last executing test programs: 9.012236882s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa8}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 7.814475597s ago: executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000001c00)={0x10}, 0x10}], 0x2}, 0x0) 7.772653763s ago: executing program 4: prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) 7.635031934s ago: executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r0, &(0x7f00000029c0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000002940)=[@rdma_dest={0x18, 0x10c}, @rdma_dest={0x18}], 0x30}, 0x0) 7.571699975s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') 7.369718925s ago: executing program 4: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c", 0x26}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="9343000043"], 0xfe33) 7.245589235s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 7.203404991s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x401) sendmmsg(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000001c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="10000000000000008400000006"], 0x10}}], 0x2, 0x0) 7.090859978s ago: executing program 3: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x1a00001, &(0x7f0000000280)=ANY=[@ANYBLOB="63726561746f723dd592f1af2c696f636861727365743d69736f383835392d332c636f6465706167653d63703836312c000fa24b3fddc1642ef5a081eb095d2715c2ed4df1bdbd28f0b60de544f6fdad3ed7a04cd153b43fed0fb3435d2b10d92462cfbe97"], 0x5, 0x330, &(0x7f00000004c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x100800001) 6.836110888s ago: executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000001c00)={0x10}, 0x10}], 0x2}, 0x0) 6.401742015s ago: executing program 3: socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.016235764s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='ceph\x00', 0x0, &(0x7f0000000500)='acl') 5.631509953s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 4.957139847s ago: executing program 2: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000300)=0x80000001fe, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1}, 0x2140) 4.839112955s ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x1a00001, &(0x7f0000000280)=ANY=[@ANYBLOB="63726561746f723dd592f1af2c696f636861727365743d69736f383835392d332c636f6465706167653d63703836312c000fa24b3fddc1642ef5a081eb095d2715c2ed4df1bdbd28f0b60de544f6fdad3ed7a04cd153b43fed0fb3435d2b10d92462cfbe97"], 0x5, 0x330, &(0x7f00000004c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x100800001) 4.700302457s ago: executing program 2: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x54f8, &(0x7f0000005980)="$eJzs3LtvW1UcB/DjpGn6okSIga1XqpASqbbiPCrYArTiIVJFPAYmcGzHcmv7RrHjhEwMjIiB/wSBxMTI38DAzIYYQGxIIN9zQpvyWOLECfl8pOvvvcfXv3uOVVX6XUc3ABfWXPbbL6VwM1wNIUyHEG6EUOyX0lZYi/FCCOFWCGHqia2Uxv8auBxCuBZCuJkKJqO3vrgzvL3681u/fvv97KXrX37zwwSWC5wRL4YQuttxf68bM2/FfJjGa8N2kd2VYcr4RvdROs5j7jU3iwp7tcPzakUut+L5+fZuf5RbnVp9lK32VjG+3YsX7A9bh3WKDzys7RTHjeZmke1+XmTrIM5r/yD+93bQH8Q6jVTv46J8GAwOM44395txPduPiqz3Bmk81s0bzf1RDlOmy4V63mkU89g8zjd9tr3d7u3uZ8PmTr+d97LVSvWlSvVuubqTN5qD5kq51m3cXcnmW53RaeVBs9Zda+V5q9Os1PPuQjbfqtfL1Wo2f6+52a71smq1slxZLK8upL072esP3s86jWx+lK+2e7uDdqefbeU7WfzEQrZUWX55Ibtdzd5d38g23rl/f33jvQ/vffDglfU3X0sn/W1a2fzS4tJSubpYXqouXKD1f5omPcb1w7GUJj0BgPPnRPv/uVizpP8HnnLe+/+g/x+Lc9X/XvT+/wTWD8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLB+nPnqjWJnLh5fT+PPpKHn0nEphDAVQvjjH0yHy0dqTqc6M/9y/sxTc1gLoagwusZs2q6l8dH2+7Mn/S0AAADA/9fXn9z6PHbr8WVu0hPiNMWbNlM3PhpTvVIIYWbupzFVmxq9PD+mYsW/70thf0zVihtYV8ZULN5yuzSuav/h8X236SNx5YkoxZg6hekAAACn7GgncBpdCAAAAJPx2aQnwGSUwuPfBNMf8M/GSD8IXj1yBAAAAJxDpUlPAAAAADhxRf9/Fp7/913J8/8AAADgpMTn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxPTsJAFAfg10IF/0Vi3HsVd3AMj+DSpeEAXoIj4BW8AGfAnUcwYGhLtAYTkw7FkO9L2jIT8uOVsHkzpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD69FfPJy9Ptc9uc1bqdNHcDAAAA7LIs5pPyxagan9fzl/XUdT3OIiKPiF29ey9OGpm9Oqf45f3FjxpeI8qEzWcM6uMsIu7q4+Nq398CAAAAHK/FdDauuvXqNDp0QXSpWrTJL+4T5WURUYzeE6Xlm9NNorDy992Px0Rp5QLWMFFYteTWT5X2J73GZfjtklWXvNNyAACATjQ7gW67EAAAALr0cOgCOIwstluZ273g8p/3XxuCp40RAAAA8L8Ndk1m3dcBAAAAdKzs/z3/DwAAAI5b9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9mlZzCeL6WzcNme1bifN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLI/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79+8ZNxQEAf7bPF1pAHAFlCEIgMcBCr9fS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/6HzImUJWwZbggSc5B9duL8kDgIsa/J5yM9v+9Z1nvf50RRvn5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS8L2DOMkOnVEcF+c2dh8vZP3mkT6ztrI1m7UsjupM+unwavVDNNNcIgAAAFwcSVnfhxC209W5rI87ef2fltdkNf8Pz4/isp4/WveXfVn7Z+3333Ze3p+oM5onG/TO4qB/9XgqrbNb5WR74R+vaOV3Pn/2kuRfkPjD5ZeGaX4/o+/W199v5+FUHdkCAP/FlbIvgvL3oazvNZkYABdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6DJfDs2UchRBmWwdxZnP38cJJ/drK1mzZbj55slIdMxsiDSHcWRz0r9a4lkn34OGjz+YHg/79+oPXQgjNzV4EH49xTQhNZig4bRAX3+v/48h70QSs62yDhn8wAQBw7qRFy+r67XR1LjsXTYew9+Ph+v/NShzGrP93Prm5UZ2rWv/3alvh5Osu3fuy++Dho7cX783f7d/tf/7Otd67veu3bty41c2flXQ9MQEAAOB02kWr1v/x9PH9/8uVOIxZ/3/1fe+b6lyJ+v9EB5t+TWcCAABwsb34+l9/Riecj9rt8PX80tL93ui4//na6NhAqv/aVNGq9X8y3XRWAAAAQB2Gy9Gh/f/blTiMuf//3E+v/FIdMwkhXCr2/68sfDG4Xd9yJlodf07c9BoBAABo1qWiVff/0/z9/3j/lYc4hPDWG6O4+DeAY9X/yQff/lydq/r+//X6ljiR4pnR/cj7qRBaM01nBAAAwHn2TNGyYv+PdHXu018vf9T2/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//xwcQP8=") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, r1, 0x0) ftruncate(r1, 0x8979) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 4.194380615s ago: executing program 2: socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.043408968s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x6c, 0x200, 0x110, 0x0, 0x240, 0x2e8, 0x2e8, 0x240, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'vxcan1\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x5, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 2.306858255s ago: executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r0, &(0x7f00000029c0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000002940)=[@rdma_dest={0x18, 0x10c}, @rdma_dest={0x18}], 0x30}, 0x0) 2.242541105s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 2.150514909s ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000200)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f646973636172640000008000000000ff5f78617474722c646973636172642c7768696e745f6d6f64653d757365722d626173651a9603642c6e6f696e6c696e48c8b8bd9db833403801c199ffba3691ebc17570972cb0aab560ecd4a62772a15b05a04f8812838b6d154a85515cf6a313e8043c58707a92904e0d69fdd8fd380734190ccaff409ba8953c23b0c6f1c09d49447f1e1d0cedb97bb4daf266dcc2cec17b92cbbe1303abfc278ad789ffe0f34862de20f795a4b968385446d1964503b1815a337e284216bd6809000000000004000000d593d55b7516ceab7cd61a02b7aa1f09af6411cc77b8aeb6cb60fe02009fbd67bd8d700393ec17bc2e355467864b7e313f5f5ebead17e18e7fa077c6bf2fe6d11ac484b13898ad0c52acbc155d3426"], 0x1, 0x54f8, &(0x7f0000005980)="$eJzs3LtvW1UcB/DjpGn6okSIga1XqpASqbbiPCrYArTiIVJFPAYmcGzHcmv7RrHjhEwMjIiB/wSBxMTI38DAzIYYQGxIIN9zQpvyWOLECfl8pOvvvcfXv3uOVVX6XUc3ABfWXPbbL6VwM1wNIUyHEG6EUOyX0lZYi/FCCOFWCGHqia2Uxv8auBxCuBZCuJkKJqO3vrgzvL3681u/fvv97KXrX37zwwSWC5wRL4YQuttxf68bM2/FfJjGa8N2kd2VYcr4RvdROs5j7jU3iwp7tcPzakUut+L5+fZuf5RbnVp9lK32VjG+3YsX7A9bh3WKDzys7RTHjeZmke1+XmTrIM5r/yD+93bQH8Q6jVTv46J8GAwOM44395txPduPiqz3Bmk81s0bzf1RDlOmy4V63mkU89g8zjd9tr3d7u3uZ8PmTr+d97LVSvWlSvVuubqTN5qD5kq51m3cXcnmW53RaeVBs9Zda+V5q9Os1PPuQjbfqtfL1Wo2f6+52a71smq1slxZLK8upL072esP3s86jWx+lK+2e7uDdqefbeU7WfzEQrZUWX55Ibtdzd5d38g23rl/f33jvQ/vffDglfU3X0sn/W1a2fzS4tJSubpYXqouXKD1f5omPcb1w7GUJj0BgPPnRPv/uVizpP8HnnLe+/+g/x+Lc9X/XvT+/wTWD8ei/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLB+nPnqjWJnLh5fT+PPpKHn0nEphDAVQvjjH0yHy0dqTqc6M/9y/sxTc1gLoagwusZs2q6l8dH2+7Mn/S0AAADA/9fXn9z6PHbr8WVu0hPiNMWbNlM3PhpTvVIIYWbupzFVmxq9PD+mYsW/70thf0zVihtYV8ZULN5yuzSuav/h8X236SNx5YkoxZg6hekAAACn7GgncBpdCAAAAJPx2aQnwGSUwuPfBNMf8M/GSD8IXj1yBAAAAJxDpUlPAAAAADhxRf9/Fp7/913J8/8AAADgpMTn/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCf7NxPTsJAFAfg10IF/0Vi3HsVd3AMj+DSpeEAXoIj4BW8AGfAnUcwYGhLtAYTkw7FkO9L2jIT8uOVsHkzpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD69FfPJy9Ptc9uc1bqdNHcDAAAA7LIs5pPyxagan9fzl/XUdT3OIiKPiF29ey9OGpm9Oqf45f3FjxpeI8qEzWcM6uMsIu7q4+Nq398CAAAAHK/FdDauuvXqNDp0QXSpWrTJL+4T5WURUYzeE6Xlm9NNorDy992Px0Rp5QLWMFFYteTWT5X2J73GZfjtklWXvNNyAACATjQ7gW67EAAAALr0cOgCOIwstluZ273g8p/3XxuCp40RAAAA8L8Ndk1m3dcBAAAAdKzs/z3/DwAAAI5b9fw/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9mlZzCeL6WzcNme1bifN3QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfLI/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79+8ZNxQEAf7bPF1pAHAFlCEIgMcBCr9fS0pUBFDHwJyBF6bUErvxoM9CqQsrChjJ3QTAihAQKW/6HzImUJWwZbggSc5B9duL8kDgIsa/J5yM9v+9Z1nvf50RRvn5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDS8L2DOMkOnVEcF+c2dh8vZP3mkT6ztrI1m7UsjupM+unwavVDNNNcIgAAAFwcSVnfhxC209W5rI87ef2fltdkNf8Pz4/isp4/WveXfVn7Z+3333Ze3p+oM5onG/TO4qB/9XgqrbNb5WR74R+vaOV3Pn/2kuRfkPjD5ZeGaX4/o+/W199v5+FUHdkCAP/FlbIvgvL3oazvNZkYABdGq1J4l/V/0mk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA6DJfDs2UchRBmWwdxZnP38cJJ/drK1mzZbj55slIdMxsiDSHcWRz0r9a4lkn34OGjz+YHg/79+oPXQgjNzV4EH49xTQhNZig4bRAX3+v/48h70QSs62yDhn8wAQBw7qRFy+r67XR1LjsXTYew9+Ph+v/NShzGrP93Prm5UZ2rWv/3alvh5Osu3fuy++Dho7cX783f7d/tf/7Otd67veu3bty41c2flXQ9MQEAAOB02kWr1v/x9PH9/8uVOIxZ/3/1fe+b6lyJ+v9EB5t+TWcCAABwsb34+l9/Riecj9rt8PX80tL93ui4//na6NhAqv/aVNGq9X8y3XRWAAAAQB2Gy9Gh/f/blTiMuf//3E+v/FIdMwkhXCr2/68sfDG4Xd9yJlodf07c9BoBAABo1qWiVff/0/z9/3j/lYc4hPDWG6O4+DeAY9X/yQff/lydq/r+//X6ljiR4pnR/cj7qRBaM01nBAAAwHn2TNGyYv+PdHXu018vf9T2/j8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//xwcQP8=") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, r1, 0x0) ftruncate(r1, 0x8979) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 1.992649803s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 1.840411097s ago: executing program 1: unshare(0x20000400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x4, &(0x7f0000000080), 0x4) 1.75755936s ago: executing program 1: syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000280), 0x4, 0x97e1, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=@ocfs2={0xc, 0x4}, 0x0) 890.263093ms ago: executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000001c00)={0x10}, 0x10}], 0x2}, 0x0) 840.686801ms ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@allocspi={0x224, 0x16, 0xe32b7fa974c0285, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2}, {@in6=@remote, 0x0, 0x6c}, @in=@multicast2}, 0x0, 0x7845}, [@sa={0xe4, 0x6, {{@in=@multicast1, @in6=@private2}, {@in=@loopback}, @in6=@remote}}, @algo_auth={0x48, 0x9, {{'sha384-avx2\x00'}}}]}, 0x224}}, 0x0) 754.701704ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x104, 0xc}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 547.042736ms ago: executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x217, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x50, &(0x7f0000000440)={0x5, 0xf, 0x50, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "ff29957b8860e1cb9e0ddbcf9478d4e3"}, @generic={0x34, 0x10, 0xa, "c4c9867b2541f5265111cfc53c74ded464a5d40e4cca1581c1af0c40606ebcfbc482fc30f9e2c570950d3e8a77e272980c"}, @generic={0x3}]}}) 241.544653ms ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000023c0)={0x20, 0x1e, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x4, 0xd, 0x0, 0x0, @binary}]}, 0x20}}, 0x0) 0s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): nput: syz1 as /devices/virtual/input/input12 [ 269.397116][ T8159] overlayfs: unrecognized mount option "\./file0" or missing value [ 269.457504][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.488209][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.873081][ T2964] usb 3-1: USB disconnect, device number 6 [ 270.242512][ T8179] loop1: detected capacity change from 0 to 512 [ 270.249992][ T8179] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.286603][ T8179] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 270.321451][ T8179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e118, mo2=0002] [ 270.321577][ T8169] loop3: detected capacity change from 0 to 40427 [ 270.339564][ T8169] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 270.345430][ T8179] System zones: 1-12 [ 270.347508][ T8169] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 270.374295][ T8179] EXT4-fs (loop1): 1 truncate cleaned up [ 270.380055][ T8179] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 270.383871][ T8169] F2FS-fs (loop3): Found nat_bits in checkpoint [ 270.456039][ T3617] libceph: connect (1)[c::]:6789 error -101 [ 270.474230][ T3617] libceph: mon0 (1)[c::]:6789 connect error [ 270.507869][ T3617] libceph: connect (1)[c::]:6789 error -101 [ 270.526468][ T8169] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 270.534593][ T3617] libceph: mon0 (1)[c::]:6789 connect error [ 270.551491][ T8169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 270.619031][ T8179] ceph: No mds server is up or the cluster is laggy [ 271.202307][ T3570] EXT4-fs (loop1): unmounting filesystem. [ 271.798277][ T8224] loop1: detected capacity change from 0 to 1024 [ 272.096376][ T8224] EXT4-fs: quotafile must be on filesystem root [ 272.274363][ T8224] CIFS mount error: No usable UNC path provided in device string! [ 272.274363][ T8224] [ 272.331157][ T8224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 273.304622][ T8235] input: syz1 as /devices/virtual/input/input13 [ 273.494706][ T8241] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.532295][ T8241] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.765743][ T8254] loop4: detected capacity change from 0 to 2048 [ 273.794678][ T8254] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 273.814114][ T8254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.825307][ T8222] loop3: detected capacity change from 0 to 40427 [ 273.834164][ T8222] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 273.850775][ T8222] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 273.933204][ T2964] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 274.021427][ T8222] F2FS-fs (loop3): Found nat_bits in checkpoint [ 274.302158][ T2964] usb 3-1: Using ep0 maxpacket: 32 [ 274.430905][ T2964] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 274.443310][ T2964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.484030][ T2964] usb 3-1: config 0 descriptor?? [ 274.534058][ T2964] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 274.548927][ T2964] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 274.776118][ T2964] usb 3-1: USB disconnect, device number 7 [ 274.798033][ T52] block nbd0: Attempted send on invalid socket [ 274.805710][ T52] I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 274.817327][ T8279] VFS: unable to read V7 FS superblock on device nbd0. [ 274.824971][ T8279] VFS: could not find a valid V7 on nbd0. [ 275.011078][ T26] audit: type=1804 audit(1718300077.912:107): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2606625860/syzkaller.kV0bMe/233/bus" dev="sda1" ino=1955 res=1 errno=0 [ 275.055719][ T8289] loop1: detected capacity change from 0 to 2048 [ 275.096109][ T8289] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 275.131439][ T8289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.285161][ T8301] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.317306][ T8301] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.418211][ T8306] loop3: detected capacity change from 0 to 16 [ 275.453358][ T1027] block nbd0: Attempted send on invalid socket [ 275.459633][ T1027] I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.467808][ T8306] erofs: (device loop3): mounted with root inode @ nid 36. [ 275.469253][ T8310] VFS: unable to read V7 FS superblock on device nbd0. [ 275.492014][ T8310] VFS: could not find a valid V7 on nbd0. [ 275.820382][ T8327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.908272][ T8329] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 275.942747][ T8329] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.037594][ T8295] loop4: detected capacity change from 0 to 40427 [ 276.087846][ T8295] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 276.100149][ T52] block nbd0: Attempted send on invalid socket [ 276.106525][ T52] I/O error, dev nbd0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.111384][ T8340] loop1: detected capacity change from 0 to 16 [ 276.123874][ T8295] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 276.132352][ T8342] VFS: unable to read V7 FS superblock on device nbd0. [ 276.139289][ T8342] VFS: could not find a valid V7 on nbd0. [ 276.145186][ T26] audit: type=1804 audit(1718300079.042:108): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2372191208/syzkaller.DZRtHu/76/bus" dev="sda1" ino=1951 res=1 errno=0 [ 276.145314][ T8344] Invalid ELF header type: 0 != 1 [ 276.170549][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 276.226483][ T8340] erofs: (device loop1): mounted with root inode @ nid 36. [ 276.236117][ T8295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 276.342023][ T8295] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 276.349140][ T8295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 276.432058][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 276.467008][ T8359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.491970][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.514663][ T8359] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.552069][ T14] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 276.572030][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.608117][ T14] usb 4-1: config 0 descriptor?? [ 276.664268][ T14] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 276.692802][ T14] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 276.888728][ T26] audit: type=1800 audit(1718300079.792:109): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 276.909464][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.921228][ T14] usb 4-1: USB disconnect, device number 5 [ 276.962064][ T26] audit: type=1800 audit(1718300079.792:110): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 277.042564][ T26] audit: type=1326 audit(1718300079.952:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8380 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da7a7cea9 code=0x0 [ 277.091878][ T3913] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 277.231210][ T8384] sctp: [Deprecated]: syz-executor.4 (pid 8384) Use of int in max_burst socket option. [ 277.231210][ T8384] Use struct sctp_assoc_value instead [ 277.330659][ T8389] loop2: detected capacity change from 0 to 256 [ 277.353474][ T8389] FAT-fs (loop2): Unrecognized mount option "sys]immutable" or missing value [ 277.363249][ T3913] usb 2-1: Using ep0 maxpacket: 8 [ 277.482139][ T3913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.502457][ T3913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.531654][ T3913] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 277.553431][ T3913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.572261][ T3913] usb 2-1: config 0 descriptor?? [ 278.043700][ T3913] elo 0003:04E7:0009.000B: unknown main item tag 0x0 [ 278.050561][ T3913] elo 0003:04E7:0009.000B: unknown main item tag 0x0 [ 278.071758][ T3913] elo 0003:04E7:0009.000B: item fetching failed at offset 2/7 [ 278.092339][ T3913] elo 0003:04E7:0009.000B: parse failed [ 278.098015][ T3913] elo: probe of 0003:04E7:0009.000B failed with error -22 [ 278.184190][ T8397] loop3: detected capacity change from 0 to 32768 [ 278.265733][ T3615] usb 2-1: USB disconnect, device number 9 [ 278.591298][ T8438] NILFS (loop4): device size too small [ 278.729039][ T8447] loop4: detected capacity change from 0 to 64 [ 279.772272][ T8457] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.987806][ T8462] loop3: detected capacity change from 0 to 256 [ 280.033461][ T8462] FAT-fs (loop3): Unrecognized mount option "sys]immutable" or missing value [ 280.276356][ T26] audit: type=1800 audit(1718300083.182:112): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 280.347771][ T26] audit: type=1800 audit(1718300083.202:113): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 280.401283][ T8486] loop4: detected capacity change from 0 to 64 [ 280.643936][ T8451] loop2: detected capacity change from 0 to 32768 [ 281.605647][ T8501] NILFS (loop4): device size too small [ 281.628946][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.638825][ T8505] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.730094][ T8508] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 282.079407][ T8525] loop2: detected capacity change from 0 to 2048 [ 282.292127][ T8536] NILFS (loop2): device size too small [ 282.519509][ T26] audit: type=1326 audit(1718300085.422:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.542478][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.588440][ T26] audit: type=1326 audit(1718300085.422:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.622568][ T8513] loop3: detected capacity change from 0 to 32768 [ 282.654376][ T26] audit: type=1326 audit(1718300085.472:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.687567][ T8532] loop1: detected capacity change from 0 to 32768 [ 282.700442][ T26] audit: type=1326 audit(1718300085.472:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.750995][ T26] audit: type=1326 audit(1718300085.472:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.779608][ T26] audit: type=1326 audit(1718300085.472:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.820894][ T26] audit: type=1326 audit(1718300085.472:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe247e7cea9 code=0x7ffc0000 [ 282.865092][ T26] audit: type=1326 audit(1718300085.472:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8540 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe247e7a627 code=0x7ffc0000 [ 283.010451][ T8551] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 283.581830][ T3618] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 283.832730][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.983194][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.995664][ T3618] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.021819][ T3618] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 284.032826][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.037846][ T3618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.060620][ T8589] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.071621][ T3618] usb 3-1: config 0 descriptor?? [ 284.079534][ T8571] loop1: detected capacity change from 0 to 40427 [ 284.103022][ T8571] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 284.115748][ T8571] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 284.129577][ T8571] F2FS-fs (loop1): invalid crc value [ 284.137909][ T8571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 284.222379][ T8571] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 284.229673][ T8571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 284.250654][ T8601] netlink: 4600 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.315641][ T8571] syz-executor.1: attempt to access beyond end of device [ 284.315641][ T8571] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 284.336723][ T8571] syz-executor.1: attempt to access beyond end of device [ 284.336723][ T8571] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 284.370735][ T8606] hpfs: bad mount options. [ 284.390196][ T3570] syz-executor.1: attempt to access beyond end of device [ 284.390196][ T3570] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.545358][ T3618] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 284.560723][ T3618] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 284.602137][ T3618] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000C/input/input16 [ 284.660972][ T3618] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 284.675226][ T8619] IPVS: sync thread started: state = MASTER, mcast_ifn = pimreg, syncid = 0, id = 0 [ 284.791548][ T14] usb 3-1: USB disconnect, device number 8 [ 286.191157][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 286.191175][ T26] audit: type=1804 audit(1718300089.092:222): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2372191208/syzkaller.DZRtHu/103/bus" dev="sda1" ino=1947 res=1 errno=0 [ 286.238015][ T8646] Invalid ELF header magic: != ELF [ 286.243944][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.440018][ T8655] hpfs: bad mount options. [ 286.644829][ T8666] loop3: detected capacity change from 0 to 1024 [ 286.717902][ T4480] tipc: Subscription rejected, illegal request [ 286.761816][ T3617] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 286.818763][ T8633] loop4: detected capacity change from 0 to 40427 [ 286.840738][ T8633] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 286.861993][ T8633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 286.900953][ T8633] F2FS-fs (loop4): invalid crc value [ 286.951869][ T26] audit: type=1804 audit(1718300089.852:223): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir738363936/syzkaller.Ybti5H/339/bus" dev="sda1" ino=1961 res=1 errno=0 [ 286.953376][ T8681] Invalid ELF header magic: != ELF [ 286.977015][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.977226][ T8633] F2FS-fs (loop4): Found nat_bits in checkpoint [ 287.031764][ T3617] usb 3-1: Using ep0 maxpacket: 8 [ 287.081471][ T8633] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 287.109125][ T8633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 287.162139][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.189008][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.200205][ T26] audit: type=1800 audit(1718300090.102:224): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 287.221071][ T3617] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 287.221119][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.223227][ T3617] usb 3-1: config 0 descriptor?? [ 287.266485][ T8633] syz-executor.4: attempt to access beyond end of device [ 287.266485][ T8633] loop4: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 287.291569][ T26] audit: type=1804 audit(1718300090.162:225): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1530192200/syzkaller.k9mu3k/28/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 287.324880][ T8694] syz-executor.4: attempt to access beyond end of device [ 287.324880][ T8694] loop4: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 287.367565][ T26] audit: type=1804 audit(1718300090.162:226): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1530192200/syzkaller.k9mu3k/28/bus/bus" dev="loop4" ino=10 res=1 errno=0 [ 287.392359][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.426003][ T7846] syz-executor.4: attempt to access beyond end of device [ 287.426003][ T7846] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 287.525300][ T8698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.823840][ T3617] elo 0003:04E7:0009.000D: unknown main item tag 0x0 [ 287.830623][ T3617] elo 0003:04E7:0009.000D: unknown main item tag 0x0 [ 287.838465][ T8705] loop1: detected capacity change from 0 to 1024 [ 287.852072][ T3617] elo 0003:04E7:0009.000D: item fetching failed at offset 2/7 [ 287.874458][ T3617] elo 0003:04E7:0009.000D: parse failed [ 287.880125][ T3617] elo: probe of 0003:04E7:0009.000D failed with error -22 [ 287.984302][ T8711] loop3: detected capacity change from 0 to 64 [ 288.095320][ T2964] usb 3-1: USB disconnect, device number 9 [ 288.110988][ T8716] loop1: detected capacity change from 0 to 2048 [ 289.081848][ T8724] 9pnet: p9_errstr2errno: server reported unknown error Ӯ [ 289.351418][ T8736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.596261][ T8717] loop4: detected capacity change from 0 to 32768 [ 290.158425][ T8733] loop1: detected capacity change from 0 to 32768 [ 290.167050][ T8733] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8733) [ 291.099667][ T8733] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 291.150309][ T8733] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 291.167252][ T8733] BTRFS info (device loop1): turning off barriers [ 291.193302][ T8733] BTRFS info (device loop1): enabling auto defrag [ 291.227079][ T8733] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 291.251841][ T8733] BTRFS info (device loop1): use lzo compression, level 0 [ 291.259084][ T8733] BTRFS info (device loop1): using free space tree [ 291.298735][ T8766] 9pnet: p9_errstr2errno: server reported unknown error Ӯ [ 291.320284][ T26] audit: type=1804 audit(1718300094.222:227): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2372191208/syzkaller.DZRtHu/110/bus" dev="sda1" ino=1966 res=1 errno=0 [ 291.346326][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.353704][ T8772] Invalid ELF header magic: != ELF [ 291.937955][ T3570] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.967883][ T8814] 9pnet: p9_errstr2errno: server reported unknown error Ӯ [ 293.064560][ T8818] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.121371][ T8778] loop4: detected capacity change from 0 to 40427 [ 293.210345][ T8778] F2FS-fs (loop4): Found nat_bits in checkpoint [ 293.301467][ T8778] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 293.384589][ T7846] syz-executor.4: attempt to access beyond end of device [ 293.384589][ T7846] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 293.692121][ T8820] loop2: detected capacity change from 0 to 32768 [ 293.762897][ T8820] loop2: p1 p2 p3 < p5 p6 p7 > [ 293.784032][ T8820] loop2: p6 size 36129 extends beyond EOD, truncated [ 293.795821][ T8835] loop1: detected capacity change from 0 to 64 [ 293.805514][ T26] audit: type=1400 audit(1718300096.712:228): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 294.089841][ T8840] loop3: detected capacity change from 0 to 4096 [ 294.384252][ T8840] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 295.159043][ T8864] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.224818][ T8868] IPVS: sync thread started: state = MASTER, mcast_ifn = pimreg, syncid = 0, id = 0 [ 295.261306][ T26] audit: type=1400 audit(1718300098.162:229): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 295.434657][ T8881] loop1: detected capacity change from 0 to 64 [ 295.521853][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.598131][ T8896] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.799786][ T26] audit: type=1400 audit(1718300099.702:230): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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 [ 296.811948][ T8884] loop2: detected capacity change from 0 to 40427 [ 296.910954][ T8884] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 296.918731][ T8884] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 296.931027][ T8884] F2FS-fs (loop2): invalid crc value [ 296.943945][ T8884] F2FS-fs (loop2): Found nat_bits in checkpoint [ 297.008115][ T8884] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 297.021816][ T8884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 297.031125][ T8910] IPVS: sync thread started: state = MASTER, mcast_ifn = pimreg, syncid = 0, id = 0 [ 297.060312][ T26] audit: type=1800 audit(1718300099.962:231): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 297.067553][ T8884] syz-executor.2: attempt to access beyond end of device [ 297.067553][ T8884] loop2: rw=34817, sector=77824, nr_sectors = 128 limit=40427 [ 297.108580][ T8884] syz-executor.2: attempt to access beyond end of device [ 297.108580][ T8884] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 297.123506][ T26] audit: type=1804 audit(1718300099.962:232): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2372191208/syzkaller.DZRtHu/119/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 297.168464][ T26] audit: type=1804 audit(1718300099.962:233): pid=8884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2372191208/syzkaller.DZRtHu/119/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 297.254032][ T7194] syz-executor.2: attempt to access beyond end of device [ 297.254032][ T7194] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 297.402709][ T8918] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 297.602905][ T4785] tipc: Subscription rejected, illegal request [ 298.249507][ T8950] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 298.818858][ T8953] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.936658][ T8956] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.045445][ T8960] loop4: detected capacity change from 0 to 164 [ 299.062881][ T8960] Unsupported NM flag settings (8) [ 299.511850][ T3928] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 299.882092][ T3928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.915237][ T3928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.948459][ T8981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.955750][ T3928] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 299.984852][ T8971] loop4: detected capacity change from 0 to 32768 [ 299.991989][ T3928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.084722][ T3928] usb 1-1: config 0 descriptor?? [ 300.091242][ T8971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8971) [ 300.208137][ T8971] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 300.240665][ T8971] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 300.261887][ T8971] BTRFS info (device loop4): using free space tree [ 301.113558][ T3928] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 301.131196][ T3928] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 301.141302][ T3928] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000E/input/input17 [ 301.175751][ T3928] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 301.240381][ T8971] BTRFS info (device loop4): enabling ssd optimizations [ 301.324894][ T3928] usb 1-1: USB disconnect, device number 8 [ 301.363445][ T7846] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 301.393488][ T26] audit: type=1326 audit(1718300104.302:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.434856][ T9023] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.454334][ T26] audit: type=1326 audit(1718300104.302:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.520156][ T26] audit: type=1326 audit(1718300104.322:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.596784][ T26] audit: type=1326 audit(1718300104.322:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.619720][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.695618][ T26] audit: type=1326 audit(1718300104.352:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.718452][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.737483][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.818747][ T26] audit: type=1326 audit(1718300104.352:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.889115][ T26] audit: type=1326 audit(1718300104.352:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 301.978569][ T26] audit: type=1326 audit(1718300104.352:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc00ca7a627 code=0x7ffc0000 [ 302.059000][ T26] audit: type=1326 audit(1718300104.352:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc00ca40309 code=0x7ffc0000 [ 302.119704][ T26] audit: type=1326 audit(1718300104.352:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc00ca7a627 code=0x7ffc0000 [ 302.154239][ T26] audit: type=1326 audit(1718300104.382:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc00ca40309 code=0x7ffc0000 [ 302.215233][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.265852][ T26] audit: type=1326 audit(1718300104.382:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc00ca7a627 code=0x7ffc0000 [ 302.295043][ T9059] loop1: detected capacity change from 0 to 164 [ 302.326644][ T26] audit: type=1326 audit(1718300104.382:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc00ca40309 code=0x7ffc0000 [ 302.360228][ T26] audit: type=1326 audit(1718300104.382:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc00ca7a627 code=0x7ffc0000 [ 302.367856][ T9059] Unsupported NM flag settings (8) [ 302.402050][ T26] audit: type=1326 audit(1718300104.382:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc00ca40309 code=0x7ffc0000 [ 302.441237][ T9064] loop4: detected capacity change from 0 to 128 [ 302.631756][ T3907] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 302.767866][ T9082] loop4: detected capacity change from 0 to 64 [ 302.908275][ T9087] loop4: detected capacity change from 0 to 1024 [ 303.104364][ T3907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.116088][ T3907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.131510][ T3907] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 303.140781][ T3907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.157614][ T3907] usb 3-1: config 0 descriptor?? [ 303.168971][ T7916] hfsplus: b-tree write err: -5, ino 4 [ 303.248686][ T9095] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.273802][ T9099] ip6t_srh: unknown srh invflags 7D00 [ 303.643991][ T3907] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 303.666287][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.670409][ T3907] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 303.703624][ T3907] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000F/input/input18 [ 303.778705][ T9126] ip6t_srh: unknown srh invflags 7D00 [ 303.920805][ T3907] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 303.935638][ T3907] usb 3-1: USB disconnect, device number 10 [ 305.793936][ T9139] loop3: detected capacity change from 0 to 64 [ 306.118388][ T9161] loop2: detected capacity change from 0 to 128 [ 306.271445][ T9172] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 306.443701][ T9180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.456137][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.520744][ T9187] xt_TCPMSS: Only works on TCP SYN packets [ 306.538937][ T9189] loop2: detected capacity change from 0 to 64 [ 306.840043][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 306.840061][ T26] audit: type=1800 audit(1718300109.742:267): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1951 res=0 errno=0 [ 306.960962][ T9209] loop4: detected capacity change from 0 to 1024 [ 306.971895][ T14] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 307.112683][ T9213] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 307.531897][ T3582] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.953005][ T9222] dlm: Unknown command passed to DLM device : 0 [ 307.953005][ T9222] [ 307.981956][ T2964] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 308.111823][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 308.135446][ T9233] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 308.232287][ T14] usb 4-1: config 0 has no interfaces? [ 308.342259][ T2964] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.355790][ T2964] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.392079][ T14] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 308.404756][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.420843][ T14] usb 4-1: Product: syz [ 308.429843][ T14] usb 4-1: Manufacturer: syz [ 308.439053][ T14] usb 4-1: SerialNumber: syz [ 308.444116][ T2964] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 308.469793][ T2964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 308.482551][ T14] r8152-cfgselector 4-1: config 0 descriptor?? [ 308.504599][ T2964] usb 3-1: SerialNumber: syz [ 308.720383][ T9245] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd [ 309.532908][ T14] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 309.546066][ T14] usb 4-1: USB disconnect, device number 6 [ 309.559607][ T2964] usb 3-1: 0:2 : does not exist [ 309.568668][ T2964] usb 3-1: unit 5: unexpected type 0x0d [ 309.603150][ T2964] usb 3-1: USB disconnect, device number 11 [ 309.665408][ T9251] dlm: Unknown command passed to DLM device : 0 [ 309.665408][ T9251] [ 309.990103][ T9261] loop3: detected capacity change from 0 to 8192 [ 310.061725][ T9261] loop3: p2 p3 p4[EZD] [ 310.066040][ T9261] loop3: partition table partially beyond EOD, truncated [ 310.113847][ T9261] loop3: p3 start 458783 is beyond EOD, truncated [ 310.137487][ T9261] loop3: p4 start 16779520 is beyond EOD, truncated [ 310.280272][ T9273] loop2: detected capacity change from 0 to 2048 [ 310.388125][ T9273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.413282][ T9284] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 310.645266][ T9253] loop4: detected capacity change from 0 to 40427 [ 310.665313][ T1027] block nbd3: Attempted send on invalid socket [ 310.671537][ T1027] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.690241][ T1027] block nbd3: Attempted send on invalid socket [ 310.696572][ T1027] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 310.723624][ T9253] F2FS-fs (loop4): invalid crc value [ 310.767262][ T9253] F2FS-fs (loop4): Found nat_bits in checkpoint [ 310.890642][ T9297] loop3: detected capacity change from 0 to 128 [ 310.901017][ T9297] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 310.945144][ T9297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.957853][ T9253] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 311.022198][ T7194] EXT4-fs (loop2): unmounting filesystem. [ 311.122436][ T7846] syz-executor.4: attempt to access beyond end of device [ 311.122436][ T7846] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.557529][ T9322] loop1: detected capacity change from 0 to 736 [ 312.035338][ T9335] loop4: detected capacity change from 0 to 16 [ 312.074940][ T9335] erofs: (device loop4): mounted with root inode @ nid 36. [ 312.097972][ T3579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.111741][ T3579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.120762][ T3579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.130604][ T3579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.145010][ T3579] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 312.152626][ T3579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.292487][ T26] audit: type=1326 audit(1718300115.202:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4da7a7cea9 code=0x0 [ 312.605214][ T9331] loop1: detected capacity change from 0 to 40427 [ 312.621902][ T9331] F2FS-fs (loop1): invalid crc value [ 312.649801][ T9336] chnl_net:caif_netlink_parms(): no params data found [ 312.671030][ T9331] F2FS-fs (loop1): Found nat_bits in checkpoint [ 312.833772][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.840996][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.855489][ T9331] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 312.872986][ T9336] device bridge_slave_0 entered promiscuous mode [ 312.897753][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.925762][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.947448][ T9336] device bridge_slave_1 entered promiscuous mode [ 312.978056][ T3570] syz-executor.1: attempt to access beyond end of device [ 312.978056][ T3570] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 313.017530][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.049960][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.083261][ T9367] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 313.223026][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.340660][ T9336] team0: Port device team_slave_0 added [ 313.370045][ T9336] team0: Port device team_slave_1 added [ 313.409784][ T9375] loop3: detected capacity change from 0 to 128 [ 313.470755][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.487981][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.601792][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.683668][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.690674][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.719301][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.730293][ T9381] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 313.736822][ T9381] PKCS7: Only support pkcs7_signedData type [ 313.791241][ T9369] loop4: detected capacity change from 0 to 32768 [ 313.799885][ T9369] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9369) [ 313.822201][ T9369] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 313.835330][ T9369] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 313.870072][ T9369] BTRFS info (device loop4): using free space tree [ 313.905075][ T9336] device hsr_slave_0 entered promiscuous mode [ 313.912671][ T9336] device hsr_slave_1 entered promiscuous mode [ 313.919509][ T9336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.927372][ T9336] Cannot create hsr debugfs directory [ 314.032535][ T9383] loop1: detected capacity change from 0 to 8192 [ 314.064420][ T9383] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.161632][ T9369] BTRFS info (device loop4): enabling ssd optimizations [ 314.218097][ T4477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.251897][ T3579] Bluetooth: hci4: command tx timeout [ 314.382916][ T7846] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 314.754109][ T4477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.822047][ T9383] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 314.863962][ T9383] FAT-fs (loop1): Filesystem has been set read-only [ 314.875338][ T4477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.887567][ T9383] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 314.962897][ T3582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.964050][ T4477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.974411][ T3582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.002456][ T9383] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 315.013253][ T3582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.023790][ T3582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.036822][ T3586] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 315.053154][ T3586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.197963][ T26] audit: type=1800 audit(1718300118.102:269): pid=9396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1944 res=0 errno=0 [ 315.227427][ T9336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.320674][ T3570] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1052) [ 315.409091][ T9419] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.499022][ T9336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.616960][ T9336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.770337][ T9336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.215471][ T9408] chnl_net:caif_netlink_parms(): no params data found [ 316.331883][ T3586] Bluetooth: hci4: command tx timeout [ 316.388336][ T9336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.450137][ T9336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.586458][ T9336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.615246][ T9408] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.629910][ T9408] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.650189][ T9408] device bridge_slave_0 entered promiscuous mode [ 316.659491][ T9336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.687310][ T9408] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.689377][ T9467] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 316.704595][ T9467] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 316.705026][ T9408] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.736711][ T9408] device bridge_slave_1 entered promiscuous mode [ 316.748555][ T9465] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 316.866219][ T9408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.891124][ T9408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.062909][ T9408] team0: Port device team_slave_0 added [ 317.093410][ T4477] device hsr_slave_0 left promiscuous mode [ 317.105819][ T4477] device hsr_slave_1 left promiscuous mode [ 317.123986][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.134270][ T3586] Bluetooth: hci0: command tx timeout [ 317.134934][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.147365][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.162366][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.191528][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.206243][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.229836][ T4477] device bridge_slave_1 left promiscuous mode [ 317.244151][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.270671][ T4477] device bridge_slave_0 left promiscuous mode [ 317.281597][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.298763][ T4477] device veth1_macvtap left promiscuous mode [ 317.305212][ T4477] device veth0_macvtap left promiscuous mode [ 317.318707][ T4477] device veth1_vlan left promiscuous mode [ 317.325333][ T4477] device veth0_vlan left promiscuous mode [ 317.794596][ T4477] team0 (unregistering): Port device team_slave_1 removed [ 317.814326][ T4477] team0 (unregistering): Port device team_slave_0 removed [ 317.838707][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.866879][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.955619][ T4477] bond0 (unregistering): Released all slaves [ 318.008434][ T9408] team0: Port device team_slave_1 added [ 318.079275][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.092618][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.101990][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.183021][ T9408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.212434][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.219914][ T9408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.229287][ T9408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.308609][ T9408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.346293][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.355175][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.391033][ T9336] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.419013][ T3586] Bluetooth: hci4: command tx timeout [ 318.542399][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.551544][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.560470][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.567649][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.643773][ T9408] device hsr_slave_0 entered promiscuous mode [ 318.664545][ T9408] device hsr_slave_1 entered promiscuous mode [ 318.679416][ T9408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.690735][ T9408] Cannot create hsr debugfs directory [ 318.703133][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.712162][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.721154][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.729888][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.737092][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.746213][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.758153][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.832946][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.854364][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.870119][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.893286][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.908386][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.924199][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.943136][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.951924][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.961281][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.970256][ T9517] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.018779][ T9336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.212046][ T3586] Bluetooth: hci0: command tx timeout [ 319.602301][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.613590][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.636124][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.727541][ T9543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 319.736847][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 319.746982][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 319.755846][ T9543] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 319.805268][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 319.826320][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 319.859240][ T9336] device veth0_vlan entered promiscuous mode [ 319.878615][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 319.900888][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 319.925709][ T9408] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 319.990791][ T9336] device veth1_vlan entered promiscuous mode [ 320.025509][ T9408] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 320.052549][ T9408] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 320.080354][ T9408] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 320.092138][ T9551] loop1: detected capacity change from 0 to 256 [ 320.105767][ T9551] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 320.118507][ T9551] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 320.262070][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.270514][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.370849][ T9336] device veth0_macvtap entered promiscuous mode [ 320.431922][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.440823][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.472650][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.492484][ T3586] Bluetooth: hci4: command tx timeout [ 320.500489][ T9336] device veth1_macvtap entered promiscuous mode [ 320.527895][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.540932][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.553413][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.571112][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.586265][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.603010][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.625845][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.642996][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.651385][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.661883][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.679816][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.702577][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.716965][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.727532][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.738471][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.749051][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.796840][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.822346][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.831321][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.845212][ T9568] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.871961][ T9336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.887666][ T9336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.919992][ T9336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.949989][ T9336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.107913][ T9408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.263394][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.271495][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.291956][ T3586] Bluetooth: hci0: command tx timeout [ 321.322620][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.351648][ T9408] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.364162][ T9589] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.372494][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.414129][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.442626][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.453379][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.460555][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.490429][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 321.512673][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.526534][ T9591] loop1: detected capacity change from 0 to 128 [ 321.552725][ T7916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.553423][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.591554][ T7916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.595340][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.600819][ T9591] VFS: unable to find oldfs superblock on device loop1 [ 321.633660][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.640817][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.672324][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.680474][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.741210][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.763838][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.795767][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.842150][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.862282][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.901500][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.922604][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.931354][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.960625][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.992699][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 322.002462][ T9408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 322.518524][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.532097][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.560951][ T9408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.642704][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.661446][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.715802][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.732719][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.739708][ T9601] loop1: detected capacity change from 0 to 32768 [ 322.761975][ T9408] device veth0_vlan entered promiscuous mode [ 322.777535][ T9601] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (9601) [ 322.788467][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.813376][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.824656][ T9408] device veth1_vlan entered promiscuous mode [ 322.882942][ T9601] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 322.897170][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.902227][ T9601] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 322.916005][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.952093][ T9601] BTRFS info (device loop1): force zlib compression, level 3 [ 322.952575][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.959886][ T9601] BTRFS info (device loop1): use zlib compression, level 3 [ 322.991557][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.002570][ T9601] BTRFS info (device loop1): enabling ssd optimizations [ 323.019988][ T9601] BTRFS info (device loop1): using free space tree [ 323.035677][ T9408] device veth0_macvtap entered promiscuous mode [ 323.060927][ T9408] device veth1_macvtap entered promiscuous mode [ 323.081466][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.094424][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.106392][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.117550][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.128186][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.139499][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.149523][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.161947][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.173776][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.183469][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.192131][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.203805][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.213317][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.225593][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.237497][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.248303][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.271795][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.279791][ T9601] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 323.281716][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.303456][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.326169][ T9408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.336947][ T9408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.349957][ T9408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.363911][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 323.372728][ T3586] Bluetooth: hci0: command tx timeout [ 323.382590][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 323.395184][ T9408] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.409345][ T9408] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.477909][ T9408] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.489133][ T9408] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.875960][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.900954][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.962728][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.001375][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.028391][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.069376][ T4070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.234811][ T26] audit: type=1326 audit(1718300127.142:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 324.299359][ T26] audit: type=1326 audit(1718300127.142:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 324.374072][ T26] audit: type=1326 audit(1718300127.142:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 324.442039][ T26] audit: type=1326 audit(1718300127.142:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 324.524797][ T26] audit: type=1326 audit(1718300127.202:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 324.589624][ T26] audit: type=1326 audit(1718300127.202:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc00ca7a627 code=0x7ffc0000 [ 324.671844][ T26] audit: type=1326 audit(1718300127.202:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc00ca40309 code=0x7ffc0000 [ 324.751960][ T26] audit: type=1326 audit(1718300127.202:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fc00ca7cea9 code=0x7ffc0000 [ 324.812198][ T26] audit: type=1326 audit(1718300127.202:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc00ca7a627 code=0x7ffc0000 [ 324.894700][ T26] audit: type=1326 audit(1718300127.202:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc00ca40309 code=0x7ffc0000 [ 325.024459][ T9692] loop1: detected capacity change from 0 to 256 [ 325.371395][ T9656] loop3: detected capacity change from 0 to 40427 [ 325.405059][ T9702] loop4: detected capacity change from 0 to 1024 [ 325.413731][ T9656] F2FS-fs (loop3): invalid crc value [ 325.421063][ T9702] hfsplus: unable to parse mount options [ 325.459526][ T9656] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.598800][ T9656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 325.708546][ T9408] syz-executor.3: attempt to access beyond end of device [ 325.708546][ T9408] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 325.842496][ T9719] loop2: detected capacity change from 0 to 256 [ 326.015890][ T7916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.158202][ T7916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.300351][ T7916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.389312][ T7916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.954936][ T3579] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.972820][ T3579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.983405][ T3579] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 327.014473][ T3579] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 327.022251][ T3579] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 327.029722][ T3579] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.244093][ T9757] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 327.252957][ T9757] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.755880][ T9745] chnl_net:caif_netlink_parms(): no params data found [ 327.840671][ T7916] device hsr_slave_0 left promiscuous mode [ 327.857146][ T7916] device hsr_slave_1 left promiscuous mode [ 327.890211][ T7916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.904224][ T7916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.933859][ T7916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.941328][ T7916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.024986][ T7916] device bridge_slave_1 left promiscuous mode [ 328.031342][ T7916] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.092565][ T7916] device bridge_slave_0 left promiscuous mode [ 328.098912][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.137114][ T7916] device veth1_macvtap left promiscuous mode [ 328.153193][ T7916] device veth0_macvtap left promiscuous mode [ 328.169819][ T7916] device veth1_vlan left promiscuous mode [ 328.191839][ T7916] device veth0_vlan left promiscuous mode [ 328.881366][ T9788] loop1: detected capacity change from 0 to 40427 [ 328.913360][ T7916] team0 (unregistering): Port device team_slave_1 removed [ 328.944147][ T9788] F2FS-fs (loop1): invalid crc value [ 328.969188][ T7916] team0 (unregistering): Port device team_slave_0 removed [ 328.993674][ T9788] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.005793][ T7916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.046541][ T7916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.129477][ T9788] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 329.138243][ T3586] Bluetooth: hci1: command tx timeout [ 329.219551][ T7916] bond0 (unregistering): Released all slaves [ 329.239152][ T3570] syz-executor.1: attempt to access beyond end of device [ 329.239152][ T3570] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 329.323399][ T9810] xt_connbytes: Forcing CT accounting to be enabled [ 329.484562][ T9817] loop3: detected capacity change from 0 to 4096 [ 329.522684][ T9817] NILFS (loop3): invalid segment: Checksum error in segment payload [ 329.563740][ T9745] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.581307][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.590263][ T9817] NILFS (loop3): trying rollback from an earlier position [ 329.608017][ T9745] device bridge_slave_0 entered promiscuous mode [ 329.637295][ T9745] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.663487][ T9817] NILFS (loop3): recovery complete [ 329.667256][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.683777][ T9823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.713754][ T9745] device bridge_slave_1 entered promiscuous mode [ 329.816671][ T9745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.859289][ T9817] overlayfs: upper fs does not support tmpfile. [ 329.866838][ T9745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.901466][ T9817] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 329.973219][ T9817] overlayfs: failed to set xattr on upper [ 329.981972][ T9817] overlayfs: ...falling back to index=off,metacopy=off. [ 329.991182][ T9745] team0: Port device team_slave_0 added [ 330.027380][ T9745] team0: Port device team_slave_1 added [ 330.122242][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.129306][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.193282][ T9745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.214683][ T9745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.224236][ T9745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.250244][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.300772][ T9745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.314368][ T9838] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 330.444662][ T9745] device hsr_slave_0 entered promiscuous mode [ 330.458810][ T9745] device hsr_slave_1 entered promiscuous mode [ 330.485840][ T9745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.503037][ T9745] Cannot create hsr debugfs directory [ 330.515513][ T9845] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.019448][ T9858] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 331.028894][ T9858] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.225455][ T3586] Bluetooth: hci1: command tx timeout [ 331.822973][ T9745] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.841626][ T9745] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.903720][ T9745] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.924893][ T9745] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.028527][ T26] kauditd_printk_skb: 233 callbacks suppressed [ 332.028545][ T26] audit: type=1326 audit(1718300134.932:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f27cea9 code=0x7ffc0000 [ 332.115085][ T26] audit: type=1326 audit(1718300134.932:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8f27cea9 code=0x7ffc0000 [ 332.192880][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.204740][ T26] audit: type=1326 audit(1718300134.932:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f27cea9 code=0x7ffc0000 [ 332.230012][ T9907] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.255320][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.264480][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 332.289081][ T26] audit: type=1326 audit(1718300134.932:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f8f27cea9 code=0x7ffc0000 [ 332.299685][ T9745] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.360211][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 332.383515][ T26] audit: type=1326 audit(1718300134.992:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f8f27cea9 code=0x7ffc0000 [ 332.389247][ T3907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 332.476074][ T3907] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.483322][ T3907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.488136][ T26] audit: type=1326 audit(1718300135.012:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f8f27a627 code=0x7ffc0000 [ 332.542921][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 332.551175][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 332.592402][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 332.618980][ T3912] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.626354][ T3912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.633900][ T26] audit: type=1326 audit(1718300135.012:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f8f240309 code=0x7ffc0000 [ 332.682406][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 332.719555][ T26] audit: type=1326 audit(1718300135.012:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f8f8f27cea9 code=0x7ffc0000 [ 332.736582][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 332.785259][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 332.798983][ T9928] loop3: detected capacity change from 0 to 1024 [ 332.806841][ T26] audit: type=1326 audit(1718300135.012:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f8f27a627 code=0x7ffc0000 [ 332.828031][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 332.881790][ T26] audit: type=1326 audit(1718300135.012:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f8f240309 code=0x7ffc0000 [ 332.882989][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 333.003635][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 333.028034][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 333.063006][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.081895][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 333.104481][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.135870][ T9745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 333.195444][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 333.294815][ T3579] Bluetooth: hci1: command tx timeout [ 333.418531][ T9957] loop3: detected capacity change from 0 to 64 [ 333.832967][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 333.850654][ T3926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 333.888989][ T9745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.133697][ T9989] loop1: detected capacity change from 0 to 512 [ 334.216765][ T9989] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz-executor.1: iget: bad extended attribute block 128 [ 334.254043][ T9995] loop3: detected capacity change from 0 to 64 [ 334.257916][ T9989] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 16 (err -117) [ 334.302449][ T9989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 334.332740][ T9989] ext4 filesystem being mounted at /root/syzkaller-testdir738363936/syzkaller.Ybti5H/463/file1 supports timestamps until 2038 (0x7fffffff) [ 334.391518][ T9989] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1 [ 334.474237][ T3570] EXT4-fs (loop1): unmounting filesystem. [ 334.481078][ T4477] EXT4-fs error (device loop1): ext4_release_dquot:6800: comm kworker/u4:8: Failed to release dquot type 1 [ 334.695936][T10004] loop3: detected capacity change from 0 to 4096 [ 334.791465][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.804869][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.893285][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.912487][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.952934][ T9745] device veth0_vlan entered promiscuous mode [ 334.973062][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.990703][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.016453][ T9745] device veth1_vlan entered promiscuous mode [ 335.095387][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.113552][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.136803][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 335.162757][ T3912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 335.194888][ T9745] device veth0_macvtap entered promiscuous mode [ 335.243397][ T9745] device veth1_macvtap entered promiscuous mode [ 335.314903][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.341788][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.357154][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.367995][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.380210][T10039] loop3: detected capacity change from 0 to 4096 [ 335.386306][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.387452][ T3579] Bluetooth: hci1: command tx timeout [ 335.405020][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.421020][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.433188][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.446204][ T9745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.455690][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.464440][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.472738][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.481723][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.506014][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.558430][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.577482][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.600658][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.622183][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.633605][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.657402][ T9745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.681728][ T9745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.709807][ T9745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.719281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.728819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.741566][ T9745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.750699][ T9745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.764097][ T9745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.773199][ T9745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.914602][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.940485][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.993294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 335.994629][T10060] loop1: detected capacity change from 0 to 4096 [ 336.009493][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.029811][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.087675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.367291][T10078] 9pnet_fd: Insufficient options for proto=fd [ 336.387917][T10080] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.398030][T10080] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.407525][T10080] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.416803][T10080] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.510464][T10080] device vxlan0 entered promiscuous mode [ 336.542820][T10080] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.551932][T10080] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.560849][T10080] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.569892][T10080] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.644582][T10091] loop2: detected capacity change from 0 to 512 [ 336.791378][T10091] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz-executor.2: iget: bad extended attribute block 128 [ 336.830149][T10091] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 336.864698][T10091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 336.896484][T10091] ext4 filesystem being mounted at /root/syzkaller-testdir2638499022/syzkaller.yZHaXo/58/file1 supports timestamps until 2038 (0x7fffffff) [ 337.011124][T10096] loop1: detected capacity change from 0 to 256 [ 337.575555][T10091] __quota_error: 30 callbacks suppressed [ 337.575579][T10091] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 337.640411][T10091] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 337.650760][T10091] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz-executor.2: Failed to acquire dquot type 1 [ 337.804151][ T9336] EXT4-fs (loop2): unmounting filesystem. [ 337.812758][ T7916] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 337.839529][ T7916] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:13: Failed to release dquot type 1 [ 337.937035][T10114] loop2: detected capacity change from 0 to 64 [ 338.055489][T10108] loop4: detected capacity change from 0 to 4096 [ 338.438495][T10133] loop3: detected capacity change from 0 to 512 [ 338.460176][T10136] loop2: detected capacity change from 0 to 512 [ 338.617232][T10137] loop1: detected capacity change from 0 to 256 [ 339.282411][T10133] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz-executor.3: iget: bad extended attribute block 128 [ 339.326730][T10133] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 16 (err -117) [ 339.364638][T10133] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 339.375711][T10136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 339.385739][T10133] ext4 filesystem being mounted at /root/syzkaller-testdir2795575205/syzkaller.6gTUsc/39/file1 supports timestamps until 2038 (0x7fffffff) [ 339.422000][T10136] ext4 filesystem being mounted at /root/syzkaller-testdir2638499022/syzkaller.yZHaXo/62/bus supports timestamps until 2038 (0x7fffffff) [ 339.471841][T10133] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 339.491940][T10133] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 339.523254][T10133] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 1 [ 339.616433][ T9408] EXT4-fs (loop3): unmounting filesystem. [ 339.633458][ T9] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 339.653386][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1 [ 339.696320][T10152] loop4: detected capacity change from 0 to 64 [ 339.764285][ T9336] EXT4-fs (loop2): unmounting filesystem. [ 340.083392][T10164] loop4: detected capacity change from 0 to 4096 [ 340.291760][ T154] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 340.393712][T10179] loop3: detected capacity change from 0 to 2048 [ 340.442653][ T26] audit: type=1800 audit(1718300143.352:547): pid=10183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 340.473520][T10179] loop3: p1 < > p4 [ 340.479093][T10179] loop3: p4 size 8388608 extends beyond EOD, truncated [ 340.517489][T10184] 9pnet_fd: Insufficient options for proto=fd [ 340.894493][ T154] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 340.923089][ T154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.953111][ T154] usb 3-1: Product: syz [ 340.970831][ T154] usb 3-1: Manufacturer: syz [ 340.992026][ T154] usb 3-1: SerialNumber: syz [ 341.021975][ T154] usb 3-1: config 0 descriptor?? [ 341.092869][ T3579] Bluetooth: hci5: urb ffff888021a11000 submission failed (2) [ 341.324649][ T154] usb 3-1: USB disconnect, device number 12 [ 341.731625][T10202] loop1: detected capacity change from 0 to 64 [ 343.050101][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 344.104308][T10250] loop1: detected capacity change from 0 to 2048 [ 344.162562][T10250] loop1: p1 < > p4 [ 344.167201][T10250] loop1: p4 size 8388608 extends beyond EOD, truncated [ 344.320462][T10258] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 344.570143][T10265] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.357314][T10287] loop1: detected capacity change from 0 to 256 [ 346.112777][T10289] loop4: detected capacity change from 0 to 64 [ 346.540404][T10305] vhci_hcd: invalid port number 0 [ 347.111892][T10317] loop3: detected capacity change from 0 to 2048 [ 347.184151][T10317] loop3: p1 < > p4 [ 347.189161][T10317] loop3: p4 size 8388608 extends beyond EOD, truncated [ 347.412363][T10323] loop1: detected capacity change from 0 to 128 [ 347.491796][T10323] FAT-fs (loop1): bogus number of reserved sectors [ 347.498376][T10323] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 347.581780][T10323] FAT-fs (loop1): Can't find a valid FAT filesystem [ 347.880678][T10335] vhci_hcd: invalid port number 0 [ 347.938392][T10338] loop1: detected capacity change from 0 to 512 [ 347.977356][T10338] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 347.992003][T10338] System zones: 1-12 [ 348.047979][T10338] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.1: invalid block [ 348.094175][T10338] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1) [ 348.132102][T10338] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor.1: bg 0: block 361: padding at end of block bitmap is not set [ 348.159676][T10338] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 348.190489][T10338] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 33619980 len 1 [ 348.234226][T10338] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0) [ 348.335612][T10338] EXT4-fs (loop1): 1 truncate cleaned up [ 348.364284][T10338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 348.412082][ T3620] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 348.447577][T10338] EXT4-fs error (device loop1): dx_probe:822: inode #2: comm syz-executor.1: Directory hole found for htree index block [ 348.563553][ T3570] EXT4-fs (loop1): unmounting filesystem. [ 348.737565][T10365] vhci_hcd: invalid port number 0 [ 348.942161][ T3620] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 348.961609][ T3620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.969784][ T3620] usb 4-1: Product: syz [ 349.039561][ T3620] usb 4-1: Manufacturer: syz [ 349.050278][ T3620] usb 4-1: SerialNumber: syz [ 349.063898][ T3620] usb 4-1: config 0 descriptor?? [ 349.118744][ T3579] Bluetooth: hci5: urb ffff888014ec0c00 submission failed (2) [ 349.326851][ T2964] usb 4-1: USB disconnect, device number 7 [ 349.623711][ T26] audit: type=1326 audit(1718300152.532:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10389 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6092a7cea9 code=0x0 [ 349.646068][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.814100][T10397] loop4: detected capacity change from 0 to 256 [ 350.271873][T10409] tmpfs: Bad value for 'nr_inodes' [ 350.546141][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 350.760607][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.854137][T10429] loop4: detected capacity change from 0 to 256 [ 351.615245][T10443] tmpfs: Bad value for 'nr_inodes' [ 351.777959][T10447] cifs: Unknown parameter 'w9' [ 352.027462][T10455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.191175][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.216551][T10462] loop1: detected capacity change from 0 to 2048 [ 352.222690][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.243514][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.271751][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.278321][T10462] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 352.289319][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.307489][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.333403][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.354538][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.369987][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.377972][T10468] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 352.394841][T10462] syz-executor.1: attempt to access beyond end of device [ 352.394841][T10462] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 352.400372][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.417476][ T3579] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 352.426564][ T3579] Bluetooth: hci1: Injecting HCI hardware error event [ 352.436870][ T3586] Bluetooth: hci1: hardware error 0x00 [ 352.461811][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.469503][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.477216][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.485839][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.493598][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.507463][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.515354][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.523109][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.530744][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.538856][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.546627][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.556536][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.564402][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.572019][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.579854][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.588482][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.596253][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.604015][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.619232][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.627102][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.640567][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.652695][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.665777][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.677821][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.693498][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.707738][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.728764][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.753122][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.768466][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.793769][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.809037][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.829134][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.847428][ T154] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 352.905966][ T154] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 352.986832][T10472] device geneve0 entered promiscuous mode [ 353.001138][T10472] device geneve0 left promiscuous mode [ 353.377556][T10458] loop4: detected capacity change from 0 to 40427 [ 353.432773][T10458] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 353.481436][T10458] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 353.542203][T10458] F2FS-fs (loop4): invalid crc value [ 353.570353][T10470] loop3: detected capacity change from 0 to 32768 [ 353.616021][T10458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 353.631892][T10470] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (10470) [ 353.702287][T10470] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 353.752021][T10470] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 353.755202][T10458] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 353.798446][T10458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 353.806173][T10470] BTRFS info (device loop3): using free space tree [ 354.154789][T10470] BTRFS info (device loop3): enabling ssd optimizations [ 354.961781][ T9408] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 355.051953][ T3586] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 355.281855][ T3617] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 355.517519][T10490] loop1: detected capacity change from 0 to 32768 [ 355.556120][T10490] XFS: noikeep mount option is deprecated. [ 355.571924][ T3617] usb 3-1: Using ep0 maxpacket: 32 [ 355.615142][T10535] loop4: detected capacity change from 0 to 256 [ 355.631358][T10490] XFS (loop1): Mounting V5 Filesystem [ 355.680227][T10540] device geneve0 entered promiscuous mode [ 355.689456][T10540] device geneve0 left promiscuous mode [ 355.762081][T10490] XFS (loop1): Ending clean mount [ 355.769281][T10490] XFS (loop1): Quotacheck needed: Please wait. [ 355.822405][ T3617] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 355.840127][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 355.860426][T10490] XFS (loop1): Quotacheck: Done. [ 355.880165][ T3617] usb 3-1: Product: syz [ 355.900210][ T3617] usb 3-1: config 0 descriptor?? [ 355.950971][ T3570] XFS (loop1): Unmounting Filesystem [ 355.974069][ T3617] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 355.980652][ T3617] gspca_stv06xx: st6422 sensor detected [ 356.081071][ T26] audit: type=1326 audit(1718300158.982:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10550 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77a067cea9 code=0x0 [ 356.292038][ T3617] STV06xx: probe of 3-1:0.0 failed with error -71 [ 356.310916][ T3617] usb 3-1: USB disconnect, device number 13 [ 356.369230][T10557] loop3: detected capacity change from 0 to 8192 [ 356.423098][T10557] loop3: p3 p4 < > [ 356.427076][T10557] loop3: p3 start 619312 is beyond EOD, truncated [ 356.467286][T10552] loop4: detected capacity change from 0 to 32768 [ 356.485896][T10552] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (10552) [ 356.502512][T10552] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 356.522728][T10552] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 356.542813][T10552] BTRFS info (device loop4): using free space tree [ 356.597284][T10552] BTRFS info (device loop4): enabling ssd optimizations [ 356.709618][ T9745] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 356.825019][T10588] loop1: detected capacity change from 0 to 1024 [ 356.882896][T10588] EXT4-fs: Ignoring removed oldalloc option [ 356.918090][T10588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 356.932548][T10588] EXT4-fs: test_dummy_encryption requires encrypt feature [ 357.329186][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x7 [ 357.338138][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x6 [ 357.357676][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.371028][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.390814][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.421101][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.459398][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.485237][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.502993][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.520394][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.531591][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.547048][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.559692][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.577518][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.590808][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.608969][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.621717][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.629569][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.654794][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.670805][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.687649][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.692156][ T3929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 357.702770][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.712239][ T154] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 357.724624][ T154] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 357.819862][T10623] tipc: Enabling of bearer rejected, failed to enable media [ 357.979502][ T3929] usb 4-1: Using ep0 maxpacket: 32 [ 357.991579][T10610] loop2: detected capacity change from 0 to 32768 [ 358.010183][T10610] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (10610) [ 358.045246][T10635] loop1: detected capacity change from 0 to 1024 [ 358.061622][T10610] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.083057][T10635] EXT4-fs: Ignoring removed oldalloc option [ 358.089568][T10610] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 358.122131][T10610] BTRFS info (device loop2): using free space tree [ 358.129371][T10635] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.150120][ T26] audit: type=1326 audit(1718300161.052:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10636 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e307cea9 code=0x0 [ 358.155622][T10635] EXT4-fs: test_dummy_encryption requires encrypt feature [ 358.212504][ T3929] usb 4-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 358.240461][ T3929] usb 4-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 358.276150][ T3929] usb 4-1: Product: syz [ 358.332398][ T3929] usb 4-1: config 0 descriptor?? [ 358.354258][T10610] BTRFS info (device loop2): enabling ssd optimizations [ 358.373495][ T3929] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 358.379776][ T3929] gspca_stv06xx: st6422 sensor detected [ 358.454241][ T9336] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.553013][T10664] loop4: detected capacity change from 0 to 8192 [ 358.601578][T10671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 358.621073][T10664] loop4: p3 p4 < > [ 358.626686][T10664] loop4: p3 start 619312 is beyond EOD, truncated [ 358.711933][ T3929] STV06xx: probe of 4-1:0.0 failed with error -71 [ 358.730756][ T3929] usb 4-1: USB disconnect, device number 8 [ 358.768158][T10673] tipc: Enabled bearer , priority 0 [ 359.561797][ T3913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 359.595875][T10703] tipc: Enabling of bearer rejected, already enabled [ 359.904671][ T26] audit: type=1326 audit(1718300162.812:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10706 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6092a7cea9 code=0x0 [ 359.951968][ T3913] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.981735][ T3913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.082193][ T3913] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.091442][ T3913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.117004][ T3913] usb 4-1: SerialNumber: syz [ 360.202508][T10696] loop2: detected capacity change from 0 to 32768 [ 360.210335][T10696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (10696) [ 360.246332][T10696] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.267410][T10696] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 360.291896][T10696] BTRFS info (device loop2): using free space tree [ 360.384765][T10696] BTRFS info (device loop2): enabling ssd optimizations [ 360.434036][ T3913] usb 4-1: 0:2 : does not exist [ 360.442009][ T3929] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 360.462901][ T3913] usb 4-1: USB disconnect, device number 9 [ 360.508244][ T9336] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 360.656411][T10746] loop4: detected capacity change from 0 to 512 [ 360.678365][T10746] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 360.691786][ T3929] usb 2-1: Using ep0 maxpacket: 32 [ 360.698307][T10746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.4: missing EA_INODE flag [ 360.713337][T10746] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 2 err=-117 [ 360.726570][T10746] EXT4-fs (loop4): 1 orphan inode deleted [ 360.733019][T10746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 360.761116][T10746] ceph: Unexpected value for 'acl' [ 360.825196][ T9745] EXT4-fs (loop4): unmounting filesystem. [ 360.884534][T10750] netlink: 7855 bytes leftover after parsing attributes in process `syz-executor.4'. [ 360.892234][ T3929] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 360.923640][ T3929] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 360.942122][ T3929] usb 2-1: Product: syz [ 360.966825][ T3929] usb 2-1: config 0 descriptor?? [ 361.024195][ T3929] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 361.042139][ T3929] gspca_stv06xx: st6422 sensor detected [ 361.175131][T10761] loop3: detected capacity change from 0 to 64 [ 361.332912][ T3929] STV06xx: probe of 2-1:0.0 failed with error -71 [ 361.353232][ T3929] usb 2-1: USB disconnect, device number 10 [ 361.754384][ T3579] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.771515][ T3579] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.783288][ T3579] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.797230][ T3579] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.808727][ T3579] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 361.816409][ T3579] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.001412][T10765] loop2: detected capacity change from 0 to 32768 [ 362.003177][ T4529] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.036181][T10765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (10765) [ 362.108851][T10765] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.149513][T10765] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 362.168605][T10765] BTRFS info (device loop2): using free space tree [ 362.194442][ T4529] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.304643][T10786] netlink: 7855 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.372882][ T4529] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.401809][T10765] BTRFS info (device loop2): enabling ssd optimizations [ 362.510115][ T3586] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.524599][ T3586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.535066][ T3586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.543109][ T9336] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 362.554272][ T3586] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.562529][ T4529] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.574053][ T3586] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 362.581430][ T3586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.742803][ T4195] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 362.843276][ T26] audit: type=1326 audit(1718300165.742:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6092a7cea9 code=0x0 [ 362.948746][T10766] chnl_net:caif_netlink_parms(): no params data found [ 363.111999][ T4195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.136230][ T4195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.242022][ T4195] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.252111][ T4195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.260184][ T4195] usb 2-1: SerialNumber: syz [ 363.295511][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.305863][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.316937][T10766] device bridge_slave_0 entered promiscuous mode [ 363.348067][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.361433][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.364151][T10810] loop2: detected capacity change from 0 to 64 [ 363.383641][T10766] device bridge_slave_1 entered promiscuous mode [ 363.491011][T10792] chnl_net:caif_netlink_parms(): no params data found [ 363.517431][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.544425][ T4195] usb 2-1: 0:2 : does not exist [ 363.561406][ T4195] usb 2-1: USB disconnect, device number 11 [ 363.606045][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.709602][T10766] team0: Port device team_slave_0 added [ 363.724467][T10766] team0: Port device team_slave_1 added [ 363.785433][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.792624][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.818746][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.832244][ T6281] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 363.834293][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.846841][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.875108][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.883476][ T3586] Bluetooth: hci0: command tx timeout [ 363.901909][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.909397][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.918299][T10792] device bridge_slave_0 entered promiscuous mode [ 363.929874][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.937721][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.947165][T10792] device bridge_slave_1 entered promiscuous mode [ 364.061581][T10792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.114218][T10792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.131986][ T6281] usb 1-1: Using ep0 maxpacket: 32 [ 364.136074][T10766] device hsr_slave_0 entered promiscuous mode [ 364.153292][T10766] device hsr_slave_1 entered promiscuous mode [ 364.175343][T10766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.191915][T10766] Cannot create hsr debugfs directory [ 364.298645][T10792] team0: Port device team_slave_0 added [ 364.329495][T10792] team0: Port device team_slave_1 added [ 364.342308][ T6281] usb 1-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 364.351408][ T6281] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 364.386055][ T6281] usb 1-1: Product: syz [ 364.398486][ T6281] usb 1-1: config 0 descriptor?? [ 364.435599][T10820] loop1: detected capacity change from 0 to 4096 [ 364.459550][T10792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.460366][ T6281] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 364.481805][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.507914][ T6281] gspca_stv06xx: st6422 sensor detected [ 364.524625][T10820] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 364.555287][T10792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.593130][T10792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.600124][T10792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.637604][T10820] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 364.638087][ T3579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.654023][ T3582] Bluetooth: hci1: command tx timeout [ 364.672397][ T3587] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.684899][ T3587] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.693735][T10792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.709073][ T3587] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.716926][ T3587] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 364.724364][ T3587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.793540][ T6281] STV06xx: probe of 1-1:0.0 failed with error -71 [ 364.814222][ T6281] usb 1-1: USB disconnect, device number 9 [ 364.865821][T10792] device hsr_slave_0 entered promiscuous mode [ 364.892442][T10792] device hsr_slave_1 entered promiscuous mode [ 364.899471][T10792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.915952][T10792] Cannot create hsr debugfs directory [ 364.930124][ T4529] device hsr_slave_0 left promiscuous mode [ 364.937028][ T4529] device hsr_slave_1 left promiscuous mode [ 364.952639][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.960131][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.977945][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.986497][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.996336][ T4529] device bridge_slave_1 left promiscuous mode [ 365.002707][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.012147][ T4529] device bridge_slave_0 left promiscuous mode [ 365.018419][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.033689][ T4529] device veth1_macvtap left promiscuous mode [ 365.042623][ T4529] device veth0_macvtap left promiscuous mode [ 365.048794][ T4529] device veth1_vlan left promiscuous mode [ 365.055110][ T4529] device veth0_vlan left promiscuous mode [ 365.345818][T10825] loop1: detected capacity change from 0 to 32768 [ 365.355258][T10825] XFS: noikeep mount option is deprecated. [ 365.387870][T10825] XFS (loop1): Mounting V5 Filesystem [ 365.460810][T10825] XFS (loop1): Ending clean mount [ 365.474575][T10825] XFS (loop1): Quotacheck needed: Please wait. [ 365.502331][ T4529] team0 (unregistering): Port device team_slave_1 removed [ 365.533284][ T4529] team0 (unregistering): Port device team_slave_0 removed [ 365.549210][T10825] XFS (loop1): Quotacheck: Done. [ 365.572188][ T4529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.590369][ T4529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.625738][ T3570] XFS (loop1): Unmounting Filesystem [ 365.715924][ T4529] bond0 (unregistering): Released all slaves [ 365.897915][T10766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.932079][ T3586] Bluetooth: hci0: command tx timeout [ 366.059232][T10766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.236852][T10766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.399416][T10766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.689015][T10821] chnl_net:caif_netlink_parms(): no params data found [ 366.731996][ T3586] Bluetooth: hci1: command tx timeout [ 366.812047][ T3586] Bluetooth: hci4: command tx timeout [ 367.007416][T10850] loop1: detected capacity change from 0 to 32768 [ 367.040356][T10821] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.051987][T10821] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.060427][T10821] device bridge_slave_0 entered promiscuous mode [ 367.072564][T10850] XFS (loop1): Mounting V5 Filesystem [ 367.073307][T10821] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.085386][T10821] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.093956][T10821] device bridge_slave_1 entered promiscuous mode [ 367.164337][T10850] XFS (loop1): Ending clean mount [ 367.213820][T10821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.252875][T10821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.275198][ T3570] XFS (loop1): Unmounting Filesystem [ 367.464573][T10821] team0: Port device team_slave_0 added [ 367.518346][T10821] team0: Port device team_slave_1 added [ 367.682956][T10821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.689955][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.751811][T10821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.786430][T10766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.797723][T10821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.811768][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.840729][T10821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.867609][T10766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.917321][T10766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.941844][ T3690] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 367.987173][T10766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.012559][ T3586] Bluetooth: hci0: command tx timeout [ 368.033683][T10821] device hsr_slave_0 entered promiscuous mode [ 368.040883][T10821] device hsr_slave_1 entered promiscuous mode [ 368.048611][T10821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.056463][T10821] Cannot create hsr debugfs directory [ 368.068953][T10874] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 368.134958][T10792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.201797][ T3690] usb 1-1: Using ep0 maxpacket: 8 [ 368.206998][T10792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.223209][T10792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.264471][T10792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.271351][T10876] ------------[ cut here ]------------ [ 368.277164][T10876] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 368.288463][T10876] WARNING: CPU: 1 PID: 10876 at net/mac80211/main.c:287 ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.299785][T10876] Modules linked in: [ 368.303958][T10876] CPU: 1 PID: 10876 Comm: syz-executor.1 Not tainted 6.1.93-syzkaller #0 [ 368.312508][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.322716][T10876] RIP: 0010:ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.329871][T10876] Code: 24 1e e0 f7 49 8b 86 20 09 00 00 49 81 c6 40 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 40 a1 fc 8b 4c 89 f6 89 ea e8 6e 9b 50 f7 <0f> 0b e9 3a ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 368.349587][T10876] RSP: 0018:ffffc900034c73c8 EFLAGS: 00010246 [ 368.355754][T10876] RAX: 31e8c47a88f2ee00 RBX: 0000000002000000 RCX: 0000000000040000 [ 368.363860][T10876] RDX: ffffc90005392000 RSI: 000000000000391d RDI: 000000000000391e [ 368.371937][T10876] RBP: 0000000000000000 R08: ffffffff815292de R09: fffff52000698dd9 [ 368.379961][T10876] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076de0e80 [ 368.388009][T10876] R13: dffffc0000000000 R14: ffff888013ed8000 R15: ffff888013eda260 [ 368.396092][T10876] FS: 00007fc00d7176c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 368.401885][ T3690] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 368.405078][T10876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.424668][T10876] CR2: 0000000020000080 CR3: 00000000613b1000 CR4: 00000000003506e0 [ 368.432739][T10876] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.440753][T10876] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.448805][T10876] Call Trace: [ 368.452157][T10876] [ 368.455122][T10876] ? __warn+0x15a/0x520 [ 368.459322][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.465918][T10876] ? report_bug+0x2af/0x500 [ 368.470467][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.477064][T10876] ? handle_bug+0x3d/0x70 [ 368.481437][T10876] ? exc_invalid_op+0x16/0x40 [ 368.486195][T10876] ? asm_exc_invalid_op+0x16/0x20 [ 368.491314][T10876] ? __warn_printk+0x28e/0x350 [ 368.496167][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.502763][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.509324][T10876] ieee80211_set_mcast_rate+0x42/0x50 [ 368.514799][T10876] ? ieee80211_leave_ibss+0x20/0x20 [ 368.520064][T10876] nl80211_set_mcast_rate+0xaf0/0xec0 [ 368.525588][T10876] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 368.531459][T10876] genl_rcv_msg+0xc1a/0xf70 [ 368.536062][T10876] ? genl_bind+0x400/0x400 [ 368.540547][T10876] ? read_lock_is_recursive+0x10/0x10 [ 368.546024][T10876] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 368.551924][T10876] netlink_rcv_skb+0x1cd/0x410 [ 368.556827][T10876] ? genl_bind+0x400/0x400 [ 368.557812][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.561266][T10876] ? netlink_ack+0x1290/0x1290 [ 368.561325][T10876] genl_rcv+0x24/0x40 [ 368.561348][T10876] netlink_unicast+0x7d8/0x970 [ 368.561393][T10876] ? netlink_detachskb+0x90/0x90 [ 368.561424][T10876] ? __virt_addr_valid+0x44a/0x520 [ 368.561460][T10876] ? __phys_addr_symbol+0x2b/0x70 [ 368.561490][T10876] ? __check_object_size+0x4dd/0xa30 [ 368.561519][T10876] ? bpf_lsm_netlink_send+0x5/0x10 [ 368.561553][T10876] netlink_sendmsg+0xa26/0xd60 [ 368.561590][T10876] ? netlink_getsockopt+0x580/0x580 [ 368.561616][T10876] ? aa_sock_msg_perm+0x91/0x150 [ 368.561699][T10876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 368.561730][T10876] ? security_socket_sendmsg+0x7d/0xa0 [ 368.561758][T10876] ? netlink_getsockopt+0x580/0x580 [ 368.561784][T10876] ____sys_sendmsg+0x5a5/0x8f0 [ 368.561818][T10876] ? __sys_sendmsg_sock+0x30/0x30 [ 368.602183][ T3690] usb 1-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice= 0.40 [ 368.602595][T10876] __sys_sendmsg+0x2a9/0x390 [ 368.607651][ T3690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.612550][T10876] ? ____sys_sendmsg+0x8f0/0x8f0 [ 368.612601][T10876] ? rcu_is_watching+0x11/0xb0 [ 368.612648][T10876] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 368.612696][T10876] ? syscall_enter_from_user_mode+0x2e/0x230 [ 368.612725][T10876] ? lockdep_hardirqs_on+0x94/0x130 [ 368.638312][ T3690] usb 1-1: Product: syz [ 368.638970][T10876] ? syscall_enter_from_user_mode+0x2e/0x230 [ 368.660884][ T3690] usb 1-1: Manufacturer: syz [ 368.662779][T10876] do_syscall_64+0x3b/0xb0 [ 368.662819][T10876] ? clear_bhb_loop+0x45/0xa0 [ 368.662856][T10876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.662888][T10876] RIP: 0033:0x7fc00ca7cea9 [ 368.662921][T10876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 368.662942][T10876] RSP: 002b:00007fc00d7170c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.662969][T10876] RAX: ffffffffffffffda RBX: 00007fc00cbb3f80 RCX: 00007fc00ca7cea9 [ 368.662987][T10876] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 368.663003][T10876] RBP: 00007fc00caebff4 R08: 0000000000000000 R09: 0000000000000000 [ 368.663018][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.663033][T10876] R13: 000000000000000b R14: 00007fc00cbb3f80 R15: 00007ffd48bb0bc8 [ 368.663069][T10876] [ 368.663080][T10876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 368.663091][T10876] CPU: 1 PID: 10876 Comm: syz-executor.1 Not tainted 6.1.93-syzkaller #0 [ 368.663113][T10876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.663125][T10876] Call Trace: [ 368.663131][T10876] [ 368.663139][T10876] dump_stack_lvl+0x1e3/0x2cb [ 368.663176][T10876] ? nf_tcp_handle_invalid+0x642/0x642 [ 368.663210][T10876] ? panic+0x764/0x764 [ 368.663234][T10876] ? 0xffffffffa0003b40 [ 368.663254][T10876] ? vscnprintf+0x59/0x80 [ 368.663285][T10876] panic+0x318/0x764 [ 368.663313][T10876] ? __warn+0x169/0x520 [ 368.663341][T10876] ? memcpy_page_flushcache+0xfc/0xfc [ 368.663385][T10876] __warn+0x348/0x520 [ 368.663408][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.663444][T10876] report_bug+0x2af/0x500 [ 368.663466][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.663500][T10876] handle_bug+0x3d/0x70 [ 368.663520][T10876] exc_invalid_op+0x16/0x40 [ 368.663542][T10876] asm_exc_invalid_op+0x16/0x20 [ 368.663572][T10876] RIP: 0010:ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.663609][T10876] Code: 24 1e e0 f7 49 8b 86 20 09 00 00 49 81 c6 40 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 40 a1 fc 8b 4c 89 f6 89 ea e8 6e 9b 50 f7 <0f> 0b e9 3a ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 368.663629][T10876] RSP: 0018:ffffc900034c73c8 EFLAGS: 00010246 [ 368.663649][T10876] RAX: 31e8c47a88f2ee00 RBX: 0000000002000000 RCX: 0000000000040000 [ 368.663666][T10876] RDX: ffffc90005392000 RSI: 000000000000391d RDI: 000000000000391e [ 368.663681][T10876] RBP: 0000000000000000 R08: ffffffff815292de R09: fffff52000698dd9 [ 368.663697][T10876] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076de0e80 [ 368.663714][T10876] R13: dffffc0000000000 R14: ffff888013ed8000 R15: ffff888013eda260 [ 368.663739][T10876] ? __warn_printk+0x28e/0x350 [ 368.663773][T10876] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 368.663806][T10876] ieee80211_set_mcast_rate+0x42/0x50 [ 368.663842][T10876] ? ieee80211_leave_ibss+0x20/0x20 [ 368.663877][T10876] nl80211_set_mcast_rate+0xaf0/0xec0 [ 368.663915][T10876] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 368.663961][T10876] genl_rcv_msg+0xc1a/0xf70 [ 368.663997][T10876] ? genl_bind+0x400/0x400 [ 368.664042][T10876] ? read_lock_is_recursive+0x10/0x10 [ 368.664090][T10876] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 368.664137][T10876] netlink_rcv_skb+0x1cd/0x410 [ 368.664175][T10876] ? genl_bind+0x400/0x400 [ 368.664201][T10876] ? netlink_ack+0x1290/0x1290 [ 368.664256][T10876] genl_rcv+0x24/0x40 [ 368.664278][T10876] netlink_unicast+0x7d8/0x970 [ 368.664323][T10876] ? netlink_detachskb+0x90/0x90 [ 368.664355][T10876] ? __virt_addr_valid+0x44a/0x520 [ 368.664386][T10876] ? __phys_addr_symbol+0x2b/0x70 [ 368.664416][T10876] ? __check_object_size+0x4dd/0xa30 [ 368.664445][T10876] ? bpf_lsm_netlink_send+0x5/0x10 [ 368.664479][T10876] netlink_sendmsg+0xa26/0xd60 [ 368.664515][T10876] ? netlink_getsockopt+0x580/0x580 [ 368.664541][T10876] ? aa_sock_msg_perm+0x91/0x150 [ 368.664574][T10876] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 368.664610][T10876] ? security_socket_sendmsg+0x7d/0xa0 [ 368.664637][T10876] ? netlink_getsockopt+0x580/0x580 [ 368.664662][T10876] ____sys_sendmsg+0x5a5/0x8f0 [ 368.664697][T10876] ? __sys_sendmsg_sock+0x30/0x30 [ 368.664740][T10876] __sys_sendmsg+0x2a9/0x390 [ 368.664766][T10876] ? ____sys_sendmsg+0x8f0/0x8f0 [ 368.664803][T10876] ? rcu_is_watching+0x11/0xb0 [ 368.664844][T10876] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 368.664893][T10876] ? syscall_enter_from_user_mode+0x2e/0x230 [ 368.664919][T10876] ? lockdep_hardirqs_on+0x94/0x130 [ 368.664947][T10876] ? syscall_enter_from_user_mode+0x2e/0x230 [ 368.664979][T10876] do_syscall_64+0x3b/0xb0 [ 368.665010][T10876] ? clear_bhb_loop+0x45/0xa0 [ 368.665045][T10876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.665076][T10876] RIP: 0033:0x7fc00ca7cea9 [ 368.665094][T10876] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 368.665113][T10876] RSP: 002b:00007fc00d7170c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.665136][T10876] RAX: ffffffffffffffda RBX: 00007fc00cbb3f80 RCX: 00007fc00ca7cea9 [ 368.665153][T10876] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 368.665168][T10876] RBP: 00007fc00caebff4 R08: 0000000000000000 R09: 0000000000000000 [ 368.665183][T10876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.665197][T10876] R13: 000000000000000b R14: 00007fc00cbb3f80 R15: 00007ffd48bb0bc8 [ 368.665231][T10876] [ 368.671315][T10876] Kernel Offset: disabled [ 369.251743][T10876] Rebooting in 86400 seconds..