7 [ 259.845824][ T5817] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 259.845938][ T5817] RSP: 002b:00007ffede00ebb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 259.846063][ T5817] RAX: 0000000000000000 RBX: 00007f2952a11c05 RCX: 00007f295298fed7 [ 259.846150][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffede00ec70 [ 259.846233][ T5817] RBP: 00007ffede00ec70 R08: 0000000000000000 R09: 0000000000000000 [ 259.846317][ T5817] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffede00fd00 [ 259.846404][ T5817] R13: 00007f2952a11c05 R14: 000000000003f26b R15: 00007ffede00fd40 [ 259.846529][ T5817] [ 260.194286][ T5817] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 260.356046][ T6377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.817867][ T6377] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.996123][ T4076] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.003674][ T4076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.128813][ T6541] loop0: detected capacity change from 0 to 128 [ 261.214776][ T6541] zonefs: Unexpected value for 'explicit-open' [ 261.353363][ T4076] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.360954][ T4076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.265890][ T6552] mmap: syz.0.165 (6552): VmData 175878144 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 263.569608][ T6561] warning: `syz.4.167' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 264.305893][ T6562] loop0: detected capacity change from 0 to 32768 [ 264.507042][ T6558] loop4: detected capacity change from 0 to 32768 [ 264.626329][ T6558] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 265.374318][ T5818] ocfs2: Unmounting device (7,4) on (node local) [ 265.526502][ T6377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.435890][ T1327] wlan1: Trigger new scan to find an IBSS to join [ 266.988919][ T6584] loop4: detected capacity change from 0 to 4096 [ 267.096795][ T6584] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 267.762945][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 267.817247][ T6584] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 268.102222][ T6609] netlink: 232 bytes leftover after parsing attributes in process `syz.4.172'. [ 268.114699][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 268.738377][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.177'. [ 268.807848][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 269.055968][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 269.076137][ T6620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.180'. [ 269.270160][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.280904][ T9] usb 2-1: config 0 has no interface number 0 [ 269.288258][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 269.297671][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.570441][ T9] usb 2-1: config 0 descriptor?? [ 269.637732][ T9] cp210x 2-1:0.1: cp210x converter detected [ 270.012397][ T9] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 270.113736][ T6377] veth0_vlan: entered promiscuous mode [ 270.269346][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 270.328396][ T6377] veth1_vlan: entered promiscuous mode [ 270.458811][ T4374] tipc: Subscription rejected, illegal request [ 270.623392][ T6614] process 'syz.1.179' launched './file1' with NULL argv: empty string added [ 271.172843][ T6377] veth0_macvtap: entered promiscuous mode [ 271.268760][ T6377] veth1_macvtap: entered promiscuous mode [ 271.467722][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.597295][ T6377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.607935][ T6633] loop1: detected capacity change from 0 to 40427 [ 271.679496][ T1327] wlan1: Trigger new scan to find an IBSS to join [ 271.730374][ T6633] F2FS-fs (loop1): invalid crc value [ 271.930436][ T4218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.012897][ T6641] 9pnet_fd: Insufficient options for proto=fd [ 272.062465][ T6633] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 272.073427][ T6633] F2FS-fs (loop1): Start checkpoint disabled! [ 272.082108][ T4187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.260455][ T4187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.377964][ T4187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.588345][ T9] usb 2-1: USB disconnect, device number 3 [ 272.663391][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 272.737554][ T9] cp210x 2-1:0.1: device disconnected [ 272.791844][ T58] wlan1: Creating new IBSS network, BSSID 76:ce:57:05:e8:10 [ 272.942210][ T6641] loop4: detected capacity change from 0 to 2048 [ 273.038711][ T6641] nilfs2: Unknown parameter '/97dz5BHKmz'&r-ݐ+8u1% vN8NGO0Y;ʁk| k~./file2' [ 273.265585][ T6648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.651779][ T6654] loop3: detected capacity change from 0 to 512 [ 273.762353][ T6654] EXT4-fs: Ignoring removed oldalloc option [ 273.816698][ T5873] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 273.849567][ T6653] loop0: detected capacity change from 0 to 32768 [ 273.859670][ T6653] BTRFS warning: excessive commit interval 2147483647, use with care [ 273.875571][ T6653] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.189 (6653) [ 273.916225][ T6654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 273.950314][ T6653] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.965787][ T6653] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 273.975032][ T6653] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 274.105836][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 274.162784][ T5873] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 274.171894][ T5873] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 274.181644][ T5873] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 274.188264][ T6654] EXT4-fs (loop3): 1 truncate cleaned up [ 274.201204][ T6654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.239169][ T6653] BTRFS info (device loop0): rebuilding free space tree [ 274.278882][ T6653] BTRFS info (device loop0): disabling free space tree [ 274.286346][ T6653] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 274.299963][ T6653] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 274.338179][ T6653] BTRFS info (device loop0): setting nodatasum [ 274.344576][ T6653] BTRFS info (device loop0): setting nodatacow [ 274.351881][ T6653] BTRFS info (device loop0): turning off barriers [ 274.358808][ T6653] BTRFS info (device loop0): disabling tree log [ 274.365468][ T6653] BTRFS info (device loop0): turning on sync discard [ 274.372337][ T6653] BTRFS info (device loop0): enabling disk space caching [ 274.379647][ T6653] BTRFS info (device loop0): force clearing of disk cache [ 274.387189][ T6653] BTRFS info (device loop0): doing ref verification [ 274.393978][ T6653] BTRFS info (device loop0): max_inline set to 0 [ 274.424745][ T5873] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 274.434694][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.443135][ T5873] usb 2-1: Product: syz [ 274.447671][ T5873] usb 2-1: Manufacturer: syz [ 274.453372][ T5873] usb 2-1: SerialNumber: syz [ 274.586211][ T5873] usb 2-1: config 0 descriptor?? [ 274.625585][ T5812] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 274.667788][ T5873] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 274.999216][ T5873] usb 2-1: USB disconnect, device number 4 [ 275.525880][ T6686] loop4: detected capacity change from 0 to 64 [ 276.179809][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.100433][ T6700] loop4: detected capacity change from 0 to 512 [ 277.232608][ T6700] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 277.242151][ T6700] EXT4-fs (loop4): ea_inode feature is not supported for Hurd [ 277.764476][ T6708] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 277.796267][ T6708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.811328][ T6708] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 277.936330][ T6708] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 277.944261][ T6708] netlink: 40 bytes leftover after parsing attributes in process `syz.3.196'. [ 277.957644][ T6708] batadv0: entered promiscuous mode [ 277.963053][ T6708] batadv0: entered allmulticast mode [ 278.020420][ T6708] bond0: (slave batadv0): Releasing backup interface [ 278.074464][ T6708] bridge0: port 3(batadv0) entered blocking state [ 278.081669][ T6708] bridge0: port 3(batadv0) entered disabled state [ 278.470551][ T4374] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 278.480343][ T4374] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 278.982263][ T6715] loop0: detected capacity change from 0 to 32768 [ 279.051035][ T6715] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 279.534361][ T6715] XFS (loop0): Ending clean mount [ 279.895685][ T30] audit: type=1326 audit(279.847:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.4.201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ffb8eba9 code=0x0 [ 280.639003][ T5812] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 280.922079][ T6740] loop4: detected capacity change from 0 to 32768 [ 280.947938][ T6740] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.201 (6740) [ 280.983832][ T6740] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.995950][ T6740] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 281.059306][ T6742] mmap: syz.3.203 (6742) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.373332][ T6742] netlink: 798 bytes leftover after parsing attributes in process `syz.3.203'. [ 281.494526][ T6740] BTRFS info (device loop4): enabling ssd optimizations [ 281.502212][ T6740] BTRFS info (device loop4): enabling free space tree [ 282.022077][ T4098] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 283.029880][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.423353][ T6773] fuse: Bad value for 'fd' [ 283.458049][ T6779] fuse: Bad value for 'fd' [ 283.528500][ T6779] FAULT_INJECTION: forcing a failure. [ 283.528500][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 283.542017][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(none) [ 283.542155][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 283.542238][ T6779] Call Trace: [ 283.542285][ T6779] [ 283.542332][ T6779] __dump_stack+0x26/0x30 [ 283.542495][ T6779] dump_stack_lvl+0x1df/0x270 [ 283.542660][ T6779] dump_stack+0x1e/0x25 [ 283.542809][ T6779] should_fail_ex+0x7dc/0x8a0 [ 283.542972][ T6779] should_failslab+0x15b/0x200 [ 283.543135][ T6779] __kvmalloc_node_noprof+0x24c/0x1530 [ 283.543330][ T6779] ? seq_read_iter+0x4a0/0x2200 [ 283.543472][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 283.543640][ T6779] seq_read_iter+0x4a0/0x2200 [ 283.543781][ T6779] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 283.543935][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.544096][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 283.544272][ T6779] seq_read+0x592/0x670 [ 283.544438][ T6779] ? __pfx_seq_read+0x10/0x10 [ 283.544568][ T6779] vfs_read+0x279/0xf90 [ 283.544716][ T6779] ? stack_depot_save_flags+0x35/0x7b0 [ 283.544856][ T6779] ? kmsan_get_metadata+0xfb/0x160 [ 283.545010][ T6779] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 283.545171][ T6779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 283.545338][ T6779] __x64_sys_read+0x1fb/0x4d0 [ 283.545494][ T6779] x64_sys_call+0x2f9c/0x3e20 [ 283.545646][ T6779] do_syscall_64+0xd9/0x210 [ 283.545756][ T6779] ? irqentry_exit+0x16/0x60 [ 283.545900][ T6779] ? clear_bhb_loop+0x40/0x90 [ 283.546024][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.546145][ T6779] RIP: 0033:0x7fbfdd38eba9 [ 283.546236][ T6779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.546334][ T6779] RSP: 002b:00007fbfde290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.546442][ T6779] RAX: ffffffffffffffda RBX: 00007fbfdd5d6180 RCX: 00007fbfdd38eba9 [ 283.546524][ T6779] RDX: 0000000000002020 RSI: 00002000000020c0 RDI: 0000000000000005 [ 283.546596][ T6779] RBP: 00007fbfde290090 R08: 0000000000000000 R09: 0000000000000000 [ 283.546667][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.546733][ T6779] R13: 00007fbfdd5d6218 R14: 00007fbfdd5d6180 R15: 00007ffeb4b7efa8 [ 283.546841][ T6779] [ 284.463880][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.472242][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.240163][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 285.412704][ T6790] loop1: detected capacity change from 0 to 32768 [ 285.437107][ T6790] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.211 (6790) [ 285.475986][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 285.482251][ T6790] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.492923][ T6790] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 285.499176][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.507427][ T6790] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 285.509985][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.579561][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.591115][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.601366][ T11] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.610899][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.659181][ T11] usb 5-1: config 0 descriptor?? [ 285.681712][ T11] hub 5-1:0.0: USB hub found [ 285.707910][ T6807] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.212'. [ 285.887333][ T11] hub 5-1:0.0: 1 port detected [ 285.946701][ T6790] BTRFS info (device loop1): rebuilding free space tree [ 286.000574][ T6790] BTRFS info (device loop1): disabling free space tree [ 286.008075][ T6790] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 286.018243][ T6790] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 286.111490][ T6790] BTRFS info (device loop1): setting nodatasum [ 286.118104][ T6790] BTRFS info (device loop1): setting nodatacow [ 286.126385][ T6790] BTRFS info (device loop1): enabling ssd optimizations [ 286.133540][ T6790] BTRFS info (device loop1): using spread ssd allocation scheme [ 286.142383][ T6790] BTRFS info (device loop1): turning off barriers [ 286.149216][ T6790] BTRFS info (device loop1): enabling disk space caching [ 286.156596][ T6790] BTRFS info (device loop1): force clearing of disk cache [ 286.262640][ T30] audit: type=1800 audit(286.197:13): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.211" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 286.485550][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 286.541448][ T11] hub 5-1:0.0: activate --> -90 [ 287.011859][ T6788] loop4: detected capacity change from 0 to 1024 [ 287.071494][ T6788] hfsplus: Unknown parameter '' [ 287.356943][ T11] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 287.378241][ T6820] loop3: detected capacity change from 0 to 1024 [ 287.383848][ T6817] loop5: detected capacity change from 0 to 32768 [ 287.459525][ T5873] usb 2-1: device descriptor read/64, error -71 [ 287.489345][ T6820] EXT4-fs: Ignoring removed bh option [ 287.494708][ T9] usb 5-1: USB disconnect, device number 4 [ 287.502130][ T11] usb 5-1: Failed to suspend device, error -19 [ 287.728563][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 287.829193][ T6820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.672403][ T5816] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.894095][ T30] audit: type=1326 audit(288.847:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6836 comm="syz.4.217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55ffb8eba9 code=0x0 [ 289.009931][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 289.876732][ T6839] loop4: detected capacity change from 0 to 32768 [ 289.894267][ T6839] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.217 (6839) [ 289.920560][ T6839] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 289.931124][ T6839] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 290.126776][ T6842] +: renamed from syzkaller0 [ 290.278558][ T6839] BTRFS info (device loop4): enabling ssd optimizations [ 290.288702][ T6839] BTRFS info (device loop4): enabling free space tree [ 291.238825][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.247284][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.660802][ T35] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 292.292895][ T6876] netlink: 3 bytes leftover after parsing attributes in process `syz.1.222'. [ 292.547813][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 293.017424][ T6885] bond1: entered allmulticast mode [ 293.557231][ T5873] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 293.638685][ T6881] loop0: detected capacity change from 0 to 4096 [ 293.796080][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 293.905982][ T5873] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 293.917356][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.926372][ T5873] usb 4-1: Product: syz [ 293.930745][ T5873] usb 4-1: Manufacturer: syz [ 293.935774][ T5873] usb 4-1: SerialNumber: syz [ 293.996352][ T5873] usb 4-1: config 0 descriptor?? [ 294.529993][ T5873] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 294.602621][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 294.690726][ T5873] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 294.699262][ T5873] usb 4-1: media controller created [ 294.821752][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 294.885266][ T6894] loop3: detected capacity change from 0 to 512 [ 295.039925][ T6894] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 295.248787][ T6894] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.227: bad orphan inode 16 [ 295.381615][ T6894] ext4_test_bit(bit=15, block=4) = 0 [ 295.387584][ T6894] EXT4-fs (loop3): 1 orphan inode deleted [ 295.398487][ T6894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.505827][ T6915] netlink: 52 bytes leftover after parsing attributes in process `syz.0.233'. [ 295.748694][ T6894] dtv5100: wlen = 0, aborting. [ 295.774742][ T6909] loop5: detected capacity change from 0 to 32768 [ 295.797246][ T6909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.232 (6909) [ 295.872928][ T6909] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 295.884266][ T6909] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 295.927669][ T5873] zl10353_read_register: readreg error (reg=127, ret==0) [ 295.935056][ T5873] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 295.944428][ T5873] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 296.112067][ T5873] usb 4-1: USB disconnect, device number 5 [ 296.240756][ T5873] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 296.420331][ T6909] BTRFS info (device loop5): setting nodatasum [ 296.426999][ T6909] BTRFS info (device loop5): setting nodatacow [ 296.433376][ T6909] BTRFS info (device loop5): enabling free space tree [ 296.440665][ T6909] BTRFS info (device loop5): max_inline set to 0 [ 296.593813][ T6377] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.621497][ T30] audit: type=1326 audit(296.557:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.1.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbfdd38eba9 code=0x0 [ 297.374506][ T5817] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.577896][ T6940] loop1: detected capacity change from 0 to 32768 [ 297.603681][ T6940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.235 (6940) [ 297.655935][ T6940] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 297.666523][ T6940] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 297.779334][ T6943] loop0: detected capacity change from 0 to 128 [ 297.831576][ T6943] zonefs: Unexpected value for 'explicit-open' [ 297.956683][ T6944] netlink: 3 bytes leftover after parsing attributes in process `syz.4.238'. [ 298.048470][ T6940] BTRFS info (device loop1): enabling ssd optimizations [ 298.060225][ T6940] BTRFS info (device loop1): enabling free space tree [ 298.286246][ T6965] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 298.775074][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.236'. [ 299.386657][ T48] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 300.347889][ T5816] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.032223][ T6973] loop0: detected capacity change from 0 to 32768 [ 301.136007][ T6973] gfs2: fsid={@..@\: Trying to join cluster "lock_nolock", "{@..@\" [ 301.144193][ T6973] gfs2: fsid={@..@\: Now mounting FS (format 1801)... [ 301.185985][ T6973] gfs2: fsid={@..@\.s: fatal: invalid metadata block - bh = 19 (type: exp=4, found=5), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 301.201783][ T6973] gfs2: fsid={@..@\.s: about to withdraw this file system [ 301.209365][ T6973] gfs2: fsid={@..@\.s: Journal recovery skipped for jid 0 until next mount. [ 301.218301][ T6973] gfs2: fsid={@..@\.s: Glock dequeues delayed: 0 [ 301.229423][ T6973] gfs2: fsid={@..@\.s: File system withdrawn [ 301.236643][ T6973] CPU: 0 UID: 0 PID: 6973 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(none) [ 301.236793][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 301.236880][ T6973] Call Trace: [ 301.236935][ T6973] [ 301.236984][ T6973] __dump_stack+0x26/0x30 [ 301.237157][ T6973] dump_stack_lvl+0x1df/0x270 [ 301.237333][ T6973] dump_stack+0x1e/0x25 [ 301.237486][ T6973] gfs2_withdraw+0x1182/0x2050 [ 301.237679][ T6973] gfs2_metatype_check_ii+0x11e/0x160 [ 301.237836][ T6973] gfs2_meta_buffer+0x4c7/0x600 [ 301.238035][ T6973] inode_go_instantiate+0xda/0x1e90 [ 301.238168][ T6973] ? queue_delayed_work_on+0x21d/0x350 [ 301.238327][ T6973] ? kmsan_get_metadata+0xfb/0x160 [ 301.238486][ T6973] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 301.238634][ T6973] ? kmsan_get_metadata+0xfb/0x160 [ 301.238794][ T6973] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 301.238962][ T6973] ? __pfx_inode_go_instantiate+0x10/0x10 [ 301.239096][ T6973] gfs2_instantiate+0x24c/0x4b0 [ 301.239256][ T6973] gfs2_glock_wait+0x26a/0x3b0 [ 301.239418][ T6973] gfs2_glock_nq+0x28cf/0x34a0 [ 301.239618][ T6973] check_journal_clean+0xc1/0x4c0 [ 301.239823][ T6973] ? init_journal+0x332e/0x3a30 [ 301.239956][ T6973] ? kmsan_get_metadata+0xfb/0x160 [ 301.240112][ T6973] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 301.240284][ T6973] init_journal+0x332e/0x3a30 [ 301.240454][ T6973] ? init_inodes+0x124/0x510 [ 301.240590][ T6973] ? init_inodes+0x124/0x510 [ 301.240721][ T6973] ? kmsan_get_metadata+0xfb/0x160 [ 301.240877][ T6973] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 301.241050][ T6973] init_inodes+0x124/0x510 [ 301.241198][ T6973] gfs2_fill_super+0x384d/0x3f50 [ 301.241339][ T6973] ? init_locking+0xed/0x500 [ 301.241511][ T6973] get_tree_bdev_flags+0x6e3/0x920 [ 301.241685][ T6973] ? __pfx_gfs2_fill_super+0x10/0x10 [ 301.241828][ T6973] ? __pfx_gfs2_fill_super+0x10/0x10 [ 301.241961][ T6973] ? __pfx_gfs2_get_tree+0x10/0x10 [ 301.242094][ T6973] get_tree_bdev+0x38/0x50 [ 301.242255][ T6973] gfs2_get_tree+0x57/0x350 [ 301.242392][ T6973] ? __pfx_gfs2_get_tree+0x10/0x10 [ 301.242525][ T6973] vfs_get_tree+0xb0/0x5c0 [ 301.242690][ T6973] ? mount_capable+0x99/0x100 [ 301.242843][ T6973] do_new_mount+0x733/0x1420 [ 301.242999][ T6973] ? apparmor_capable+0x32d/0x410 [ 301.243185][ T6973] ? kmsan_get_metadata+0xfb/0x160 [ 301.243371][ T6973] path_mount+0x6db/0x1e90 [ 301.243539][ T6973] ? user_path_at+0x32d/0x3d0 [ 301.243697][ T6973] __se_sys_mount+0x6eb/0x7d0 [ 301.243870][ T6973] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 301.244045][ T6973] __x64_sys_mount+0xe4/0x150 [ 301.244228][ T6973] x64_sys_call+0x3604/0x3e20 [ 301.244409][ T6973] do_syscall_64+0xd9/0x210 [ 301.244540][ T6973] ? irqentry_exit+0x16/0x60 [ 301.244712][ T6973] ? clear_bhb_loop+0x40/0x90 [ 301.244864][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.245021][ T6973] RIP: 0033:0x7fef3919034a [ 301.245126][ T6973] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.245234][ T6973] RSP: 002b:00007fef39f65e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 301.245361][ T6973] RAX: ffffffffffffffda RBX: 00007fef39f65ef0 RCX: 00007fef3919034a [ 301.245458][ T6973] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007fef39f65eb0 [ 301.245554][ T6973] RBP: 0000200000000400 R08: 00007fef39f65ef0 R09: 0000000000200001 [ 301.245647][ T6973] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 301.245742][ T6973] R13: 00007fef39f65eb0 R14: 000000000001260b R15: 0000200000000000 [ 301.245867][ T6973] [ 301.605861][ T6973] gfs2: fsid={@..@\.s: Error -5 locking journal for spectator mount. [ 302.787289][ T4187] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 303.022887][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 304.005615][ T5873] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 304.118312][ T7016] netlink: 3 bytes leftover after parsing attributes in process `syz.5.251'. [ 304.215797][ T5873] usb 5-1: device descriptor read/64, error -71 [ 304.496859][ T5873] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 304.671894][ T4274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.715833][ T5873] usb 5-1: device descriptor read/64, error -71 [ 304.804086][ T7010] loop1: detected capacity change from 0 to 4096 [ 304.835932][ T5873] usb usb5-port1: attempt power cycle [ 304.972816][ T7010] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 305.003776][ T4274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.194692][ T7021] FAULT_INJECTION: forcing a failure. [ 305.194692][ T7021] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 305.209149][ T7021] CPU: 1 UID: 0 PID: 7021 Comm: syz.5.254 Not tainted syzkaller #0 PREEMPT(none) [ 305.209282][ T7021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.209359][ T7021] Call Trace: [ 305.209404][ T7021] [ 305.209452][ T7021] __dump_stack+0x26/0x30 [ 305.209615][ T7021] dump_stack_lvl+0x1df/0x270 [ 305.209782][ T7021] dump_stack+0x1e/0x25 [ 305.209934][ T7021] should_fail_ex+0x7dc/0x8a0 [ 305.210104][ T7021] should_fail_alloc_page+0x222/0x240 [ 305.210278][ T7021] __alloc_frozen_pages_noprof+0x30f/0xf00 [ 305.210463][ T7021] alloc_pages_mpol+0x328/0x860 [ 305.210636][ T7021] alloc_pages_noprof+0x102/0x280 [ 305.210800][ T7021] get_free_pages_noprof+0x39/0xf0 [ 305.210977][ T7021] __pollwait+0x213/0x6f0 [ 305.211143][ T7021] ? __pfx___pollwait+0x10/0x10 [ 305.211299][ T7021] pipe_poll+0x224/0x740 [ 305.211470][ T7021] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 305.211635][ T7021] ? kmsan_get_metadata+0xfb/0x160 [ 305.211798][ T7021] ? __pfx_pipe_poll+0x10/0x10 [ 305.211952][ T7021] do_sys_poll+0xfd0/0x2120 [ 305.212177][ T7021] ? filter_irq_stacks+0x49/0x190 [ 305.212322][ T7021] ? __pfx___pollwait+0x10/0x10 [ 305.212487][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.212658][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.212827][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.213010][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.213180][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.213349][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.213519][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.213683][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.213854][ T7021] ? __pfx_pollwake+0x10/0x10 [ 305.214076][ T7021] ? __se_sys_ppoll+0x68/0x510 [ 305.214233][ T7021] ? __x64_sys_ppoll+0xe4/0x150 [ 305.214400][ T7021] __se_sys_ppoll+0x427/0x510 [ 305.214564][ T7021] ? kmsan_get_metadata+0xfb/0x160 [ 305.214712][ T7021] ? kmsan_get_metadata+0xfb/0x160 [ 305.214861][ T7021] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 305.215038][ T7021] __x64_sys_ppoll+0xe4/0x150 [ 305.215216][ T7021] x64_sys_call+0x2324/0x3e20 [ 305.215385][ T7021] do_syscall_64+0xd9/0x210 [ 305.215510][ T7021] ? irqentry_exit+0x16/0x60 [ 305.215673][ T7021] ? clear_bhb_loop+0x40/0x90 [ 305.215820][ T7021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.215958][ T7021] RIP: 0033:0x7f12ceb8eba9 [ 305.216059][ T7021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.216167][ T7021] RSP: 002b:00007f12cfacd038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 305.216293][ T7021] RAX: ffffffffffffffda RBX: 00007f12cedd5fa0 RCX: 00007f12ceb8eba9 [ 305.216389][ T7021] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 305.216479][ T7021] RBP: 00007f12cfacd090 R08: 0000000000000000 R09: 0000000000000000 [ 305.216561][ T7021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.216639][ T7021] R13: 00007f12cedd6038 R14: 00007f12cedd5fa0 R15: 00007ffc06a07b98 [ 305.216766][ T7021] [ 305.224567][ T4274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.328161][ T5873] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 305.754840][ T7010] ntfs3(loop1): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 305.754840][ T7010] Volume contains 64 bits run: vcn 0, lcn ffffe00000009000, len 13. [ 305.754840][ T7010] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 305.781070][ T7010] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 305.884128][ T5873] usb 5-1: device descriptor read/8, error -71 [ 305.926244][ T4274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.946631][ T7010] ntfs3(loop1): Failed to load $Secure (-95). [ 305.953010][ T7010] ntfs3(loop1): Failed to initialize $Secure (-95). [ 306.128017][ T5873] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 306.229894][ T5873] usb 5-1: device descriptor read/8, error -71 [ 306.356854][ T7010] netlink: 100 bytes leftover after parsing attributes in process `syz.1.248'. [ 306.381138][ T5873] usb usb5-port1: unable to enumerate USB device [ 306.772585][ T4274] bridge0: port 3(batadv0) entered disabled state [ 306.897328][ T4274] bridge_slave_1: left allmulticast mode [ 306.903197][ T4274] bridge_slave_1: left promiscuous mode [ 306.910671][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.807643][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 308.941435][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 308.948278][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 308.955952][ T4274] bridge_slave_0: left allmulticast mode [ 308.963137][ T4274] bridge_slave_0: left promiscuous mode [ 308.969812][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.591625][ T7044] netlink: 108 bytes leftover after parsing attributes in process `syz.4.258'. [ 310.450101][ T4274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.512730][ T4274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.618859][ T4274] bond0 (unregistering): Released all slaves [ 310.683240][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.698372][ T7054] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 310.725693][ T7054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.740669][ T7054] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 310.742049][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.263'. [ 310.818539][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.854893][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.896607][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.914197][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.942664][ T7054] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 310.951294][ T7054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.261'. [ 311.043909][ T7054] batadv0: entered promiscuous mode [ 311.049635][ T7054] batadv0: entered allmulticast mode [ 311.207693][ T7054] bond0: (slave batadv0): Releasing backup interface [ 311.308509][ T7054] bridge0: port 3(batadv0) entered blocking state [ 311.320083][ T7054] bridge0: port 3(batadv0) entered disabled state [ 311.521855][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.263'. [ 311.757869][ T4076] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 311.767925][ T4076] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 312.328483][ T7078] netlink: 3 bytes leftover after parsing attributes in process `syz.4.264'. [ 313.041970][ T7076] loop0: detected capacity change from 0 to 32768 [ 313.052334][ T7076] BTRFS warning: excessive commit interval 2147483643, use with care [ 313.062238][ T7076] btrfs: Deprecated parameter 'usebackuproot' [ 313.068766][ T7076] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 313.069240][ T5820] Bluetooth: hci1: command tx timeout [ 313.080446][ T7076] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.265 (7076) [ 313.123646][ T7076] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.134418][ T7076] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 313.143468][ T7076] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 313.167133][ T4274] hsr_slave_0: left promiscuous mode [ 313.223929][ T4274] hsr_slave_1: left promiscuous mode [ 313.232504][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.240490][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.314634][ T4274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.322929][ T4274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.366893][ T4274] veth1_macvtap: left promiscuous mode [ 313.372635][ T4274] veth0_macvtap: left promiscuous mode [ 313.378857][ T4274] veth1_vlan: left promiscuous mode [ 313.384422][ T4274] veth0_vlan: left promiscuous mode [ 313.425670][ T7076] BTRFS info (device loop0): rebuilding free space tree [ 313.863396][ T7076] BTRFS info (device loop0): disabling free space tree [ 313.870831][ T7076] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 313.882329][ T7076] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 313.912698][ T7105] loop4: detected capacity change from 0 to 512 [ 313.926392][ T7105] EXT4-fs: Ignoring removed oldalloc option [ 313.946513][ T7076] BTRFS info (device loop0): setting nodatasum [ 313.952903][ T7076] BTRFS info (device loop0): enabling ssd optimizations [ 313.965947][ T7076] BTRFS info (device loop0): turning off barriers [ 313.972592][ T7076] BTRFS info (device loop0): turning on flush-on-commit [ 313.985756][ T7076] BTRFS info (device loop0): turning on sync discard [ 313.992652][ T7076] BTRFS info (device loop0): enabling disk space caching [ 314.006022][ T7076] BTRFS info (device loop0): force clearing of disk cache [ 314.013364][ T7076] BTRFS info (device loop0): doing ref verification [ 314.029094][ T7076] BTRFS info (device loop0): trying to use backup root at mount time [ 314.038835][ T7076] BTRFS info (device loop0): max_inline set to 0 [ 314.052088][ T7076] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 314.118573][ T7105] EXT4-fs (loop4): 1 truncate cleaned up [ 314.187607][ T7105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.811120][ T11] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 315.038267][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 315.087568][ T7112] loop1: detected capacity change from 0 to 32768 [ 315.171764][ T11] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.181242][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.188002][ T5820] Bluetooth: hci1: command tx timeout [ 315.189756][ T11] usb 5-1: Product: syz [ 315.199391][ T11] usb 5-1: Manufacturer: syz [ 315.204160][ T11] usb 5-1: SerialNumber: syz [ 315.278031][ T4274] team0 (unregistering): Port device team_slave_1 removed [ 315.306706][ T11] usb 5-1: config 0 descriptor?? [ 315.360458][ T4274] team0 (unregistering): Port device team_slave_0 removed [ 315.418336][ T7112] JBD2: Ignoring recovery information on journal [ 315.536006][ T11] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.736388][ T7112] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 316.053122][ T7125] netlink: 164 bytes leftover after parsing attributes in process `syz.0.272'. [ 316.356147][ T11] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 316.373663][ T7124] loop5: detected capacity change from 0 to 2048 [ 316.437748][ T11] usb 5-1: USB disconnect, device number 9 [ 316.443336][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.684880][ T5816] ocfs2: Unmounting device (7,1) on (node local) [ 316.705071][ T7124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.968642][ T7119] EXT4-fs error (device loop5): __ext4_new_inode:1073: comm syz.5.271: reserved inode found cleared - inode=1 [ 317.230818][ T5820] Bluetooth: hci1: command tx timeout [ 317.367582][ T7053] chnl_net:caif_netlink_parms(): no params data found [ 317.537547][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.362325][ T7154] netlink: 3 bytes leftover after parsing attributes in process `syz.4.278'. [ 319.016520][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.280'. [ 319.267264][ T7162] ipvlan2: entered promiscuous mode [ 319.277749][ T7162] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 319.288746][ T7162] bridge0: port 3(ipvlan2) entered blocking state [ 319.295935][ T7162] bridge0: port 3(ipvlan2) entered disabled state [ 319.305749][ T7162] ipvlan2: entered allmulticast mode [ 319.306257][ T5820] Bluetooth: hci1: command tx timeout [ 319.311201][ T7162] bond0: entered allmulticast mode [ 319.328395][ T7162] bond_slave_0: entered allmulticast mode [ 319.334314][ T7162] bond_slave_1: entered allmulticast mode [ 319.340381][ T7162] syz_tun: entered allmulticast mode [ 319.348610][ T7162] ipvlan2: left allmulticast mode [ 319.354851][ T7162] bond0: left allmulticast mode [ 319.360351][ T7162] bond_slave_0: left allmulticast mode [ 319.366125][ T7162] bond_slave_1: left allmulticast mode [ 319.371778][ T7162] syz_tun: left allmulticast mode [ 319.414471][ T7165] loop1: detected capacity change from 0 to 256 [ 319.518022][ T7163] ipvlan2: entered promiscuous mode [ 319.528582][ T7163] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 319.539602][ T7163] bridge0: port 4(ipvlan2) entered blocking state [ 319.546804][ T7163] bridge0: port 4(ipvlan2) entered disabled state [ 319.553879][ T7163] ipvlan2: entered allmulticast mode [ 319.563531][ T7163] bond0: entered allmulticast mode [ 319.570216][ T7163] bond_slave_0: entered allmulticast mode [ 319.576310][ T7163] bond_slave_1: entered allmulticast mode [ 319.582223][ T7163] syz_tun: entered allmulticast mode [ 319.590258][ T7163] ipvlan2: left allmulticast mode [ 319.595613][ T7163] bond0: left allmulticast mode [ 319.600645][ T7163] bond_slave_0: left allmulticast mode [ 319.606642][ T7163] bond_slave_1: left allmulticast mode [ 319.613806][ T7163] syz_tun: left allmulticast mode [ 319.872309][ T7165] FAT-fs (loop1): Directory bread(block 64) failed [ 319.879402][ T7165] FAT-fs (loop1): Directory bread(block 65) failed [ 319.886577][ T7165] FAT-fs (loop1): Directory bread(block 66) failed [ 319.893294][ T7165] FAT-fs (loop1): Directory bread(block 67) failed [ 319.900428][ T7165] FAT-fs (loop1): Directory bread(block 68) failed [ 319.907278][ T7165] FAT-fs (loop1): Directory bread(block 69) failed [ 319.914134][ T7165] FAT-fs (loop1): Directory bread(block 70) failed [ 319.923151][ T7165] FAT-fs (loop1): Directory bread(block 71) failed [ 319.930962][ T7165] FAT-fs (loop1): Directory bread(block 72) failed [ 319.937865][ T7165] FAT-fs (loop1): Directory bread(block 73) failed [ 320.199552][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.207413][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.215356][ T7053] bridge_slave_0: entered allmulticast mode [ 320.226364][ T7053] bridge_slave_0: entered promiscuous mode [ 320.381549][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.389833][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.397841][ T7053] bridge_slave_1: entered allmulticast mode [ 320.407499][ T7053] bridge_slave_1: entered promiscuous mode [ 320.922752][ T7053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.977535][ T7053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.065557][ T5869] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 321.214687][ T7053] team0: Port device team_slave_0 added [ 321.237209][ T5869] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.248737][ T5869] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.341329][ T5869] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 321.352520][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 321.361302][ T5869] usb 1-1: SerialNumber: syz [ 321.444584][ T7053] team0: Port device team_slave_1 added [ 321.559657][ T11] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 321.623199][ T5869] usb 1-1: 0:2 : does not exist [ 321.721697][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.728957][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.756039][ T7053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.811230][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 321.843941][ T5869] usb 1-1: USB disconnect, device number 4 [ 321.886377][ T11] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.897155][ T11] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.906581][ T11] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.917312][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.001549][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.009218][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.027441][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.039759][ T7053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.056534][ T11] usb 6-1: config 0 descriptor?? [ 322.786506][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 322.795838][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 322.909305][ T7053] hsr_slave_0: entered promiscuous mode [ 322.921396][ T7053] hsr_slave_1: entered promiscuous mode [ 322.930323][ T7053] debugfs: 'hsr0' already exists in 'hsr' [ 322.940548][ T7053] Cannot create hsr debugfs directory [ 323.736390][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 323.743079][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 323.880881][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 323.887509][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 324.037088][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 324.043576][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 324.186549][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 324.192977][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 324.335310][ T7190] ceph: No mds server is up or the cluster is laggy [ 324.395522][ T7194] ceph: No mds server is up or the cluster is laggy [ 324.403727][ T11] usb 6-1: USB disconnect, device number 2 [ 324.485065][ T7053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.629228][ T7053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.676305][ T7205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.291'. [ 324.731142][ T7053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.813424][ T7053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.035581][ T1913] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.246892][ T1913] usb 6-1: Using ep0 maxpacket: 16 [ 325.335930][ T1913] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 325.347101][ T1913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.360129][ T1913] usb 6-1: Product: syz [ 325.364487][ T1913] usb 6-1: Manufacturer: syz [ 325.369399][ T1913] usb 6-1: SerialNumber: syz [ 325.498675][ T1913] usb 6-1: config 0 descriptor?? [ 325.803438][ T1913] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 325.863136][ T1913] usb 6-1: USB disconnect, device number 3 [ 326.218095][ T7053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.287069][ T11] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 326.431234][ T7053] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.476021][ T11] usb 5-1: device descriptor read/64, error -71 [ 326.511449][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.519060][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.705066][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.712784][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.730599][ T7227] loop0: detected capacity change from 0 to 1024 [ 326.765662][ T11] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 326.846574][ T7227] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.927074][ T7227] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 326.942027][ T11] usb 5-1: device descriptor read/64, error -71 [ 327.013881][ T7227] EXT4-fs (loop0): orphan cleanup on readonly fs [ 327.063031][ T11] usb usb5-port1: attempt power cycle [ 327.073811][ T7053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.174049][ T7227] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 327.185479][ T7227] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 327.197132][ T7227] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.297: Failed to acquire dquot type 0 [ 327.284501][ T7227] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 327.297501][ T7227] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 327.308545][ T7227] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.297: Failed to acquire dquot type 0 [ 327.336310][ T7227] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.297: Freeing blocks not in datazone - block = 0, count = 4096 [ 327.360157][ T7227] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 327.373004][ T7227] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 327.383766][ T7227] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.297: Failed to acquire dquot type 0 [ 327.417690][ T7227] EXT4-fs (loop0): 1 orphan inode deleted [ 327.428993][ T7227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.445796][ T11] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 327.481636][ T11] usb 5-1: device descriptor read/8, error -71 [ 327.736726][ T11] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 327.835758][ T11] usb 5-1: device descriptor read/8, error -71 [ 327.935623][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 327.957850][ T11] usb usb5-port1: unable to enumerate USB device [ 328.165475][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 328.212743][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 328.267958][ T5869] usb 1-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 328.278566][ T5869] usb 1-1: config 8 interface 0 has no altsetting 0 [ 328.376040][ T5869] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 328.385573][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.393773][ T5869] usb 1-1: Product: syz [ 328.398291][ T5869] usb 1-1: Manufacturer: syz [ 328.403062][ T5869] usb 1-1: SerialNumber: syz [ 328.542500][ T7227] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 328.718110][ T7247] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 328.745614][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 329.028540][ T5873] usb 6-1: Using ep0 maxpacket: 16 [ 329.057472][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.069249][ T5873] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 329.081871][ T5873] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 329.095080][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.134888][ T7053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.220536][ T5873] usb 6-1: config 0 descriptor?? [ 329.497983][ T7253] netlink: 'syz.4.303': attribute type 10 has an invalid length. [ 329.668998][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.687324][ T5869] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 329.699607][ T5869] usb 1-1: selecting invalid altsetting 0 [ 329.917082][ T7256] team_slave_0: entered promiscuous mode [ 329.923138][ T7256] team_slave_1: entered promiscuous mode [ 329.929486][ T7256] vlan2: entered promiscuous mode [ 329.934722][ T7256] team0: entered promiscuous mode [ 330.122123][ T5869] usb 1-1: USB disconnect, device number 5 [ 330.329029][ T7261] netlink: 3 bytes leftover after parsing attributes in process `syz.0.305'. [ 330.651200][ T6242] udevd[6242]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.572741][ T7267] loop0: detected capacity change from 0 to 4096 [ 331.850627][ T5869] usb 6-1: USB disconnect, device number 4 [ 332.195720][ T7284] netlink: 260 bytes leftover after parsing attributes in process `syz.5.312'. [ 332.206231][ T7284] netlink: 260 bytes leftover after parsing attributes in process `syz.5.312'. [ 332.521927][ T7286] netlink: 'syz.0.313': attribute type 10 has an invalid length. [ 332.824008][ T7280] loop4: detected capacity change from 0 to 32768 [ 332.889130][ T7280] gfs2: fsid={@..@\: Trying to join cluster "lock_nolock", "{@..@\" [ 332.900477][ T7280] gfs2: fsid={@..@\: Now mounting FS (format 1801)... [ 332.914699][ T7280] gfs2: fsid={@..@\.s: fatal: invalid metadata block - bh = 19 (type: exp=4, found=5), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 332.933393][ T7280] gfs2: fsid={@..@\.s: about to withdraw this file system [ 332.943675][ T7280] gfs2: fsid={@..@\.s: Journal recovery skipped for jid 0 until next mount. [ 332.952760][ T7280] gfs2: fsid={@..@\.s: Glock dequeues delayed: 0 [ 332.960599][ T7280] gfs2: fsid={@..@\.s: File system withdrawn [ 332.966911][ T7280] CPU: 0 UID: 0 PID: 7280 Comm: syz.4.310 Not tainted syzkaller #0 PREEMPT(none) [ 332.967055][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 332.967143][ T7280] Call Trace: [ 332.967190][ T7280] [ 332.967242][ T7280] __dump_stack+0x26/0x30 [ 332.967409][ T7280] dump_stack_lvl+0x1df/0x270 [ 332.967589][ T7280] dump_stack+0x1e/0x25 [ 332.967748][ T7280] gfs2_withdraw+0x1182/0x2050 [ 332.967943][ T7280] gfs2_metatype_check_ii+0x11e/0x160 [ 332.968096][ T7280] gfs2_meta_buffer+0x4c7/0x600 [ 332.968323][ T7280] inode_go_instantiate+0xda/0x1e90 [ 332.968458][ T7280] ? queue_delayed_work_on+0x21d/0x350 [ 332.968614][ T7280] ? kmsan_get_metadata+0xfb/0x160 [ 332.968769][ T7280] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 332.968925][ T7280] ? kmsan_get_metadata+0xfb/0x160 [ 332.969078][ T7280] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 332.969254][ T7280] ? __pfx_inode_go_instantiate+0x10/0x10 [ 332.969392][ T7280] gfs2_instantiate+0x24c/0x4b0 [ 332.969553][ T7280] gfs2_glock_wait+0x26a/0x3b0 [ 332.969717][ T7280] gfs2_glock_nq+0x28cf/0x34a0 [ 332.969916][ T7280] check_journal_clean+0xc1/0x4c0 [ 332.970115][ T7280] ? init_journal+0x332e/0x3a30 [ 332.970254][ T7280] ? kmsan_get_metadata+0xfb/0x160 [ 332.970409][ T7280] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 332.970586][ T7280] init_journal+0x332e/0x3a30 [ 332.970755][ T7280] ? init_inodes+0x124/0x510 [ 332.970893][ T7280] ? init_inodes+0x124/0x510 [ 332.971019][ T7280] ? kmsan_get_metadata+0xfb/0x160 [ 332.971181][ T7280] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 332.971355][ T7280] init_inodes+0x124/0x510 [ 332.971498][ T7280] gfs2_fill_super+0x384d/0x3f50 [ 332.971641][ T7280] ? init_locking+0xed/0x500 [ 332.971808][ T7280] get_tree_bdev_flags+0x6e3/0x920 [ 332.971982][ T7280] ? __pfx_gfs2_fill_super+0x10/0x10 [ 332.972120][ T7280] ? __pfx_gfs2_fill_super+0x10/0x10 [ 332.972261][ T7280] ? __pfx_gfs2_get_tree+0x10/0x10 [ 332.972398][ T7280] get_tree_bdev+0x38/0x50 [ 332.972562][ T7280] gfs2_get_tree+0x57/0x350 [ 332.972703][ T7280] ? __pfx_gfs2_get_tree+0x10/0x10 [ 332.972832][ T7280] vfs_get_tree+0xb0/0x5c0 [ 332.972991][ T7280] ? mount_capable+0x99/0x100 [ 332.973139][ T7280] do_new_mount+0x733/0x1420 [ 332.973299][ T7280] ? apparmor_capable+0x32d/0x410 [ 332.973481][ T7280] ? kmsan_get_metadata+0xfb/0x160 [ 332.973666][ T7280] path_mount+0x6db/0x1e90 [ 332.973829][ T7280] ? user_path_at+0x32d/0x3d0 [ 332.973980][ T7280] __se_sys_mount+0x6eb/0x7d0 [ 332.974151][ T7280] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 332.974320][ T7280] __x64_sys_mount+0xe4/0x150 [ 332.974500][ T7280] x64_sys_call+0x3604/0x3e20 [ 332.974678][ T7280] do_syscall_64+0xd9/0x210 [ 332.974806][ T7280] ? irqentry_exit+0x16/0x60 [ 332.974972][ T7280] ? clear_bhb_loop+0x40/0x90 [ 332.975116][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.975258][ T7280] RIP: 0033:0x7f55ffb9034a [ 332.975359][ T7280] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.975476][ T7280] RSP: 002b:00007f5600981e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 332.975602][ T7280] RAX: ffffffffffffffda RBX: 00007f5600981ef0 RCX: 00007f55ffb9034a [ 332.975698][ T7280] RDX: 0000200000000400 RSI: 0000200000012500 RDI: 00007f5600981eb0 [ 332.975793][ T7280] RBP: 0000200000000400 R08: 00007f5600981ef0 R09: 0000000000200001 [ 332.975885][ T7280] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 332.975972][ T7280] R13: 00007f5600981eb0 R14: 000000000001260b R15: 0000200000000000 [ 332.976095][ T7280] [ 333.333204][ T7280] gfs2: fsid={@..@\.s: Error -5 locking journal for spectator mount. [ 333.908143][ T4076] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 333.958122][ T7297] loop1: detected capacity change from 0 to 128 [ 333.974049][ T7295] netlink: 3 bytes leftover after parsing attributes in process `syz.0.316'. [ 334.248013][ T7297] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 334.282232][ T7302] loop5: detected capacity change from 0 to 64 [ 334.293504][ T7053] veth0_vlan: entered promiscuous mode [ 334.496755][ T7302] hfs: get root inode failed [ 334.520792][ T7053] veth1_vlan: entered promiscuous mode [ 335.013720][ T7053] veth0_macvtap: entered promiscuous mode [ 335.185843][ T7053] veth1_macvtap: entered promiscuous mode [ 335.407999][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.417643][ T5873] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 335.574698][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.645575][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 335.705814][ T5873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.716562][ T5873] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.725960][ T5873] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 335.738526][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.773627][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.912596][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.022961][ T4187] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.045581][ T7320] loop0: detected capacity change from 0 to 256 [ 336.058871][ T5873] usb 5-1: config 0 descriptor?? [ 336.157072][ T7320] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.157988][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.168160][ T7320] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 336.482337][ T7320] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 336.545494][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 336.785776][ T5869] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 336.794314][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.805272][ T5869] usb 2-1: config 0 has no interface number 0 [ 336.811588][ T5869] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 336.822681][ T5869] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.040896][ T5869] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 337.051774][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.060220][ T5869] usb 2-1: Product: syz [ 337.064613][ T5869] usb 2-1: Manufacturer: syz [ 337.072853][ T5869] usb 2-1: SerialNumber: syz [ 337.200482][ T5869] usb 2-1: config 0 descriptor?? [ 338.016890][ T7346] loop1: detected capacity change from 0 to 256 [ 338.558469][ T5873] usb 5-1: USB disconnect, device number 14 [ 338.668296][ T7352] netlink: 3 bytes leftover after parsing attributes in process `syz.5.329'. [ 338.877619][ T7346] FAT-fs (loop1): Directory bread(block 64) failed [ 338.884387][ T7346] FAT-fs (loop1): Directory bread(block 65) failed [ 338.891684][ T7346] FAT-fs (loop1): Directory bread(block 66) failed [ 338.898602][ T7346] FAT-fs (loop1): Directory bread(block 67) failed [ 338.905766][ T7346] FAT-fs (loop1): Directory bread(block 68) failed [ 338.916391][ T7346] FAT-fs (loop1): Directory bread(block 69) failed [ 338.924482][ T7346] FAT-fs (loop1): Directory bread(block 70) failed [ 338.931389][ T7346] FAT-fs (loop1): Directory bread(block 71) failed [ 338.938491][ T7346] FAT-fs (loop1): Directory bread(block 72) failed [ 338.945340][ T7346] FAT-fs (loop1): Directory bread(block 73) failed [ 339.108767][ T7323] syz.1.325: attempt to access beyond end of device [ 339.108767][ T7323] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 339.127687][ T7323] syz.1.325: attempt to access beyond end of device [ 339.127687][ T7323] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 339.169070][ T30] audit: type=1800 audit(339.117:16): pid=7323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.325" name="file0" dev="loop1" ino=1048633 res=0 errno=0 [ 339.227413][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.331'. [ 339.237553][ T7357] 8021q: VLANs not supported on gre0 [ 339.456803][ T5873] usb 2-1: USB disconnect, device number 7 [ 339.886009][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.5.333'. [ 340.069281][ T7373] loop5: detected capacity change from 0 to 512 [ 340.152359][ T7373] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 340.380771][ T7373] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.562381][ T7371] EXT4-fs error (device loop5): __ext4_new_inode:1279: comm syz.5.333: failed to insert inode 16: doubly allocated? [ 341.098588][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.294596][ T7390] loop0: detected capacity change from 0 to 128 [ 341.406056][ T7391] loop4: detected capacity change from 0 to 64 [ 341.445357][ T7390] FAT-fs (loop0): bogus number of FAT sectors [ 341.451653][ T7390] FAT-fs (loop0): Can't find a valid FAT filesystem [ 341.689452][ T7390] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 341.836436][ T7386] loop1: detected capacity change from 0 to 32768 [ 342.298150][ T7396] netlink: 92 bytes leftover after parsing attributes in process `syz.5.340'. [ 342.688633][ T7401] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 343.587442][ T7412] netlink: 164 bytes leftover after parsing attributes in process `syz.4.345'. [ 343.848738][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 343.947109][ T7407] loop5: detected capacity change from 0 to 4096 [ 344.089208][ T7407] NILFS (loop5): invalid segment: Checksum error in segment payload [ 344.098235][ T7407] NILFS (loop5): trying rollback from an earlier position [ 344.290244][ T7407] NILFS (loop5): recovery complete [ 344.310175][ T7421] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 344.772995][ T7427] loop4: detected capacity change from 0 to 64 [ 346.879555][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.888017][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.953683][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 347.230341][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.238594][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.957288][ T7465] openvswitch: netlink: IP tunnel TTL not specified. [ 348.567341][ T7461] loop5: detected capacity change from 0 to 40427 [ 348.577114][ T7461] f2fs: Unknown parameter '' [ 349.236891][ T7461] loop5: detected capacity change from 0 to 256 [ 349.415443][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 349.424655][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'. [ 349.555570][ T11] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 349.759658][ T11] usb 6-1: too many configurations: 138, using maximum allowed: 8 [ 349.905721][ T11] usb 6-1: New USB device found, idVendor=04b4, idProduct=fdc8, bcdDevice=1a.13 [ 349.915039][ T11] usb 6-1: New USB device strings: Mfr=204, Product=143, SerialNumber=216 [ 349.926618][ T11] usb 6-1: Product: syz [ 349.930974][ T11] usb 6-1: Manufacturer: syz [ 349.937411][ T11] usb 6-1: SerialNumber: syz [ 350.214236][ T7487] netlink: 3 bytes leftover after parsing attributes in process `syz.4.364'. [ 350.331151][ T7493] loop1: detected capacity change from 0 to 512 [ 350.405453][ T5873] usb 6-1: USB disconnect, device number 5 [ 350.795432][ T5869] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 351.011323][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 351.031721][ T7502] FAULT_INJECTION: forcing a failure. [ 351.031721][ T7502] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 351.045356][ T7502] CPU: 0 UID: 0 PID: 7502 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(none) [ 351.045501][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.045586][ T7502] Call Trace: [ 351.045633][ T7502] [ 351.045685][ T7502] __dump_stack+0x26/0x30 [ 351.045852][ T7502] dump_stack_lvl+0x1df/0x270 [ 351.046029][ T7502] dump_stack+0x1e/0x25 [ 351.046179][ T7502] should_fail_ex+0x7dc/0x8a0 [ 351.046380][ T7502] should_fail+0x2a/0x40 [ 351.046508][ T7502] should_fail_usercopy+0x2e/0x40 [ 351.046667][ T7502] _copy_to_user+0x35/0x120 [ 351.046829][ T7502] simple_read_from_buffer+0x1b2/0x340 [ 351.047008][ T7502] proc_fail_nth_read+0x1e0/0x2d0 [ 351.047155][ T7502] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.047299][ T7502] vfs_read+0x279/0xf90 [ 351.047442][ T7502] ? stack_depot_save_flags+0x35/0x7b0 [ 351.047580][ T7502] ? kmsan_get_metadata+0xfb/0x160 [ 351.047731][ T7502] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 351.047894][ T7502] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 351.048064][ T7502] __x64_sys_read+0x1fb/0x4d0 [ 351.048246][ T7502] x64_sys_call+0x2f9c/0x3e20 [ 351.048426][ T7502] do_syscall_64+0xd9/0x210 [ 351.048565][ T7502] ? irqentry_exit+0x16/0x60 [ 351.048733][ T7502] ? clear_bhb_loop+0x40/0x90 [ 351.048880][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.049023][ T7502] RIP: 0033:0x7fef3918d5bc [ 351.049126][ T7502] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 351.049244][ T7502] RSP: 002b:00007fef39f45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.049374][ T7502] RAX: ffffffffffffffda RBX: 00007fef393d6090 RCX: 00007fef3918d5bc [ 351.049476][ T7502] RDX: 000000000000000f RSI: 00007fef39f450a0 RDI: 0000000000000006 [ 351.049568][ T7502] RBP: 00007fef39f45090 R08: 0000000000000000 R09: 0000000000000000 [ 351.049655][ T7502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.049734][ T7502] R13: 00007fef393d6128 R14: 00007fef393d6090 R15: 00007ffc9b8c39b8 [ 351.049866][ T7502] [ 351.165540][ T5869] usb 2-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 16 [ 351.281578][ T5869] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.294779][ T5869] usb 2-1: config 1 interface 0 has no altsetting 0 [ 351.695928][ T5869] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 351.705490][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.717058][ T5869] usb 2-1: Product: М [ 351.721349][ T5869] usb 2-1: Manufacturer: 〉 [ 351.727510][ T5869] usb 2-1: SerialNumber: syz [ 351.772124][ T7493] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.805320][ T7505] loop6: detected capacity change from 0 to 128 [ 352.046892][ T7505] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 352.047261][ T7505] hpfs: filesystem error: improperly stopped [ 352.047422][ T7505] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 352.047584][ T7505] hpfs: You really don't want any checks? You are crazy... [ 352.048186][ T7505] hpfs: hpfs_map_sector(): read error [ 352.048303][ T7505] hpfs: code page support is disabled [ 352.117470][ T7505] hpfs: hpfs_map_4sectors(): unaligned read [ 352.122929][ T7505] hpfs: hpfs_map_4sectors(): unaligned read [ 352.123013][ T7505] hpfs: filesystem error: unable to find root dir [ 352.225398][ T5869] usb 2-1: USB disconnect, device number 8 [ 352.614074][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.614346][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.692081][ T7518] loop5: detected capacity change from 0 to 32768 [ 353.705808][ T7518] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.373 (7518) [ 353.777186][ T7518] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 353.777446][ T7518] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 354.081501][ T7518] BTRFS info (device loop5): setting nodatasum [ 354.093732][ T7518] BTRFS info (device loop5): setting nodatacow [ 354.100341][ T7518] BTRFS info (device loop5): enabling free space tree [ 354.109028][ T7518] BTRFS info (device loop5): max_inline set to 0 [ 354.265842][ T6377] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 355.054733][ T7556] netlink: 3 bytes leftover after parsing attributes in process `syz.1.380'. [ 355.503961][ T7542] loop4: detected capacity change from 0 to 32768 [ 355.682814][ T7549] find_entry called with index = 0 [ 355.762506][ T7550] netlink: 56 bytes leftover after parsing attributes in process `syz.6.378'. [ 357.790797][ T7560] dvmrp0: entered allmulticast mode [ 358.507270][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 359.261972][ T7589] loop5: detected capacity change from 0 to 2048 [ 359.377468][ T7593] loop6: detected capacity change from 0 to 64 [ 359.454850][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 359.574496][ T7593] hfs: get root inode failed [ 359.826661][ T7600] netlink: 3 bytes leftover after parsing attributes in process `syz.4.394'. [ 359.866419][ T5869] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 359.904696][ T7601] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 360.029815][ T7601] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 360.040895][ T7601] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 360.051128][ T7601] team0: Failed to send options change via netlink (err -105) [ 360.062118][ T7601] team0: Port device netdevsim3 added [ 360.065707][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 360.118860][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.166581][ T5869] usb 1-1: config 7 has an invalid interface number: 163 but max is 0 [ 360.175937][ T5869] usb 1-1: config 7 has no interface number 0 [ 360.182242][ T5869] usb 1-1: config 7 interface 163 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 360.340732][ T5869] usb 1-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice= 9.08 [ 360.350545][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.359012][ T5869] usb 1-1: Product: syz [ 360.363585][ T5869] usb 1-1: Manufacturer: syz [ 360.370371][ T5869] usb 1-1: SerialNumber: syz [ 360.539386][ T7605] netlink: 32 bytes leftover after parsing attributes in process `syz.5.396'. [ 360.548715][ T7605] netem: unknown loss type 13 [ 360.551353][ T7592] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 360.553600][ T7605] netem: change failed [ 360.883917][ T7606] loop5: detected capacity change from 0 to 1024 [ 360.910926][ T5869] usb 1-1: bad CDC descriptors [ 360.918488][ T5869] cdc_acm 1-1:7.163: Zero length descriptor references [ 360.930476][ T5869] cdc_acm 1-1:7.163: probe with driver cdc_acm failed with error -22 [ 360.982315][ T7606] EXT4-fs: Ignoring removed nobh option [ 360.990136][ T7606] EXT4-fs: Ignoring removed bh option [ 361.097239][ T5869] usb 1-1: USB disconnect, device number 6 [ 361.235041][ T7606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.435914][ T42] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 361.676139][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 361.726586][ T42] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 361.735014][ T42] usb 5-1: config 0 has no interface number 0 [ 361.742098][ T42] usb 5-1: config 0 interface 21 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.756761][ T42] usb 5-1: config 0 interface 21 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.769087][ T42] usb 5-1: config 0 interface 21 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.782701][ T42] usb 5-1: config 0 interface 21 has no altsetting 0 [ 361.789965][ T42] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 361.801184][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.047740][ T42] usb 5-1: config 0 descriptor?? [ 362.066440][ C1] sd 0:0:1:0: [sda] tag#5430 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 362.077498][ C1] sd 0:0:1:0: [sda] tag#5430 CDB: Write(6) 0a 00 00 00 00 00 00 00 98 18 00 00 [ 362.168186][ T7615] loop6: detected capacity change from 0 to 4096 [ 362.336922][ T7615] NILFS (loop6): invalid segment: Checksum error in segment payload [ 362.345919][ T7615] NILFS (loop6): trying rollback from an earlier position [ 362.553368][ T7615] NILFS (loop6): recovery complete [ 362.620954][ T7625] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 362.656195][ T42] usbhid 5-1:0.21: can't add hid device: -71 [ 362.663132][ T42] usbhid 5-1:0.21: probe with driver usbhid failed with error -71 [ 362.793072][ T42] usb 5-1: USB disconnect, device number 15 [ 363.492082][ T7631] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 363.501864][ T7631] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 364.107750][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.406'. [ 364.117646][ T7637] 8021q: VLANs not supported on gre0 [ 364.404659][ T7640] loop1: detected capacity change from 0 to 1024 [ 364.514061][ T7640] EXT4-fs: Ignoring removed orlov option [ 364.580533][ T7640] EXT4-fs (loop1): Test dummy encryption mode enabled [ 364.588111][ T7640] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 364.756963][ T7640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.829894][ T7646] netlink: 3 bytes leftover after parsing attributes in process `syz.6.409'. [ 365.095037][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.127956][ T4274] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.154994][ T7650] loop4: detected capacity change from 0 to 128 [ 365.434372][ T30] audit: type=1804 audit(365.387:17): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.410" name="/newroot/88/file0/file0" dev="loop4" ino=1048639 res=1 errno=0 [ 365.719340][ T7658] loop6: detected capacity change from 0 to 64 [ 365.992509][ T11] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 366.040768][ T7640] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 366.253552][ T11] usb 6-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 366.266252][ T11] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.278200][ T11] usb 6-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.288382][ T11] usb 6-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 366.301957][ T11] usb 6-1: config 1 interface 0 has no altsetting 0 [ 366.311336][ T11] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 5.40 [ 366.321703][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.563675][ T7667] netlink: 'syz.6.416': attribute type 10 has an invalid length. [ 366.590299][ T7667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.605684][ T7667] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 366.617289][ T7666] netlink: 164 bytes leftover after parsing attributes in process `syz.4.415'. [ 366.765297][ T11] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 366.964830][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.970407][ T42] usb 6-1: USB disconnect, device number 6 [ 367.247083][ T7663] loop0: detected capacity change from 0 to 4096 [ 367.929974][ T7673] loop4: detected capacity change from 0 to 32768 [ 368.116563][ T7663] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 368.134717][ T7673] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 369.063982][ T7685] loop6: detected capacity change from 0 to 32768 [ 369.077736][ T7685] btrfs: Deprecated parameter 'usebackuproot' [ 369.084025][ T7685] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 369.094018][ T7685] btrfs: Deprecated parameter 'usebackuproot' [ 369.100442][ T7685] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 369.147614][ T7663] ntfs3(loop0): Failed to read $UpCase (-4). [ 369.218179][ T7685] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.419 (7685) [ 369.344474][ T7676] loop1: detected capacity change from 0 to 65536 [ 369.378165][ T7685] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 369.391571][ T7685] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 369.400666][ T7685] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 369.469877][ T7685] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 369.546115][ T7676] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 369.641194][ T7685] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 369.672006][ T7673] XFS (loop4): Ending clean mount [ 369.767964][ T7685] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 369.783145][ T7685] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 369.810188][ T7685] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 369.844483][ T7685] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 370.016990][ T1327] BTRFS warning (device loop6): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0x9386bb15019fa5e3e4c2ff5ef99c27596dd750aa081f4224cf9291c572f07bc0 level 0 [ 370.042865][ T7685] BTRFS warning (device loop6): failed to read root (objectid=4): -5 [ 370.052260][ T7685] BTRFS warning (device loop6): try to load backup roots slot 1 [ 370.082169][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 370.179379][ T7676] XFS (loop1): Ending clean mount [ 370.319512][ T1327] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0xb53a00f31c45f7321a9313703acec781446109140709e23ccf9d3c8a07c32708 found 0xf6573da6db8ff628d5e18e706b69ded81e2fce6008f2ce9b54cd69c659069155 level 0 [ 370.353529][ T7685] BTRFS warning (device loop6): couldn't read tree root [ 370.360912][ T7685] BTRFS warning (device loop6): try to load backup roots slot 2 [ 370.405059][ T4218] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 370.416402][ T7685] BTRFS warning (device loop6): couldn't read tree root [ 370.423571][ T7685] BTRFS warning (device loop6): try to load backup roots slot 3 [ 370.507666][ T4218] BTRFS warning (device loop6): checksum verify failed on logical 5242880 mirror 1 wanted 0x8d90b910ec13d95ec17ddbe87d1d5dca5d3dff1259e90cf51f7cd4ff39170caa found 0xfb559b591d8b147bc9395bfaed641d4002c2a2c6ca385b6d744ba2183348b9a6 level 0 [ 370.517103][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 370.531210][ T7685] BTRFS warning (device loop6): couldn't read tree root [ 370.561995][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 370.666923][ T7685] BTRFS error (device loop6): open_ctree failed: -5 [ 370.805383][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 370.868561][ T9] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 370.878022][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.886885][ T9] usb 6-1: Product: syz [ 370.891234][ T9] usb 6-1: Manufacturer: syz [ 370.896310][ T9] usb 6-1: SerialNumber: syz [ 370.942728][ T42] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 370.946213][ T5818] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 370.952317][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.973392][ T42] usb 2-1: Product: syz [ 370.977952][ T42] usb 2-1: Manufacturer: syz [ 370.982736][ T42] usb 2-1: SerialNumber: syz [ 371.159246][ T9] usb 6-1: config 0 descriptor?? [ 371.206915][ T42] usb 2-1: config 0 descriptor?? [ 371.605897][ T7710] netlink: 'syz.5.420': attribute type 1 has an invalid length. [ 371.614012][ T7710] netlink: 'syz.5.420': attribute type 3 has an invalid length. [ 371.623190][ T7710] netlink: 224 bytes leftover after parsing attributes in process `syz.5.420'. [ 371.765860][ T9] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 371.892757][ T9] usb 2-1: USB disconnect, device number 9 [ 371.982208][ T5816] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 372.474944][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.485069][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.518322][ T7728] netlink: 'syz.6.426': attribute type 10 has an invalid length. [ 372.526497][ T7728] netlink: 55 bytes leftover after parsing attributes in process `syz.6.426'. [ 373.084417][ T7723] sctp: failed to load transform for md5: -2 [ 373.086847][ T7730] sctp: failed to load transform for md5: -2 [ 373.099352][ T7727] sctp: failed to load transform for md5: -2 [ 373.147388][ T7732] sctp: failed to load transform for md5: -2 [ 373.295520][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 373.528267][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 373.666472][ T7750] loop5: detected capacity change from 0 to 128 [ 373.695824][ T42] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 373.695982][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.696108][ T42] usb 7-1: Product: syz [ 373.696205][ T42] usb 7-1: Manufacturer: syz [ 373.696307][ T42] usb 7-1: SerialNumber: syz [ 373.748811][ T42] usb 7-1: config 0 descriptor?? [ 373.804476][ T42] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 374.386852][ T7728] devtmpfs: Too few inodes for current use [ 374.446171][ T42] gspca_vc032x: reg_w err -71 [ 374.446522][ T42] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 374.466020][ T42] usb 7-1: USB disconnect, device number 2 [ 375.366045][ T7756] loop1: detected capacity change from 0 to 4096 [ 375.517357][ T7764] fuse: Bad value for 'fd' [ 375.599728][ T7765] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.717660][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 375.823487][ T42] usb 6-1: USB disconnect, device number 7 [ 375.947434][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 375.976267][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.6.430'. [ 376.029128][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 376.044377][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 376.057092][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 376.067159][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 376.080071][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 376.091697][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 376.517077][ T9] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 376.526837][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.535038][ T9] usb 1-1: Product: syz [ 376.539829][ T9] usb 1-1: Manufacturer: syz [ 376.547059][ T9] usb 1-1: SerialNumber: syz [ 376.738514][ T9] usb 1-1: config 0 descriptor?? [ 376.968839][ T9] usb 1-1: USB disconnect, device number 7 [ 377.517212][ T7774] loop4: detected capacity change from 0 to 40427 [ 377.963072][ T7777] IPVS: Scheduler module ip_vs_ not found [ 379.307459][ T7790] loop4: detected capacity change from 0 to 32768 [ 379.354914][ T7790] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 379.409425][ T7790] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 379.462241][ T7790] grow_buffers: requested out-of-range block 432345564227567648 for device loop4 [ 379.462362][ T7790] (syz.4.435,7790,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 379.462502][ T7790] (syz.4.435,7790,0):ocfs2_search_chain:1817 ERROR: status = -12 [ 379.462640][ T7790] (syz.4.435,7790,0):ocfs2_search_chain:1940 ERROR: status = -12 [ 379.462782][ T7790] (syz.4.435,7790,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -12 [ 379.462916][ T7790] (syz.4.435,7790,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -12 [ 379.463051][ T7790] (syz.4.435,7790,0):__ocfs2_claim_clusters:2438 ERROR: status = -12 [ 379.463186][ T7790] (syz.4.435,7790,0):__ocfs2_claim_clusters:2446 ERROR: status = -12 [ 379.463328][ T7790] (syz.4.435,7790,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -12 [ 379.463493][ T7790] (syz.4.435,7790,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -12 [ 379.463633][ T7790] (syz.4.435,7790,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -12 [ 379.463956][ T7790] (syz.4.435,7790,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -12 [ 379.464098][ T7790] (syz.4.435,7790,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -12 [ 379.464238][ T7790] (syz.4.435,7790,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -12 [ 379.464380][ T7790] (syz.4.435,7790,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -12 [ 379.464574][ T7790] (syz.4.435,7790,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -12 [ 379.464723][ T7790] (syz.4.435,7790,0):ocfs2_mknod:360 ERROR: status = -12 [ 379.465992][ T7790] (syz.4.435,7790,0):ocfs2_mknod:505 ERROR: status = -12 [ 379.466130][ T7790] (syz.4.435,7790,0):ocfs2_mkdir:661 ERROR: status = -12 [ 379.669776][ T5818] ocfs2: Unmounting device (7,4) on (node local) [ 380.376403][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 380.532788][ T9] usb 5-1: device descriptor read/64, error -71 [ 380.778277][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 380.935540][ T9] usb 5-1: device descriptor read/64, error -71 [ 381.052733][ T9] usb usb5-port1: attempt power cycle [ 381.140370][ T7808] loop5: detected capacity change from 0 to 1024 [ 381.289517][ T7808] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 381.489108][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 381.526500][ T9] usb 5-1: device descriptor read/8, error -71 [ 381.600081][ T7808] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.442: Invalid block bitmap block 0 in block_group 0 [ 381.647364][ T7808] Quota error (device loop5): write_blk: dquota write failed [ 381.647551][ T7808] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 381.647914][ T7808] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.442: Failed to acquire dquot type 0 [ 381.674532][ T7808] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.442: Freeing blocks not in datazone - block = 0, count = 4096 [ 381.716654][ T7808] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.442: Invalid inode bitmap blk 0 in block_group 0 [ 381.724617][ T7808] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 381.729070][ T7808] EXT4-fs (loop5): 1 orphan inode deleted [ 381.731128][ T7808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.740662][ T58] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8 [ 381.740853][ T58] EXT4-fs error (device loop5): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 381.809294][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 381.845607][ T9] usb 5-1: device descriptor read/8, error -71 [ 381.966828][ T9] usb usb5-port1: unable to enumerate USB device [ 382.203481][ T6377] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.819164][ T7821] team_slave_0: entered promiscuous mode [ 382.825381][ T7821] team_slave_1: entered promiscuous mode [ 382.831590][ T7821] vlan2: entered promiscuous mode [ 382.836950][ T7821] team0: entered promiscuous mode [ 382.889448][ T7826] loop1: detected capacity change from 0 to 64 [ 383.292877][ T7832] netlink: 'syz.6.450': attribute type 10 has an invalid length. [ 383.316910][ T7832] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 383.826962][ T7838] netlink: 'syz.4.452': attribute type 10 has an invalid length. [ 383.979133][ T7838] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 383.989582][ T7838] team0: Failed to send options change via netlink (err -105) [ 383.997605][ T7838] team0: Port device netdevsim3 added [ 384.106986][ T4187] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 384.188528][ T5816] Trying to free block not in datazone [ 384.277706][ T5816] Trying to free block not in datazone [ 384.283464][ T5816] Trying to free block not in datazone [ 384.289856][ T5816] Trying to free block not in datazone [ 384.295894][ T5816] Trying to free block not in datazone [ 384.301486][ T5816] Trying to free block not in datazone [ 384.307258][ T5816] Trying to free block not in datazone [ 384.312847][ T5816] Trying to free block not in datazone [ 384.319571][ T5816] Trying to free block not in datazone [ 384.325952][ T5816] Trying to free block not in datazone [ 384.331543][ T5816] Trying to free block not in datazone [ 384.339163][ T5816] Trying to free block not in datazone [ 384.344774][ T5816] Trying to free block not in datazone [ 384.351139][ T5816] Trying to free block not in datazone [ 384.356930][ T5816] Trying to free block not in datazone [ 384.362518][ T5816] Trying to free block not in datazone [ 384.368280][ T5816] Trying to free block not in datazone [ 384.377469][ T5816] Trying to free block not in datazone [ 384.383080][ T5816] Trying to free block not in datazone [ 384.390047][ T5816] Trying to free block not in datazone [ 384.395782][ T5816] Trying to free block not in datazone [ 384.401373][ T5816] Trying to free block not in datazone [ 384.407115][ T5816] Trying to free block not in datazone [ 384.412707][ T5816] Trying to free block not in datazone [ 384.418486][ T5816] Trying to free block not in datazone [ 384.424067][ T5816] Trying to free block not in datazone [ 384.431771][ T5816] Trying to free block not in datazone [ 384.438143][ T5816] Trying to free block not in datazone [ 384.444347][ T5816] Trying to free block not in datazone [ 384.679689][ T5816] Trying to free block not in datazone [ 384.686571][ T5816] Trying to free block not in datazone [ 384.692173][ T5816] Trying to free block not in datazone [ 384.698264][ T5816] Trying to free block not in datazone [ 384.703857][ T5816] Trying to free block not in datazone [ 384.709738][ T5816] Trying to free block not in datazone [ 384.715431][ T5816] Trying to free block not in datazone [ 384.721047][ T5816] Trying to free block not in datazone [ 384.726943][ T5816] Trying to free block not in datazone [ 384.732538][ T5816] Trying to free block not in datazone [ 384.740803][ T5816] Trying to free block not in datazone [ 384.845778][ T5869] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 384.850726][ T5816] Trying to free block not in datazone [ 385.075560][ T5869] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.086075][ T5869] usb 7-1: config 0 has no interfaces? [ 385.104780][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 385.167746][ T5869] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 385.177310][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.185668][ T5869] usb 7-1: Product: syz [ 385.190055][ T5869] usb 7-1: Manufacturer: syz [ 385.198114][ T5869] usb 7-1: SerialNumber: syz [ 385.324207][ T5869] usb 7-1: config 0 descriptor?? [ 385.400273][ T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 385.409814][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.414962][ T7859] tipc: Started in network mode [ 385.418289][ T9] usb 6-1: Product: syz [ 385.418399][ T9] usb 6-1: Manufacturer: syz [ 385.418501][ T9] usb 6-1: SerialNumber: syz [ 385.423512][ T7859] tipc: Node identity 101, cluster identity 6 [ 385.443416][ T7859] tipc: Node number set to 257 [ 385.445435][ T7856] loop1: detected capacity change from 0 to 1024 [ 385.548020][ T7856] hfsplus: Unknown parameter './bus' [ 385.563935][ T7855] loop4: detected capacity change from 0 to 1024 [ 385.577261][ T9] usb 6-1: config 0 descriptor?? [ 385.634453][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 385.957943][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.969634][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.098240][ T7864] capability: warning: `syz.5.457' uses 32-bit capabilities (legacy support in use) [ 386.194808][ T7864] overlay: ./bus is not a directory [ 386.462791][ T7850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.473259][ T7850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.741501][ T9] sonixb 6-1:0.0: Error reading register 00: -110 [ 387.106452][ T7856] loop1: detected capacity change from 0 to 40427 [ 387.121551][ T7856] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 387.129778][ T7856] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 387.167041][ T7856] F2FS-fs (loop1): invalid crc value [ 387.476120][ T7856] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 387.512032][ T7856] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 387.519495][ T7856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 388.158240][ T5818] ===================================================== [ 388.166526][ T5818] BUG: KMSAN: uninit-value in hfsplus_lookup+0x674/0xf70 [ 388.173752][ T5818] hfsplus_lookup+0x674/0xf70 [ 388.179186][ T5818] __lookup_slow+0x560/0x760 [ 388.184109][ T5818] lookup_slow+0x6a/0xd0 [ 388.188772][ T5818] walk_component+0x444/0x650 [ 388.193607][ T5818] path_lookupat+0x251/0x6b0 [ 388.198489][ T5818] filename_lookup+0x2bd/0x800 [ 388.203395][ T5818] user_path_at+0x91/0x3d0 [ 388.208118][ T5818] __x64_sys_umount+0x143/0x250 [ 388.213128][ T5818] x64_sys_call+0x1057/0x3e20 [ 388.221377][ T5818] do_syscall_64+0xd9/0x210 [ 388.227104][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.233186][ T5818] [ 388.235881][ T5818] Uninit was created at: [ 388.240328][ T5818] __alloc_frozen_pages_noprof+0x689/0xf00 [ 388.246731][ T5818] alloc_pages_mpol+0x328/0x860 [ 388.251766][ T5818] alloc_frozen_pages_noprof+0xf7/0x200 [ 388.257667][ T5818] allocate_slab+0x24d/0x1220 [ 388.262502][ T5818] ___slab_alloc+0xff3/0x3470 [ 388.268487][ T5818] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 388.274590][ T5818] hfsplus_alloc_inode+0x5a/0xd0 [ 388.280148][ T5818] alloc_inode+0x8a/0x4a0 [ 388.284688][ T5818] new_inode+0x39/0x460 [ 388.289232][ T5818] hfsplus_new_inode+0x5e/0xb70 [ 388.294292][ T5818] hfsplus_mknod+0xb8/0x560 [ 388.299180][ T5818] hfsplus_mkdir+0x5a/0x80 [ 388.303785][ T5818] vfs_mkdir+0x4ea/0x850 [ 388.308572][ T5818] do_mkdirat+0x41a/0xf30 [ 388.313072][ T5818] __x64_sys_mkdirat+0xc1/0x140 [ 388.318357][ T5818] x64_sys_call+0x338/0x3e20 [ 388.326026][ T5818] do_syscall_64+0xd9/0x210 [ 388.330691][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.337899][ T5818] [ 388.340326][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 388.350105][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.360555][ T5818] ===================================================== [ 388.368914][ T5818] Disabling lock debugging due to kernel taint [ 388.375637][ T5818] Kernel panic - not syncing: kmsan.panic set ... [ 388.382209][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 388.393424][ T5818] Tainted: [B]=BAD_PAGE [ 388.397679][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 388.407862][ T5818] Call Trace: [ 388.411235][ T5818] [ 388.414243][ T5818] __dump_stack+0x26/0x30 [ 388.418759][ T5818] dump_stack_lvl+0x53/0x270 [ 388.423542][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.429542][ T5818] dump_stack+0x1e/0x25 [ 388.433877][ T5818] vpanic+0x361/0xc50 [ 388.438054][ T5818] panic+0x15d/0x160 [ 388.442182][ T5818] kmsan_report+0x31c/0x320 [ 388.446848][ T5818] ? __msan_warning+0x1b/0x30 [ 388.451686][ T5818] ? hfsplus_lookup+0x674/0xf70 [ 388.456712][ T5818] ? __lookup_slow+0x560/0x760 [ 388.461639][ T5818] ? lookup_slow+0x6a/0xd0 [ 388.466214][ T5818] ? walk_component+0x444/0x650 [ 388.471220][ T5818] ? path_lookupat+0x251/0x6b0 [ 388.476147][ T5818] ? filename_lookup+0x2bd/0x800 [ 388.481242][ T5818] ? user_path_at+0x91/0x3d0 [ 388.485989][ T5818] ? __x64_sys_umount+0x143/0x250 [ 388.491174][ T5818] ? x64_sys_call+0x1057/0x3e20 [ 388.496222][ T5818] ? do_syscall_64+0xd9/0x210 [ 388.501042][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.507281][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.512587][ T5818] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 388.519025][ T5818] ? __msan_memcpy+0x108/0x1c0 [ 388.523962][ T5818] ? hfsplus_bnode_read+0x6f8/0x990 [ 388.529365][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.534677][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.539984][ T5818] __msan_warning+0x1b/0x30 [ 388.544742][ T5818] hfsplus_lookup+0x674/0xf70 [ 388.549729][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.555087][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.560375][ T5818] ? __pfx_hfsplus_lookup+0x10/0x10 [ 388.565821][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.571831][ T5818] ? __pfx_hfsplus_lookup+0x10/0x10 [ 388.577214][ T5818] __lookup_slow+0x560/0x760 [ 388.581994][ T5818] lookup_slow+0x6a/0xd0 [ 388.586393][ T5818] walk_component+0x444/0x650 [ 388.591400][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.596712][ T5818] path_lookupat+0x251/0x6b0 [ 388.601474][ T5818] filename_lookup+0x2bd/0x800 [ 388.606389][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.612492][ T5818] ? strncpy_from_user+0x255/0x470 [ 388.617821][ T5818] ? kmsan_get_metadata+0xfb/0x160 [ 388.623155][ T5818] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.629193][ T5818] user_path_at+0x91/0x3d0 [ 388.633793][ T5818] __x64_sys_umount+0x143/0x250 [ 388.638809][ T5818] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 388.645330][ T5818] x64_sys_call+0x1057/0x3e20 [ 388.650223][ T5818] do_syscall_64+0xd9/0x210 [ 388.654881][ T5818] ? irqentry_exit+0x16/0x60 [ 388.659656][ T5818] ? clear_bhb_loop+0x40/0x90 [ 388.664506][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.670570][ T5818] RIP: 0033:0x7f55ffb8fed7 [ 388.675110][ T5818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 388.694884][ T5818] RSP: 002b:00007ffeb72fb358 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 388.703474][ T5818] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f55ffb8fed7 [ 388.711584][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb72fb410 [ 388.719690][ T5818] RBP: 00007ffeb72fb410 R08: 0000000000000000 R09: 0000000000000000 [ 388.727795][ T5818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb72fc500 [ 388.735891][ T5818] R13: 00007f55ffc11c05 R14: 0000555589b3a4a8 R15: 00007ffeb72fd5d0 [ 388.744046][ T5818] [ 388.747474][ T5818] Kernel Offset: disabled [ 388.751873][ T5818] Rebooting in 86400 seconds..